306b20e791e762e784f9a514
2021-074: CISCO Critical Vulnerability Saturday, December 18, 2021 04:05:00 PM CET On December 16th, CISCO updated its security advisory related to CVE-2021-44228 affecting many of its products. While this CVE affects the Java logging library log4j, all products using this library are vulnerable to at least Unauthenticated Remote Code Execution.
7427d4b2830aae7f80fa6aa6
2023-094: Multiple Critical Vulnerabilities in Atlassian Products Wednesday, December 06, 2023 12:11:25 PM CET On December 5, 2023, Atlassian released several security advisories regarding critical vulnerabilities affecting multiple Atlassian products. The exploitation of these vulnerabilities could lead to Remote Code Execution. It is recommended to upgrade to a fixed version as soon as possible.
c13f0f778db9976337297377
2020-060: UPDATE: Multiple Vulnerabilities in SolarWinds Orion Wednesday, December 16, 2020 12:37:00 PM CET Multiple vulnerabilities have been discovered in SolarWinds Orion, a popular Network Management System software, the most severe of which could allow for arbitrary code execution. Numerous public and private organisations around the world are affected. Additionally, the attackers gained access to victims via trojanised SolarWinds Orion updates. The attack was a very sophisticated supply ch
d9246c5ab21dcbbc5e180cef
2021-075: VMWare Critical Vulnerability Saturday, December 18, 2021 04:20:00 PM CET On December 17th, VMWare updated its security advisory related to CVE-2021-44228, and CVE-2021-45046 affecting many of its products. While these CVE affect the Java logging library log4j, all products using this library are vulnerable at least to Unauthenticated Remote Code Execution.
021dad8bb0c4c9076a95ac7d
2017-012: UPDATE! WannaCry Ransomware Campaign Exploiting SMB Vulnerability Monday, May 22, 2017 03:46:00 PM CEST A large ransomware campaign has been observed since Friday, May 12th, 2017. The payload delivered is a variant of ransomware malware called WannaCry. It appears to infect computers through a recent SMB vulnerability in Microsoft Windows operating system (CVE-2017-0145).
02b23e9258cdd1ad17334e61
2023-093: High Vulnerabilities in Google Chrome Wednesday, November 29, 2023 06:08:09 PM CET On November 28, Google has released an emergency security update to address six high vulnerabilities found in Chrome. Google is aware that an exploit exists for one of the vulnerabilities, tracked as "CVE-2023-6345".
033d5b33e3749dbd93f31a54
2021-076: Fortinet Critical Vulnerability Saturday, December 18, 2021 04:33:00 PM CET On December 15th, Fortinet PSIRT updated its advisory related to CVE-2021-44228 and CVE-2021-45046 affecting Fortinet products. While these CVE affect the Java logging library "log4j", all products using this library are vulnerable to Unauthenticated Remote Code Execution.
04fc97c8f2852a360cdf4afc
2023
05241d6aac9489a4cf120337
2022-073: UPDATE: OpenSSL Critical Vulnerability Tuesday, November 01, 2022 09:55:00 PM CET On November 1, 2022, the OpenSSL project team has released a new version of the openssl library version 3. The version 3.0.7 fixes two HIGH vulnerabilities, CVE-2022-3602 and CVE-2022-3786, that could lead to Denial of Service conditions, or Remote Code Execution in some cases. It is recommended upgrading openssl to the last versions. Proof of concepts are now available.
15a376060dccc646475be773
2022-050: Multiple Critical Vulnerabilities in Microsoft Products Thursday, July 14, 2022 09:15:00 AM CEST On the 12th of July, Microsoft released July's 2022 Patch Tuesday including fixes for one actively exploited zero-day vulnerability and a total of 84 flaws. A zero-day vulnerability tracked as CVE-2022-22047 concerns a Windows CSRSS elevation of privilege, allowing an attacker to gain SYSTEM privileges. Out of the 84 other security flows, four of them are classified as Critical, as they all
15cbb5574c21f1cb85f6dd18
2021-062: NPM Libraries Hijacked Friday, November 05, 2021 02:12:00 PM CET On November 4, malicious code was discovered in two popular NPM libraries after unexpected releases have been published for the "coa" library. Hours after these new releases, the "rc" library was also found hijacked. The first library is a parser for command-line options, while the second is used as a configuration loader for applications. Malicious releases were all published on November 4, versions "2.0.3", "2.0.4", "2.
1e24f1b1e4afc17c10062875
2021-049: Multiple Zero-Day Vulnerabilities in Apple Products Tuesday, September 14, 2021 10:59:00 AM CEST On September 13, Apple has released multiple security updates to address two zero-day vulnerabilities tracked as CVE-2021-30858 and CVE-2021-30860 in multiple products. An attacker could exploit these vulnerabilities to take control of an affected device. One vulnerability is known to be used to install the Pegasus spyware on iPhones and Apple is aware of a report that this issue may have b
1e750323f48817bd0a0db67d
2017-023: UPDATE RSA Key Generation Prone to Factorization Attack Wednesday, October 18, 2017 12:17:00 PM CEST A vulnerability (CVE-2017-15361) in the procedure of RSA key generation used by a software library allows a practical factorization attack. As a result it is possible to compute the private part of an RSA key based only on its public part. The vulnerable library is used in cryptographic smartcards, security tokens, and other secure hardware chips manufactured by Infineon Technologies AG
2680cc37ee8f65e8e40e6ae1
Cyber Brief 24-05 - April 2024 Thursday, May 02, 2024 06:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.
33528a888b3e62c8f74608f6
2024-118: Critical Vulnerability in 7-Zip Monday, November 25, 2024 09:34:13 AM CET A severe security vulnerability has been discovered in 7-Zip, the popular file compression utility, allowing remote attackers to execute malicious code through specially crafted archives. The vulnerability tracked as CVE-2024-11477 has received a high CVSS score of 7.8.
335af501a62e0aa64ae0161c
2025-011: Critical Vulnerabilities in Gitlab Friday, March 14, 2025 05:03:26 PM CET On March 13, 2025, GitLab released security updates for Community Edition (CE) and Enterprise Edition (EE), addressing nine vulnerabilities, including two critical severity flaws in the "ruby-saml" library used for SAML Single Sign-On (SSO) authentication. It is recommended updating affected assets as soon as possible.
3a4d290f6b38233ff5bd0ba2
2023-066: Mozilla Firefox and Thunderbird Zero-Day Vulnerability Thursday, September 14, 2023 06:26:54 PM CEST On September 12, 2023, Mozilla released an emergency security update that addresses a zero-day vulnerability, which has been exploited in the wild. The vulnerability impacts its Firefox web browser and Thunderbird email client and is being tracked as CVE-2023-4863. The issue is being exploited in the wild. [Update] Please note that this vulnerability also impacts other browsers and any
423c60784c60459d29cc1761
2023-057: Microsoft August 2023 Patch Tuesday Thursday, August 10, 2023 01:52:15 PM CEST Microsoft has released its August 2023 Patch Tuesday Security Updates, addressing a total of 74 Microsoft CVEs, including two actively exploited zero-day vulnerabilities, and six Critical vulnerabilities.
42c010c087f373ced48c4f6a
2021-073: Adobe ColdFusion Critical Vulnerability Friday, December 17, 2021 04:07:00 PM CET On December 16th, Adobe updated its security advisory related to CVE-2021-44228 affecting ColdFusion products. While this CVE affects the Java logging library log4j, all products using this library are vulnerable to Unauthenticated Remote Code Execution.
4b789a247e4930d4850ae736
2020-055: Critical Vulnerability in the Solaris PAM Library Thursday, November 05, 2020 02:32:00 PM CET Within its monthly Critical Patch Update Advisory, Oracle released patch for a critical vulnerability affecting Solaris Pluggable Authentication Module (PAM).FireEye discovered during an investigation traces of exploitation of this vulnerability since 2018. Moreover, FireEye associated the vulnerability with Oracle Solaris SSHD Remote Root Exploit identified on black-market for sale. This vuln