CYBER Threat Intelligence Reports
LATEST CTIs
Security Vulnerability in WordPress Plugin CVE-2024-2876
"Email Subscribers by Icegram Express" plugin, affecting over 90,000 WordPress sites. This flaw allows attackers to execute unauthorized SQL queries, potentially exposing sensitive data. Users…
Read more >
Immediate PHP Update Required Due to Multiple Vulnerabilities
The PHP development team has issued critical security patches for vulnerabilities affecting versions 8.1.28, 8.2.18, and 8.3.6. Key issues include a severe command injection flaw…
Read more >
CISA: Security Updates Issued for Citrix XenServer and Citrix Hypervisor (CVE-2023-46842, CVE-2024-2201 and CVE-2024-31142)
Citrix has released critical updates for XenServer and Citrix Hypervisor to patch vulnerabilities (CVE-2023-46842, CVE-2024-2201, CVE-2024-31142) that could allow attackers to access or crash systems.…
Read more >
WordPress Releases Security Patch for XSS Vulnerability: Immediate Action Required
A critical security update, WordPress 6.5.2, has been urgently released to address a significant Cross-Site Scripting (XSS) vulnerability and other bugs. This update is crucial…
Read more >
Security Update for Node.js on Windows Systems: CVE-2024-27980
A critical vulnerability (CVE-2024-27980) in Windows-based Node.js applications allows remote command execution. Urgently update Node.js to the latest patched versions. Review your code to prevent…
Read more >
CISA: Security Updates Released for Fortinet Products
Vulnerabilities in Fortinet products, including FortiClient for macOS, FortiOS, and FortiProxy, could allow attackers to control affected systems. Key issues involve configuration validation and administrator…
Read more >
