Research Alerts
- CVE-2023-48788: With a public proof-of-concept due to be released next week for CVE-2023-48788, organizations using FortiClientEMS are strongly encouraged to upgrade as soon as possible.
- CVE-2024-27199: Both TeamCity vulnerabilities have reportedly been exploited to distribute a modified version of Jasmin, a red team ransomware tool. Patching is strongly advised.
- CVE-2024-27198: Reports indicate the BianLian ransomware group is exploiting this flaw to gain initial access to conduct ransomware attacks. Patching TeamCity is strongly advised.
- CVE-2024-21762:Researchers have found nearly 150,000 publicly accessible devices vulnerable to this flaw. Organizations that haven't patched are strongly advised to do so.
- CVE-2024-25153: With the severity and a public PoC, as well as MFT solutions being frequently targeted by threat actors, immediate patching or remediation is recommended