CYBER Threat Intelligence Reports
LATEST CTIs
Critical Vulnerability in MegaRAC BMC Added to CISA’s KEV: CVE-2024-54085
On June 25, 2025, CISA added CVE‑2024‑54085, a critical authentication bypass vulnerability in the MegaRAC SPx Baseboard Management Controller (BMC) firmware, to its Known Exploited…
Read more >
‘UMBRELLA STAND’ Malware Targets Fortinet FortiGate Firewalls
‘UMBRELLA STAND’ Malware Targets Fortinet FortiGate Firewalls The UK’s National Cyber Security Centre (NCSC) has issued an alert regarding a sophisticated malware campaign dubbed “UMBRELLA…
Read more >
CVE-2025-49144: Privilege Escalation in Notepad++ Installer Enables Full SYSTEM Access
A critical local privilege escalation vulnerability in the Notepad++ v8.8.1 installer allows attackers to escalate to NT AUTHORITY\SYSTEM using binary planting techniques. Tracked as CVE-2025-49144,…
Read more >
New Linux Vulnerabilities (CVE-2025-6018 & CVE-2025-6019) Enable Full Root Access in Seconds
Security researchers have uncovered a critical privilege escalation chain in major Linux distributions that allows any local user with a session (SSH or GUI) to…
Read more >
One-Third of All Grafana Instances Vulnerable to XSS (CVE-2025-4123)
Over 46,000 internet-facing Grafana servers (≈36 % of those online) are still running versions susceptible to CVE-2025-4123, a high-severity open-redirect that chains into stored cross-site…
Read more >
New Microsoft Outlook Vulnerability Enables Local Code Execution (CVE-2025-47176)
Published: June 11, 2025 Threat Level: High Affected Product: Microsoft Outlook (Microsoft 365 Apps for Enterprise, Office LTSC 2024) CVSS Score: 7.8 (High) A newly…
Read more >
