News
Page updated: 9 October 2024
This page consists of a “One Stop” for freely available information to help in your threat and vulnerability management tasks.
NCSC: Threat Reports
- The near-term impact of AI on the cyber threat
- The near-term impact of AI on the cyber threat
- Cyber Threat Report: UK Legal Sector
- The threat from commercial cyber proliferation
- ACD - The Sixth Year
- Threat Report 24th March 2023
- Threat Report 10th March 2023
- Threat Report 24th February 2023
- Threat Report 10th February 2023
- Threat Report 27th January 2023
- Threat Report 13th January 2023
- Threat Report 22nd December 2022
- Threat Report 9th December 2022
- Threat Report 25th November 2022
- Threat Report 11th November 2022
Tenable: Cyber Exposure Alerts
- Microsoft’s October 2024 Patch Tuesday Addresses 117 CVEs (CVE-2024-43572, CVE-2024-43573)
- CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, CVE-2024-47177: Frequently Asked Questions About Common UNIX Printing System (CUPS) Vulnerabilities
- Microsoft’s September 2024 Patch Tuesday Addresses 79 CVEs (CVE-2024-43491)
- CVE-2021-20123, CVE-2021-20124: DrayTek Vulnerabilities Discovered by Tenable Research Added to CISA KEV
- AA24-241A : Joint Cybersecurity Advisory on Iran-based Cyber Actors Targeting US Organizations
- CVE-2024-7593: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
- Microsoft’s August 2024 Patch Tuesday Addresses 88 CVEs
- CVE-2024-20419: Cisco Smart Software Manager On-Prem Password Change Vulnerability
- Oracle July 2024 Critical Patch Update Addresses 175 CVEs
- Microsoft’s July 2024 Patch Tuesday Addresses 138 CVEs (CVE-2024-38080, CVE-2024-38112)
- CVE-2024-5806: Progress MOVEit Transfer Authentication Bypass Vulnerability
- CVE-2024-28995: SolarWinds Serv-U Path/Directory Traversal Vulnerability Exploited in the Wild
- Microsoft’s June 2024 Patch Tuesday Addresses 49 CVEs
- CVE-2024-4577: Proof of Concept Available for PHP-CGI Argument Injection Vulnerability
- Rockwell Automation: Disconnect OT Devices with Public-Facing Internet Access, Patch or Mitigate Logix, FactoryTalk CVEs
CISA: Cyber Threat Intelligence
- Microsoft Releases October 2024 Security Updates
- CISA Adds One Known Exploited Vulnerability to Catalog
- Russian Military Cyber Actors Target US and Global Critical Infrastructure
- #StopRansomware: RansomHub Ransomware
- Iran-based Cyber Actors Enabling Ransomware Attacks on US Organizations
- Best Practices for Event Logging and Threat Detection
- CISA Adds Six Known Exploited Vulnerabilities to Catalog
- North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs
- CISA Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth
- People’s Republic of China (PRC) Ministry of State Security APT40 Tradecraft in Action
- #StopRansomware: Black Basta
- Delta Electronics CNCSoft-G2 DOPSoft DPAX
- #StopRansomware: Akira Ransomware
- #StopRansomware: Phobos Ransomware
- SVR Cyber Actors Adapt Tactics for Initial Cloud Access
Our Services that can directly help, benefit, your organisation with mitigating the issues presented above
Cyber Risk Management
