Cyber Newsroom Feed
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 5 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.

-
The Cyber Express
Cisco Patches Critical Vulnerability Affecting VPN Services
Cisco Systems released a critical advisory regarding a vulnerability in the Remote Access VPN (RAVPN) service associated with its Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) s ... Read more

-
seclists.org
SEC Consult SA-20241024-0 :: Unauthenticated Path Traversal Vulnerability in Lawo AG - vsm LTC Time Sync (vTimeSync) (CVE-2024-6049)
Full Disclosure mailing list archives SEC Consult SA-20241024-0 :: Unauthenticated Path Traversal Vulnerability in Lawo AG - vsm LTC Time Sync (vTimeSync) (CVE-2024-6049) From: SEC Consult Vulnerabili ... Read more

-
Cybersecurity News
CVE-2024-47901 (CVSS 10): Critical Security Flaw in Siemens InterMesh
Siemens has issued a security advisory addressing multiple vulnerabilities in its InterMesh wireless alarm reporting system. These vulnerabilities could allow an unauthenticated, remote attacker to ex ... Read more

-
Cybersecurity News
CISA Sounds Alarm on Actively Exploited Cisco and Roundcube Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about two actively exploited vulnerabilities affecting Cisco networking devices and the popular Roundcube ... Read more

-
Cybersecurity News
One Identity Safeguard for Privileged Sessions Vulnerable to Authentication Bypass – CVE-2024-40595
A newly disclosed vulnerability in One Identity Safeguard for Privileged Sessions (SPS) could allow attackers to bypass authentication and gain unauthorized access to privileged sessions. The vulnerab ... Read more

-
Cybersecurity News
AWS CDK Vulnerability: Missing S3 Bucket Could Lead to Account Takeover
Security researchers Ofek Itach and Yakir Kadkoda from Aqua Security’s Team Nautilus uncovered a critical vulnerability in the AWS Cloud Development Kit (CDK) that could lead to a full account takeove ... Read more

-
TheCyberThrone
CISA adds Cisco and RoundCube Webmail bugs to its KEV Catalog
The US CISA has added Cisco ASA and FTD flaw, RoundCube Webmail flaw to its Known Exploited Vulnerabilities Catalog based on the evidence of active exploitation.CVE-2024-20481 With a CVSS score of 5.8 ... Read more

-
Cybersecurity News
NVIDIA Patches Multi Vulnerabilities in Windows and Linux GPU Drivers
NVIDIA has issued a security bulletin addressing multiple vulnerabilities in its GPU Display Driver for both Windows and Linux. These vulnerabilities, if exploited, could allow attackers to execute ma ... Read more

-
Dark Reading
Critical Bug Exploited in Fortinet's Management Console
Source: Thomas Kyhn via Alamy Stock PhotoAn unknown threat actor has compromised Fortinet devices en masse across various industries, leaving no particular indication of what they plan to do next.The ... Read more

-
The Register
Emergency patch: Cisco fixes bug under exploit in brute-force attacks
Cisco has patched an already exploited security hole in its Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software that miscreants have been brute-forcing in attempted denial of ... Read more