⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [10 February]
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-22706 | Unprivileged Memory-Write Flaw in Arm Mali GPU Kernel Drivers | 7.8 | 1% | KEV | KEV |
| CVE-2024-43333 | Incorrect Privilege Assignment vulnerability in NotFound Admin and Site Enhancements (ASE) Pro allows Privilege Escalation | 7.5 | <1% | ||
| CVE-2024-53104 | Out-of-Bounds Write in Linux Kernel UVC Video Driver (CVE-2024-53104) | 7.8 | 3% | KEV | KEV |
| CVE-2024-56161 | Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode… | 7.2 | <1% | ||
CVE-2024-57726+2 related CVEs | Missing-Authorization Privilege Escalation in SimpleHelp Remote Support <= 5.5.7 | 9.9 group max | 66% | KEVRansomware | KEV |
CVE-2024-57968+1 related CVE | Unrestricted File Upload in Advantive VeraCore upload.aspx | 8.8 group max | 32% | KEVPoC ×2 | KEV |
| CVE-2025-0411 | Mark-of-the-Web Bypass in 7-Zip Enables Code Execution via Crafted Archives | 7.0 | 67% | KEV | KEV |
| CVE-2025-0994 | Authenticated Deserialization RCE in Trimble Cityworks | 8.6 | 31% | KEV | KEV |
CVE-2025-20124+1 related CVE | A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands as the root user on an affected device | 7.2 | 18% | ||
| CVE-2025-21415 | Authentication bypass by spoofing in Azure AI Face Service allows an authorized attacker to elevate privileges over a network | 8.8 | <1% | ||
| CVE-2025-23114 | A vulnerability in Veeam Updater component allows Man-in-the-Middle attackers to execute arbitrary code on the affected server | 9.0 | <1% | ||
| CVE-2025-23369 | An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that allowed signature spoofing for unauthorized… | 7.6 | 2% | ||
| CVE-2025-24118 | The issue was addressed with improved memory handling | 7.1 | 4% | ||
| CVE-2025-24648 | Incorrect Privilege Assignment vulnerability in Bowo Admin and Site Enhancements (ASE) admin-site-enhancements allows Privilege Escalation.This issue affects… | 7.5 | <1% | ||
| CVE-2025-24734 | Missing Authorization vulnerability in CodeSolz Better Find and Replace real-time-auto-find-and-replace allows Privilege Escalation.This issue affects Better… | 8.8 | <1% | ||
CVE-2025-25064+1 related CVE | Authenticated SQL Injection in Zimbra Collaboration ZimbraSync Service | 8.8 group max | 37% |
From the original article
10 min read at thehackernews.com
Ravie Lakshmanan Feb 10, 2025 Cybersecurity / Weekly Recap In cybersecurity, the smallest crack can lead to the biggest breaches. A leaked encryption key, an unpatched software bug, or an abandoned cloud storage bucket—each one seems minor until it becomes the entry point for an attack.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.