| Jul 31, 2024 Flash Notice: Exploitation of VMware ESXi Authentication Bypass Vulnerability A critical authentication bypass vulnerability (CVE-2024-37085) affecting VMware ESXi hypervisors is being actively exploited by ransomware groups.
| Jul 19, 2024 Flash Notice: UPDATE - Widespread Outages Linked to CrowdStrike Software Update UPDATE (7/22/2024) - Most are now aware of the CrowdStrike outage and its global impact. Currently, threat actors are attempting to exploit this situation.
| Jul 19, 2024 Flash Notice: Critical Vulnerability in Cisco Smart Software Manager A critical vulnerability, tracked as CVE-2024-20419 (CVSS 10), has been found in Cisco Smart Software Manager On-Prem (SSM On-Prem).
| Jul 15, 2024 Flash Notice: PATCH NOW - Critical PHP Vulnerability Exploited by Attackers The PHP Group has patched a significant vulnerability affecting all versions of PHP on Windows systems, tracked as CVE-2024-4577 (CVSS 9.8).
| Jul 15, 2024 Flash Notice: Critical Zero-Day Vulnerability Patched by Microsoft Microsoft recently released a critical patch for CVE-2024-38112, a spoofing vulnerability in the Windows MSHTML Platform that's been actively exploited.
| Jul 11, 2024 Flash Notice: Critical RADIUS Protocol Vulnerability A newly discovered critical vulnerability in the RADIUS protocol, named BlastRADIUS, exposes most networking equipment to Man-in-the-Middle (MitM) attacks.
| Jul 8, 2024 Flash Notice: Xctdoor Malware Targeting IIS Servers This week, security researchers discovered that Xctdoor malware is actively targeting IIS servers to distribute additional malicious software.
| Jul 1, 2024 Flash Notice: Attackers Attempting to Exploit Critical MOVEit Transfer Vulnerabilities Exploitation attempts targeting critical MOVEit Transfer vulnerabilities, CVE-2024-5806 and CVE-2024-5805, have begun shortly after its disclosure.
| Jun 26, 2024 Flash Notice: High Severity Atlassian Confluence Vulnerability A high-severity vulnerability, tracked as CVE-2024-21683 (CVSS 8.3), has been discovered by SonicWall Capture Labs.
| Jun 25, 2024 Flash Notice: Critical Firmware Vulnerability in Intel Powered Computers A severe vulnerability, tracked as CVE-2024-0762, has been found in Phoenix SecureCore UEFI firmware, affecting a broad range of Intel-powered computers.