January 2025 – Page 10 – TheCyberThrone

CISA KEV UPDATE Part I – January 2025

The US CISA has added 3 vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on the evidence of active exploitation. CVE-2024-41713: Mitel MiCollab Path Traversal Vulnerability Description:This vulnerability affects…

PravinKarthik January 8, 2025

Redis was affected by CVE-2024-51741 and CVE-2024-46981

CVE-2024-51741 Description:This vulnerability affects Redis, an open-source in-memory data structure store used as a database, cache, and message broker. The issue arises when an authenticated user with sufficient privileges creates…

PravinKarthik January 7, 2025

Indian Digital Personal Data Protection Rules Draft

The Digital Personal Data Protection Rules, 2025, are a set of regulations formulated to implement the provisions of the Digital Personal Data Protection Act, 2023. These rules aim to provide…

PravinKarthik January 7, 2025

CVE-2024-10957: UpdraftPlus WordPress Plugin Vulnerability

CVE-2024-10957 is a high-severity vulnerability affecting the UpdraftPlus: WP Backup & Migration Plugin for WordPress. This vulnerability, present in versions up to and including 1.24.11, enables attackers to perform PHP…

PravinKarthik January 6, 2025

CVE-2024-43405 Vulnerability in Nuclei

CVE-2024-43405 is a high severity vulnerability identified in Nuclei, a widely used open-source vulnerability scanner. This vulnerability, affecting versions 3.0.0 to 3.3.1, allows attackers to bypass the template signature verification…

PravinKarthik January 6, 2025

FireScam Infostealer: A Detailed Analysis

FireScam is an advanced infostealer malware that primarily targets Android users by disguising itself as a "Telegram Premium" application. This malicious software spreads through phishing websites that imitate legitimate app…

PravinKarthik January 5, 2025

Updated Guidance on SEBI’s Cybersecurity and Cyber Resilience Framework

The Securities and Exchange Board of India (SEBI) has recently provided updated guidance on its Cybersecurity and Cyber Resilience Framework (CSCRF), underscoring its commitment to enhancing cybersecurity measures and ensuring…

PravinKarthik January 4, 2025