Emergent Threat Response

Notable vulnerabilities in Next.js (CVE-2025-29927) and CrushFTP

Critical Veeam Backup & Replication CVE-2025-23120

Apache Tomcat CVE-2025-24813: What You Need to Know

Multiple Zero-Day Vulnerabilities in Broadcom VMware ESXi and Other Products

Fortinet Firewalls Hit with New Zero-Day Attack, Older Data Leak

CVE-2025-0282: Ivanti Connect Secure Zero-Day Exploited in the Wild

Modular Java Backdoor Dropped in Cleo Exploitation Campaign

Christiaan Beek

Widespread Exploitation of Cleo File Transfer Software (CVE-2024-55956)

Zero-Day Exploitation Targeting Palo Alto Networks Firewall Management Interfaces

Fortinet FortiManager CVE-2024-47575 Exploited in Zero-Day Attacks

Multiple Vulnerabilities in Common Unix Printing System (CUPS)

High-Risk Vulnerabilities in Common Enterprise Technologies

CVE-2024-40766: Critical Improper Access Control Vulnerability Affecting SonicWall Devices

Multiple Vulnerabilities in Veeam Backup & Replication

VMware ESXi CVE-2024-37085 Targeted in Ransomware Campaigns

Authentication Bypasses in MOVEit Transfer and MOVEit Gateway

Malvertising Campaign Leads to Execution of Oyster Backdoor

CVE-2024-28995: Trivially Exploitable Information Disclosure Vulnerability in SolarWinds Serv-U

CVE-2024-24919: Check Point Security Gateway Information Disclosure

CVE-2024-4978: Backdoored Justice AV Solutions Viewer Software Used in Apparent Supply Chain Attack

Ongoing Social Engineering Campaign Linked to Black Basta Ransomware Operators