CISA: Best Practices to Configure BIG-IP LTM Systems to Encrypt HTTP Persistence Cookies
Best Practices to Configure BIG-IP LTM Systems to Encrypt HTTP Persistence Cookies CISA has observed cyber threat actors leveraging unencrypted...
CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA Adds Three Known Exploited Vulnerabilities to Catalog CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based...
CISA: Guidance: Framing Software Component Transparency: Establishing a Common Software Bill of Materials (SBOM)
Guidance: Framing Software Component Transparency: Establishing a Common Software Bill of Materials (SBOM) Today, CISA published the Framing Software Component Transparency, created...
CISA: CISA Releases Two Industrial Control Systems Advisories
CISA Releases Two Industrial Control Systems Advisories CISA released two Industrial Control Systems (ICS) advisories on October 15, 2024. These...
CISA: CISA and FBI Release Joint Guidance on Product Security Bad Practices for Public Comment
CISA and FBI Release Joint Guidance on Product Security Bad Practices for Public Comment Today, the Cybersecurity and Infrastructure Security...
CISA: CISA Releases Seven Industrial Control Systems Advisories
CISA Releases Seven Industrial Control Systems Advisories CISA released seven Industrial Control Systems (ICS) advisories on October 17, 2024. These...
CISA: CISA, FBI, NSA, and International Partners Release Advisory on Iranian Cyber Actors Targeting Critical Infrastructure Organizations Using Brute Force
CISA, FBI, NSA, and International Partners Release Advisory on Iranian Cyber Actors Targeting Critical Infrastructure Organizations Using Brute Force Today,...
CISA: Oracle Releases Quarterly Critical Patch Update Advisory for October 2024
Oracle Releases Quarterly Critical Patch Update Advisory for October 2024 Oracle released its quarterly Critical Patch Update Advisory for October...
CISA: CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based...
[CICADA3301] – Ransomware Victim: INDIBA Group
Ransomware Group: CICADA3301 VICTIM NAME: INDIBA Group NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
CVE Alert: CVE-2024-49295
Vulnerability Summary: CVE-2024-49295 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PressTigers Simple Testimonials...
CVE Alert: CVE-2024-49292
Vulnerability Summary: CVE-2024-49292 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Exclusive Addons Exclusive...
CVE Alert: CVE-2024-49289
Vulnerability Summary: CVE-2024-49289 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gora Tech LLC...
CVE Alert: CVE-2024-49301
Vulnerability Summary: CVE-2024-49301 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Sinan Yorulmaz G...
CVE Alert: CVE-2024-49302
Vulnerability Summary: CVE-2024-49302 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Portfoliohub WordPress Portfolio...
CVE Alert: CVE-2024-49311
Vulnerability Summary: CVE-2024-49311 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WisdmLabs Edwiser Bridge...
CVE Alert: CVE-2024-49296
Vulnerability Summary: CVE-2024-49296 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Coder426 Custom Add...
CVE Alert: CVE-2024-49298
Vulnerability Summary: CVE-2024-49298 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Pepro Dev. Group...
CVE Alert: CVE-2024-49309
Vulnerability Summary: CVE-2024-49309 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Digitally allows Reflected...
CVE Alert: CVE-2024-49310
Vulnerability Summary: CVE-2024-49310 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themesflat Themesflat Addons...
[BLACKSUIT] – Ransomware Victim: Neighbors Credit Union
Ransomware Group: BLACKSUIT VICTIM NAME: Neighbors Credit Union NOTE: No files or stolen information are by RedPacket Security. Any legal...
[FOG] – Ransomware Victim: Fromm (FrommBeauty[.]com)
Ransomware Group: FOG VICTIM NAME: Fromm (FrommBeautycom) NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
HackerOne Bug Bounty Disclosure: race-condition-leads-to-add-more-than-email-at-data-breaches-monitor-system-at-hxxps-stage-firefoxmonitor-nonprod-cloudops-mozgcp-net-sushantd
Company Name: Mozilla Company HackerOne URL: https://hackerone.com/mozilla Submitted By:sushantd19Link to Submitters Profile:https://hackerone.com/sushantd19 Report Title:Race condition leads to add more than...
HackerOne Bug Bounty Disclosure: paypal-cleient-id-and-stripe-api-key-indexed-on-web-arcive-ghaazy
Company Name: Mozilla Company HackerOne URL: https://hackerone.com/mozilla Submitted By:ghaazyLink to Submitters Profile:https://hackerone.com/ghaazy Report Title:paypal cleient_id And stripe api key indexed...
