vulnerability Archives | Cyberthreat Blog from Fortify24x7

What time is it? Accuracy of pool.ntp.org., (Tue, Oct 21st)

by Cyberthreat Blog | Oct 21, 2025 | SANS ISC Bulletins | 0 |

Yesterday, Chinese security services published a story alleging a multi-year attack against the...

Many Online Services and Websites Affected by an AWS Outage, (Mon, Oct 20th)

by Cyberthreat Blog | Oct 20, 2025 | SANS ISC Bulletins | 0 |

The info is spreading across the news websites: For approximatively two hours, many online services or websites are suffering of an Amazon Web Services outage. Some affected services: Signal Slack Zoom These may affect...

Using Syscall() for Obfuscation/Fileless Activity, (Mon, Oct 20th)

by Cyberthreat Blog | Oct 20, 2025 | SANS ISC Bulletins | 0 |

I found another piece of malware this weekend. This one looks more like a proof-of-concept because...

VU#652514: DNS Rebinding and Manipulating CORS Headers Enables Exfiltration of Information

by Cyberthreat Blog | Oct 17, 2025 | CERT-Vulnerabilities | 0 |

Overview A vulnerability in cross-origin resource sharing (CORS) headers in Chromium, Google Chrome, Microsoft Edge, Safari, and Firefox enables the CORS policy to be manipulated. Combined with a DNS rebind, an attacker can send...

VU#516608: Multiple Password Managers Vulnerable to Clickjacking Attacks

by Cyberthreat Blog | Oct 17, 2025 | CERT-Vulnerabilities | 0 |

Overview Browser-extension password managers, which autofill sensitive information on websites, can be exposed to various clickjacking attacks. These attacks exploit the trust relationship between a web page and the...

TikTok Videos Promoting Malware Installation, (Fri, Oct 17th)

by Cyberthreat Blog | Oct 17, 2025 | SANS ISC Bulletins | 0 |

Attackers are everywhere! They try to abuse victims using new communication channels and social...

New DShield Support Slack, (Thu, Oct 16th)

by Cyberthreat Blog | Oct 16, 2025 | SANS ISC Bulletins | 0 |

This week, we set up a new Slack workspace for DShield.org. This workspace replaces the old workspace we originally configured back in 2016 or 2017. The workspace was originally configured as a free workspace to support the...

Clipboard Pictures Exfiltration in Python Infostealer, (Wed, Oct 15th)

by Cyberthreat Blog | Oct 14, 2025 | SANS ISC Bulletins | 0 |

For a while, clipboard content has been monitored by many infostealers. Purposes can be multiple,...

Microsoft Patch Tuesday October 2025, (Tue, Oct 14th)

by Cyberthreat Blog | Oct 14, 2025 | SANS ISC Bulletins | 0 |

I am experimenting today with a little bit of a cleaned-up patch overview. I removed vulnerabilities that affect Microsoft’s cloud systems (but appreciate Microsoft listing them at all), as well as vulnerabilities in...

Heads Up: Scans for ESAFENET CDG V5 , (Mon, Oct 13th)

by Cyberthreat Blog | Oct 13, 2025 | SANS ISC Bulletins | 0 |

In January, a possible XSS vulnerability was found in the electronic document security management system ESAFENET CDG. This was the latest (as far as I can tell) in a long list of vulnerabilities in the product. Prior...

VU#538470: Clevo UEFI firmware embedded BootGuard keys compromising Clevo’s implementation of BootGuard

by Cyberthreat Blog | Oct 13, 2025 | CERT-Vulnerabilities | 0 |

Overview Clevo’s UEFI firmware update packages included sensitive private keys used in their Intel Boot Guard implementation. This accidental exposure of the keys could be abused by an attacker to sign malicious firmware using...

Wireshark 4.4.10 and 4.6.0 Released, (Sun, Oct 12th)

by Cyberthreat Blog | Oct 12, 2025 | SANS ISC Bulletins | 0 |

Wireshark release 4.4.10 fixes 6 bugs and 1 vulnerability (in the MONGO dissector). A new branch with many new features is released too: 4.6.0 Didier Stevens Senior handler blog.DidierStevens.com (c) SANS Internet Storm Center....

Tag: vulnerability