News | CSURFACE Threat Sensor

CSURFACE · 2025-02-11 ·Highlight

Apple Patches Actively Exploited iOS Zero-Day CVE-2025-24200

Apple patched CVE-2025-24200, a zero-day iOS flaw exploited in the wild, in an emergency update.

CVE-2025-24200 confirmed-exploited ssvc:attend severity:MEDIUM active-exploitation zero-day cisa-kev kev

CSURFACE · 2025-02-05 ·Highlight

Advantive VeraCore Vulnerabilities Exploited in the Wild

Two high-severity vulnerabilities in Advantive VeraCore have been actively exploited, necessitating immediate patching.

CVE-2025-25181 CVE-2024-57968 ssvc:attend severity:HIGH ssvc:act active-exploitation zero-day sqli cisa-kev kev confirmed-exploited

CSURFACE · 2025-02-03 ·Highlight

Critical Zero-Day in Apple Products Actively Exploited, Patch Now

A critical zero-day vulnerability in Apple products, CVE-2025-24085, is being actively exploited, prompting urgent patches.

CVE-2025-24085 poc-released kev confirmed-exploited severity:CRITICAL active-exploitation zero-day memory-corruption cisa-kev has-poc ssvc:act

CSURFACE · 2025-02-03 ·Highlight

Critical CVE-2025-24085 Exploited in Apple Devices, Patch Now Available

Apple's CVE-2025-24085 zero-day, actively exploited, prompts urgent patching across devices.

CVE-2025-24085 zero-day priv-esc memory-corruption cisa-kev has-poc ssvc:act severity:CRITICAL poc-released kev confirmed-exploited active-exploitation

CSURFACE · 2025-01-29

Cacti Vulnerability CVE-2025-22604 Allows Remote Code Execution

A high-severity flaw in Cacti allows authenticated users to execute remote code, with a PoC available.

CVE-2025-22604 rce has-poc ssvc:track* severity:HIGH poc-released

CSURFACE · 2025-01-22 ·Highlight

SQL Injection Flaw in Apache Traffic Control Exploitable by Privileged Users

A high-severity SQL injection vulnerability in Apache Traffic Control allows privileged users to execute arbitrary SQL commands.

CVE-2024-45387 ssvc:track severity:HIGH active-exploitation sqli

CSURFACE · 2024-11-09

Frag Ransomware Exploits Veeam Backup Flaw in New Attack

Frag ransomware group exploits Veeam Backup flaw in new attack campaign.

has-threat-actor

CSURFACE · 2024-10-29 ·Highlight

Critical SonicWall SonicOS Flaw Exploited by Multiple Ransomware Groups

SonicWall SonicOS vulnerability CVE-2024-40766 is exploited by ransomware groups, urging immediate patching.

CVE-2024-40766 ssvc:act cisa-kev breach confirmed-exploited active-exploitation ransomware has-threat-actor kev severity:CRITICAL

CSURFACE · 2024-10-13 ·Highlight

Critical RCE Flaw in Veeam Backup Exploited by Multiple Ransomware Groups

CVE-2024-40711 in Veeam Backup is exploited by ransomware groups, demanding urgent patching.

CVE-2024-40711 has-threat-actor kev ssvc:act cisa-kev ransomware severity:CRITICAL poc-released rce confirmed-exploited active-exploitation has-poc

CSURFACE · 2024-10-10 ·Highlight

Eldorado Ransomware Exploits HTE Technologies' Automation Systems

Eldorado ransomware exploits vulnerabilities in HTE Technologies' systems, targeting industrial automation.

has-threat-actor

CSURFACE · 2024-10-10 ·Highlight

ASUS Router Flaw CVE-2024-3080 Exploited in Massive DDoS Attack

A critical flaw in ASUS routers, CVE-2024-3080, is being exploited in a massive DDoS attack.

CVE-2024-3080 active-exploitation auth-bypass networking ssvc:attend severity:CRITICAL

CSURFACE · 2024-09-04 ·Highlight

ALPHV Ransomware Exploits Veritas Backup Exec Vulnerabilities for Initial Access

ALPHV ransomware exploits Veritas Backup Exec vulnerabilities for initial access, increasing ransom demands.

campaign breach has-threat-actor ransomware-used

CSURFACE · 2024-09-02

RansomHub Ransomware Group Hits 210 Victims in Critical Sectors

RansomHub ransomware group targets 210 victims across critical sectors, highlighting ongoing threats.

has-threat-actor

CSURFACE · 2024-08-01 ·Highlight

Critical RCE Vulnerability in ServiceNow Exploited in the Wild

A critical RCE vulnerability in ServiceNow is being actively exploited, prompting urgent patching.

CVE-2024-4879 has-poc severity:CRITICAL active-exploitation rce kev confirmed-exploited ssvc:act poc-released cisa-kev

CSURFACE · 2024-05-24 ·Highlight

Google Chrome Zero-Day CVE-2024-5274 Actively Exploited in the Wild

A critical zero-day in Google Chrome, CVE-2024-5274, is actively exploited; users must update immediately.

CVE-2024-5274 has-poc ssvc:attend poc-released kev cisa-kev critical confirmed-exploited severity:CRITICAL active-exploitation zero-day

CSURFACE · 2023-08-17 ·Highlight

Critical Citrix ShareFile Vulnerability Exploited in the Wild

A critical vulnerability in Citrix ShareFile is being actively exploited, allowing remote compromise of storage zones.

CVE-2023-24489 kev confirmed-exploited ssvc:act severity:CRITICAL poc-released active-exploitation cisa-kev has-poc

CSURFACE · 2023-06-08

Clop Ransomware Exploits MOVEit Transfer Vulnerability

Clop ransomware group exploits a vulnerability in MOVEit Transfer, potentially active since 2021.

ransomware-used has-threat-actor

CSURFACE · 2023-06-07 ·Highlight

Google Chrome Zero-Day CVE-2023-3079 Actively Exploited and Patched

Google Chrome patched a high-severity zero-day, CVE-2023-3079, actively exploited in the wild.

CVE-2023-3079 ssvc:attend severity:HIGH poc-released active-exploitation zero-day cisa-kev kev confirmed-exploited has-poc

CSURFACE · 2022-06-11 ·Highlight

AvosLocker Ransomware Exploits Confluence Servers and Disables Antivirus

AvosLocker ransomware exploits Confluence servers and uses novel techniques to disable antivirus protection.

has-threat-actor

CSURFACE · 2021-06-11 ·Highlight

Avaddon Ransomware Group Shuts Down, Releases Decryption Keys

Avaddon ransomware group unexpectedly shuts down, releasing decryption keys to victims.

has-threat-actor