cybersecurity Archives Page 12 of 24171 | Cyberthreat Blog from Fortify24x7

Positive trends related to public IP ranges from the year 2025, (Thu, Dec 18th)

by Cyberthreat Blog | Dec 18, 2025 | SANS ISC Bulletins | 0 |

Since the end of the year is quickly approaching, it is undoubtedly a good time to look back at...

Maybe a Little Bit More Interesting React2Shell Exploit, (Wed, Dec 17th)

by Cyberthreat Blog | Dec 17, 2025 | SANS ISC Bulletins | 0 |

I have already talked about various React2Shell exploit attempts we have observed in the last weeks. But new varieties of the exploit are popping up, and the most recent one is using this particular version of the exploit: POST...

VU#382314: Vulnerability in UEFI firmware modules prevents IOMMU initialization on some UEFI-based motherboards

by Cyberthreat Blog | Dec 17, 2025 | CERT-Vulnerabilities | 0 |

Overview A newly identified vulnerability in some UEFI-supported motherboard models leaves systems vulnerable to early-boot DMA attacks across architectures that implement UEFI and IOMMU. Although the firmware indicates that DMA...

VU#651499: Siemens Gridscale X Prepay username enumeration and account lock bypass vulnerability

by Cyberthreat Blog | Dec 16, 2025 | CERT-Vulnerabilities | 0 |

Overview Vulnerabilities have been identified in Siemens Gridscale X Prepay that allows unauthenticated username enumeration and enables an attacker to bypass account lock functionality. These issues may permit unauthorized...

More React2Shell Exploits CVE-2025-55182, (Mon, Dec 15th)

by Cyberthreat Blog | Dec 15, 2025 | SANS ISC Bulletins | 0 |

Exploits for React2Shell (CVE-2025-55182) remain active. However, at this point, I would think that any servers vulnerable to the “plain” exploit attempts have already been exploited several times. Here is...

Wireshark 4.6.2 Released, (Sun, Dec 14th)

by Cyberthreat Blog | Dec 14, 2025 | SANS ISC Bulletins | 0 |

Wireshark release 4.6.2 fixes 2 vulnerabilities and 5 bugs. The Windows installers now ship with the Visual C++ Redistributable version 14.44.35112. This required a reboot of my laptop. Didier Stevens Senior handler...

ClickFix Attacks Still Using the Finger, (Sat, Dec 13th)

by Cyberthreat Blog | Dec 13, 2025 | SANS ISC Bulletins | 0 |

Introduction Since as early as November 2025, the finger protocol has been used in ClickFix social...

Abusing DLLs EntryPoint for the Fun, (Fri, Dec 12th)

by Cyberthreat Blog | Dec 11, 2025 | SANS ISC Bulletins | 0 |

In the Microsoft Windows ecosystem, DLLs (Dynamic Load Libraries) are PE files like regular...

Using AI Gemma 3 Locally with a Single CPU , (Wed, Dec 10th)

by Cyberthreat Blog | Dec 10, 2025 | SANS ISC Bulletins | 0 |

Several months ago, I got a Nucbox K8 Plus minicomputer to use as a Proxmox 9 server. At the time...

Possible exploit variant for CVE-2024-9042 (Kubernetes OS Command Injection), (Wed, Dec 10th)

by Cyberthreat Blog | Dec 10, 2025 | SANS ISC Bulletins | 0 |

Last year, Kubernetes fixed a command injection vulnerability in the Kubernetes NodeLogQuery feature (%%cve:2024-9042%%) [1]. To exploit the vulnerability, several conditions had to be met: The vulnerable node had to run Windows...

Microsoft Patch Tuesday December 2025, (Tue, Dec 9th)

by Cyberthreat Blog | Dec 9, 2025 | SANS ISC Bulletins | 0 |

This release addresses 57 vulnerabilities. 3 of these vulnerabilities are rated critical. One vulnerability was already exploited, and two were publicly disclosed before the patch was released. CVE-2025-62221: This privilege...

VU#821724: TOTOLINK’s X5000R’s (AX1800 router) lacks authentication for telnet

by Cyberthreat Blog | Dec 9, 2025 | CERT-Vulnerabilities | 0 |

Overview An unauthenticated HTTP request can enable telnet which may lead to remote code execution with root-level privileges. Description TOTOLINK manufactures routers and other networking equipment designed for small...

Tag: cybersecurity