Ongoing Cyber Attacks Exploit Critical Vulnerabilities in Cisco Smart Licensing Utility

Cisco Smart Licensing Utility
March 21, 2025
by Ady DeeJay
Comments (0)

Mar 21, 2025Ravie LakshmananCyber Attack / Vulnerability Two now-patched security flaws impacting Cisco Smart Licensing Utility are seeing active exploitation attempts, according to SANS Internet Storm Center. The two critical-rated vulnerabilities in question are listed below – CVE-2024-20439 (CVSS score: 9.8) – The presence of an undocumented static user credential

Read More

CISA Warn Of Critical Ivanti CSA Vulnerabilities: Patch Now

CISA Warn Of Critical Ivanti CSA Vulnerabilities: Patch Now
January 23, 2025
by Ady DeeJay
Comments (0)

The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have jointly issued a Cybersecurity Advisory to address the active exploitation of critical vulnerabilities in Ivanti Cloud Service Appliances (CSA). These Ivanti CSA Vulnerabilities —CVE-2024-8963, CVE-2024-9379, CVE-2024-8190, and CVE-2024-9380—were exploited in September 2024 by threat actors

Read More

U.S. Sanctions 6 Iranian Officials for Critical Infrastructure Cyber Attacks

Critical Infrastructure Cyber Attacks
February 3, 2024
by Ady DeeJay
Comments (0)

Feb 03, 2024NewsroomIntelligence Agency / Cyber Security The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) announced sanctions against six officials associated with the Iranian intelligence agency for attacking critical infrastructure entities in the U.S. and other countries. The officials include Hamid Reza Lashgarian, Mahdi Lashgarian, Hamid Homayunfal, Milad

Read More

Supermicro’s BMC Firmware Found Vulnerable to Multiple Critical Vulnerabilities

BMC Firmware
October 6, 2023
by Ady DeeJay
Comments (0)

Oct 06, 2023NewsroomServer Security / Vulnerability Multiple security vulnerabilities have been disclosed in the Intelligent Platform Management Interface (IPMI) firmware for Supermicro baseboard management controllers (BMCs) that could result in privilege escalation and execution of malicious code on affected systems. The seven flaws, tracked from CVE-2023-40284 through CVE-2023-40290, vary in

Read More