Emergent Threat Response

Unauthenticated CrushFTP Zero-Day Enables Complete Server Compromise

CVE-2024-3400: Critical Command Injection Vulnerability in Palo Alto Networks Firewalls

Backdoored XZ Utils (CVE-2024-3094)

CVE-2024-27198 and CVE-2024-27199: JetBrains TeamCity Multiple Authentication Bypass Vulnerabilities (FIXED)

High-Risk Vulnerabilities in ConnectWise ScreenConnect

RCE to Sliver: IR Tales from the Field

Critical Fortinet FortiOS CVE-2024-21762 Exploited

CVE-2024-0204: Critical Authentication Bypass in Fortra GoAnywhere MFT

Critical CVEs in Outdated Versions of Atlassian Confluence and VMware vCenter Server

Zero-Day Exploitation of Ivanti Connect Secure and Policy Secure Gateways

CVE-2023-49103 - Critical Information Disclosure in ownCloud Graph API

CVE-2023-47246: SysAid Zero-Day Vulnerability Exploited By Lace Tempest

Rapid7-Observed Exploitation of Atlassian Confluence CVE-2023-22518

Suspected Exploitation of Apache ActiveMQ CVE-2023-46604

CVE-2023-4966: Exploitation of Citrix NetScaler Information Disclosure Vulnerability

CVE-2023-20198: Active Exploitation of Cisco IOS XE Zero-Day Vulnerability

CVE-2023-22515: Zero-Day Privilege Escalation in Confluence Server and Data Center

Critical Vulnerabilities in WS_FTP Server

Exploitation of Juniper Networks SRX Series and EX Series Devices

Under Siege: Rapid7-Observed Exploitation of Cisco ASA SSL VPNs

CVE-2023-35078: Critical API Access Vulnerability in Ivanti Endpoint Manager Mobile