Threat Advisories
Detailed information and guidance on threats and vulnerabilities, focusing on its characteristics, impact, and remediation steps, released daily and weekly to provide actionable intelligence and aid in rapid response and mitigation efforts.
Strengthen Your Defenses With the Latest Intelligence
Red | Vulnerability Report
Apple Addresses Actively Exploited Zero-Day Flaws in macOS and iOS
Apple has addressed two actively exploited zero-day vulnerabilities, CVE-2024-44308 and CVE-2024-44309, affecting November 21, 2024 Red | Vulnerability Report
Critical Zero-Day PAN-OS Flaws Exposing Systems to Full Control
Palo Alto Networks has issued critical security updates to address two actively November 20, 2024 Red | Vulnerability Report
Active Exploitation of vCenter Server Vulnerabilities
VMware’s vCenter Server has two critical vulnerabilities (CVE-2024-38812 and CVE-2024-38813), both actively November 20, 2024 Red | Vulnerability Report
Hackers Exploit Zero-Day Flaw in EOL GeoVision Devices
CVE-2024-11120 is a critical OS command injection vulnerability in outdated GeoVision devices, November 19, 2024 Red | Vulnerability Report
November 2024 Linux Patch Roundup
In October and November 2024, over 600 vulnerabilities were addressed within the November 19, 2024 Red | Actor Report
Hamas-Linked WIRTE Expands Cyber Activities Against Israel
WIRTE, a Hamas-linked APT group, remains active despite regional conflict, targeting Middle November 18, 2024 Amber | Attack Report
China-affiliated group Infiltrated Tibetan Websites
In May 2024, the cyberespionage group TAG-112, likely a subset of Evasive November 15, 2024 Red | Vulnerability Report
Critical Flaw in D-Link NAS Devices Exposes Thousands to Remote Command Attacks
A critical security vulnerability, CVE-2024-10914, is putting thousands of D-Link NAS devices November 15, 2024