Cyber alerts

Published Wednesday 15 January 2025 (04:12) (updated 15 January 2025)

Microsoft Releases January 2025 Security Updates

Scheduled updates for Microsoft products, including security updates for 159 vulnerabilities, with three reported as actively exploited

Published Friday 17 January 2025 (04:05) (updated 17 January 2025)

Proof-of-Concept Exploit Released for CVE-2024-53691 in QNAP QTS and QuTS NAS

Security researchers claim CVE-2024-53691 could lead to RCE

Published Thursday 23 January 2025 (02:27) (updated 23 January 2025)

Exploitation of Critical Vulnerability CVE-2025-23006 in SonicWall SMA1000 Series Appliances

Exploitation could lead to execution of arbitrary OS commands in SonicWall SMA1000 Series Appliances 

Published Tuesday 28 January 2025 (03:31) (updated 29 January 2025)

Apple Releases Security Updates for Multiple Products

Security updates include remediation for an exploited zero-day privilege escalation vulnerability affecting iOS, iPadOS, and macOS 

Published Friday 31 January 2025 (04:13) (updated 31 January 2025)

TeamViewer Releases Security Updates for Privilege Escalation Vulnerability

A vulnerability has been discovered in the TeamViewer Clients for Windows 

Published Monday 27 January 2025 (04:58) (updated 4 February 2025)

Active Exploitation Reported for CVE-2025-0411 in 7-Zip

Observed exploitation has involved targeted spear-phishing campaigns, using homoglyph attacks to spoof document extensions to lure users

Published Thursday 6 February 2025 (03:11) (updated 6 February 2025)

Cisco Releases Security Advisories for Multiple Products

Nine security advisories address multiple vulnerabilities, including one critical and two high severity advisories

Published Tuesday 11 February 2025 (03:21) (updated 11 February 2025)

Proof-of-Concept Exploit for AnyDesk Vulnerability (CVE-2024-12754)

Exploitation of this vulnerability could allow an attacker to read arbitrary files, including stored credentials

Published Tuesday 11 February 2025 (03:21) (updated 11 February 2025)

MicroDicom Releases DICOM Viewer Software Update

A privileged attacker could exploit CVE-2025-1002 to alter network traffic and perform a machine-in-the-middle (MitM) attack

Published Wednesday 12 February 2025 (12:04) (updated 12 February 2025)

Microsoft Releases February 2025 Security Updates

Scheduled updates for Microsoft products, including security updates for 63 vulnerabilities, of which two are reported as exploited