CYBER Threat Intelligence Reports
LATEST CTIs
Vulnerabilities in Palo Alto Networks’ Expedition Migration Tool (CVE-2025-0103 to CVE-2025-0107)
Palo Alto Networks' Expedition Vulnerabilities (CVE-2025-0103 to CVE-2025-0107): Multiple critical vulnerabilities, including SQL injection and OS command injection, in the EoL Expedition Migration Tool could…
Read more >
Vulnerability in Apache OpenMeetings (CVE-2024-54676)
Apache OpenMeetings Vulnerability (CVE-2024-54676): A critical flaw (CVSS 9.8) in OpenMeetings' cluster mode allows arbitrary code execution via insecure deserialization in OpenJPA; users must upgrade…
Read more >
Vulnerabilities in Ivanti Connect Secure, Policy Secure, and ZTA Gateways (CVE-2025-0282, CVE-2025-0283)
Ivanti Vulnerabilities (CVE-2025-0282, CVE-2025-0283): Ivanti disclosed critical flaws in Connect Secure, Policy Secure, and ZTA gateways, including CVE-2025-0282 (active RCE exploitation since Dec 2024) and…
Read more >
High-Severity Vulnerability in Popular AI Plugin for WordPress (CVE-2024-12471)
Summary A critical security vulnerability has been discovered in the Post Saint: ChatGPT, GPT-4, DALL-E, Stable Diffusion, Pexels, Dezgo AI Text & Image Generator WordPress…
Read more >
Password Spraying Attacks on NetScaler Appliances
A wave of password spraying attacks has been observed targeting Citrix NetScaler appliances globally. Netscaler is a line of networking products owned by Cloud Software…
Read more >
CISA Adds Cleo Bug to Known Exploited Vulnerabilities (CVE-2024-50623)
On December 13th, 2024, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE--2024-50623 to its list of known exploited vulnerabilities after it had been used…
Read more >
