There has been a proof-of-concept (PoC) exploit for the CVE-2024-49113/CVE-2024-49112 vulnerabilities (the latter being rated critical). This vulnerability can crash any unpatched Windows Servers with Internet connectivity. This PoC was devised by SafeBreach…
Palo Alto has released a patch for the zero-day vulnerability CVE-2024-0012. This vulnerability can allow "an authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network…
CISA released an alert last week regarding a "foreign threat actor conducting a large-scale spear-phishing campaign with RDP attachments." The threat actors seem to be targeting those in IT and…
There has been talk of a zero-day Fortinet vulnerability (CVE-2024-47575) this week and those rumors have been confirmed. Fortinet released (LINK) a statement regarding the critical vulnerability in which threat actors…
Veeam recently acknowledged a critical vulnerability (CVE-2024-40711) which can allow remote code execution. A patch has been released, so it is critical any impacted systems are updated as soon as…