CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 5 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
Cybersecurity News
SolarWinds Web Help Desk Hit With Critical RCE Flaw (CVE-2024-28988, CVSS 9.8)
SolarWinds, a major provider of IT management software, has issued a security advisory addressing a severe vulnerability in its Web Help Desk (WHD) platform. The vulnerability, tracked as CVE-2024-289 ... Read more
-
Cybersecurity News
F5 BIG-IP Vulnerability (CVE-2024-45844): Access Control Bypass Risk, PoC Available
A critical vulnerability has been identified in F5 BIG-IP, a popular network traffic management and security solution. The vulnerability, tracked as CVE-2024-45844 and assigned a CVSSv4 score of 8.6 ( ... Read more
-
Cybersecurity News
Spring Framework Vulnerability CVE-2024-38819: Path Traversal Risk in Web Apps
A newly disclosed path traversal vulnerability, tracked as CVE-2024-38819, has been found in the widely used Spring Framework. This vulnerability, which has been assigned a CVSS score of 7.5, poses a ... Read more
-
TheCyberThrone
CISA added Veeam Backup CVE-2024-40711 to its KEV Catalog
The US CISA has added Veeam Backup flaw to its Known Exploited Vulnerabilities Catalog based on the evidence of active exploitation.CVE-2024-40711 Veeam Backup and Replication contains a deserializati ... Read more
-
Cybersecurity News
HORUS Protector: The New Undetectable Malware Crypter Threatening Cybersecurity
In a recent discovery by the SonicWall Capture Labs threat research team, a new malware crypter known as “HORUS Protector” has emerged, presenting a significant threat to cybersecurity defenses. This ... Read more
-
Cybersecurity News
Cisco ATA 190 Series Analog Telephone Adapter Firmware Flaws Exposed: Patch Now!
Cisco has recently disclosed a series of high-severity vulnerabilities in the Cisco ATA 190 Series Analog Telephone Adapter firmware, including both on-premises and multiplatform variants. These vulne ... Read more
-
Cybersecurity News
HM Surf (CVE-2024-44133): macOS Flaw Exposing Cameras and Microphones to Hackers, PoC Published
In a significant discovery by Microsoft Threat Intelligence, a vulnerability in macOS, identified as CVE-2024-44133, has been found to bypass Apple’s Transparency, Consent, and Control (TCC) technolog ... Read more
-
TheCyberThrone
VMware fixes CVE-2024-38814 in HCX
Broadcom disclosed a SQL injection vulnerability affecting VMware HCX, a key component used in multi-cloud infrastructures to enable application migration and disaster recovery.The vulnerability track ... Read more
-
The Cyber Express
GitHub Issues Urgent Security Advisory on Critical Vulnerability in GitHub Enterprise Server
GitHub has released a critical security advisory highlighting vulnerabilities that merit immediate action from users of GitHub Enterprise Server (GHES). The advisory focuses on a GitHub vulnerability ... Read more
-
Krypt3ia
Comprehensive Threat Intelligence Report: The Rise of Nation-State Cyber Attacks and Their Convergence with Cybercrime
TLP: WHITE This threat intelligence report was written in tandem between Krypt3ia and the ICEBREAKER Threat Intelligence Analyst created by Krypt3ia. Executive Summary Over the past year, nation-state ... Read more