Phishing for the News - Weekend Roundup - January 11, 2025

Phishing for the News

Listen to our podcast for a roundup of this week's cyber news. Our Cyber Intelligence Briefs this week included information on:

• Critical vulnerabilities discovered in Moxa, IBM, and Debian LTS Linux Kernel, potentially enabling remote code execution, privilege escalation, and denial-of-service attacks.
• Moxa patching vulnerabilities in cellular routers and network security devices.
• Focus on BGP security risks and guidance from NIST on strengthening internet routing security and resilience.
• CERT-FR bulletin highlighting critical vulnerabilities discovered in the past week, impacting various products.
• Critical flaws in Moxa devices putting industrial network security at risk.
• New FireScam Android malware disguised as Telegram Premium, targeting users for data theft.
• CISA releasing advisories for ABB and Nedap ICS Vulnerabilities.
• Android security updates addressing critical vulnerabilities, urging users to update their devices promptly.
• SonicWall issuing an alert for serious vulnerabilities in their product line, including routers and network security appliances.
• Ivanti products found to have multiple critical vulnerabilities, allowing for remote code execution and complete system takeover.
• A zero-day vulnerability in the Ivanti Connect Secure VPN being exploited, emphasizing the need for immediate patching.
• SonicWall urging immediate patching for an exploitable SSLVPN bug.

The SecureResearch Cyber Intelligence Briefs keep the information security community updated on the latest security news. For a detailed analysis of each vulnerability and actionable advice contact [email protected].

For more information in the SecureResearch Daily Cyber Intelligence Brief, email [email protected]