Alerts & Advisories

Actively Exploited Vulnerability in Apple Products

Apple has released security updates addressing a vulnerability (CVE-2025-24085) which is a privilege escalation security flaw in Apple's Core Media framework. This vulnerability is reportedly being actively exploited.

Alerts

Ongoing Campaign Targeting Amazon Web Services S3 Buckets

There are reports of a ransomware campaign that targets Amazon Web Services S3 Bucket functionality. Users and administrators should take the following steps to safeguard themselves.

Alerts

Security Bulletin 22 Jan 2025 [PDF, 0.99 MB]

Bulletins

Vulnerabilities in 7-Zip

7-Zip has released security updates addressing vulnerabilities (CVE-2025-0411 & CVE-2024-11477) in their software.

Alerts

Advisory on Phishing Texts Targeting Apple iMessage Users

A recent smishing (SMS phishing) campaign has been observed targeting Apple iMessage users. In this campaign, cybercriminals send fraudulent text messages designed to manipulate users into disabling iMessage’s built-in security features.

Advisory

Critical Vulnerability in FortiOS and FortiProxy

Fortinet has released security updates addressing a critical authentication bypass vulnerability (CVE-2024-55591) affecting their FortiOS and FortiProxy products. There are reports that the vulnerability is being exploited in the wild.

Alerts

Security Bulletin 15 Jan 2025 [PDF, 1.9 MB]

Bulletins

January 2025 Monthly Patch

Monthly Patch

Ongoing Mirai Botnet Campaign Targeting Industrial Routers

Alerts

Active Exploitation of Critical Zero-Day Vulnerability in Ivanti Connect Secure

Alerts