bgrancharov

Критични уязвимости за Microsoft SharePoint CVE-2025-53770 и CVE-2025-53771 са активно експлойтвани. Те позволяват Remote Code Execution. Засегнатите версии на SharePoint са Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Server 2019 и Microsoft SharePoint Enterprise Server 2016. SharePoint Online (Microsoft 365) не е засегнат.  Microsoft публикуваха актуализации за засегнатите версии на Microsoft SharePoint Server-и: KB5002754 update … Read more

Наскоро открита уязвимост в Apache Tomcat е активно експлоатирана след оповестяване на публичен експлойт. Уязвимостта CVE-2025-24813 засяга следните версии на Apache Tomcat: Apache Tomcat 11.0.0-M1 до 11.0.2 Apache Tomcat 10.1.0-M1 до 10.1.34 Apache Tomcat 9.0.0-M1 до 9.0.98 Уязвимостта включва Remote code execution или разкриване на информация, когато са налице определени условия: Writes е разрешено за … Read more

Adobe released security updates to address vulnerabilities in multiple Adobe software products including Adobe Photoshop, Animate, and Illustrator for iPad. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. Read more

Ivanti released security updates to address vulnerabilities in Ivanti Avalanche, Ivanti Application Control Engine, and Ivanti EPM.

Fortinet released security updates to address vulnerabilities in multiple Fortinet products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.

Microsoft released security updates to address vulnerabilities in multiple Microsoft products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.  

Ivanti released security updates to address vulnerabilities (CVE-2025-0282, CVE-2025-0283) in Ivanti Connect Secure, Policy Secure, and ZTA Gateways. A cyber threat actor could exploit CVE-2025-0282 to take control of an affected system. Read more

Apple released security updates to address vulnerabilities in multiple Apple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.  Read more

Cisco released its October 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication to address vulnerabilities in Cisco ASA, FMC, and FTD. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.   Read more

CERT България Ви уведомява, че актуализация на CrowdStrike Falcon агенти  от днес причинява сини екрани (Blue Screen of Death csagent.sys) в Windows операционните системи. От CrowdStrike са идентифицирали проблема, като стъпки за отстранение на проблема препоръчват: Boot Windows into Safe Mode or the Windows Recovery Environment Navigate to the C:\Windows\System32\drivers\CrowdStrike directory Locate the file matching … Read more