June 2024 – TheCyberThrone

KADOKAWA Corp hit by BlackSuit ransomware

KADOKAWA Corporation, a well-known Japanese media company, has been hit with a cyber-attack and attributed to the BlackSuit ransomware gang and threatened to release the stolen data if the demand…

PravinKarthik June 29, 2024

Juniper Networks discloses a critical vulnerability -CVE-2024-2973

Juniper has disclosed a critical vulnerability that affects the Session Smart Router (SSR), Session Smart Conductor, and WAN Assurance Router products, posing a significant threat to network security. The CVE-2024-2973…

PravinKarthik June 28, 2024

TeamViewer “Viewed inside” – Midnight Blizzard infiltrated

TeamViewer has disclosed a significant cyber incident in which a threat actor goes by the name APT29, or “Midnight Blizzard,” successfully infiltrated TeamViewer’s systems through unknown methods. The breach was…

PravinKarthik June 28, 2024

Polyfill.io Compromised

Polyfill.io, a Javascript library, has been compromised thats been used by over 100,000 sites, including Disney-owned streaming service Hulu. Once the domain has been compromised, it is used to redirect…

PravinKarthik June 28, 2024

Gitlab addresses Several Vulnerabilities -June 2024

GitLab, has released critical updates for both its Community Edition (CE) and Enterprise Edition (EE). The new versions, 17.1.1, 17.0.3, and 16.11.5, contain essential security and bug fixes. GitLab urges…

PravinKarthik June 27, 2024

CISA KEV Update Part III – June 2024

The US CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2022-24816 GeoSolutionsGroup JAI-EXT Code Injection Vulnerability CVE-2022-2586 Linux Kernel Use-After-Free Vulnerability CVE-2020-13965 Roundcube Webmail…

PravinKarthik June 27, 2024

Moveit Transfer Critical Vulnerability – CVE-2024-5806

A critical security vulnerability has been identified in MOVEit Transfer that poses significant risks to organizations relying on the software for secure data transfers. The vulnerability tracked as CVE-2024-5806 is…

PravinKarthik June 26, 2024