CyberAlerts

New Intel CPU flaws leak sensitive data from privileged memory

Description: A new "Branch Privilege Injection" flaw in all modern Intel CPUs allows attackers to leak sensitive data from memory regions allocated to privileged software like the operating system kernel. [...]

Source: BleepingComputer

May 13th, 2025 (about 1 month ago)

EU launches vulnerability database to tackle cybersecurity threats

Description: The European Union launched on Tuesday its new vulnerability database to provide aggregated information regarding cybersecurity issues affecting various products and services.

Source: The Record

May 13th, 2025 (about 1 month ago)

May Security Update

🚨 Marked as known exploited on May 13th, 2025 (about 1 month ago).

Description: Ivanti releases standard security patches on the second Tuesday of every month. For many of our customers, the predictable schedule facilitates better planning and management of IT resources, allowing them to allocate time and personnel efficiently for the timely updates. Today, Ivanti is disclosing vulnerabilities in Ivanti ITSM (on-premises only), Cloud Security Application (CSA) and Neurons for MDM. It is important for customers to know: We have no evidence of any of these vulnerabilities being exploited in the wild. These vulnerabilities do not impact any other Ivanti solutions. More information on these vulnerabilities and detailed instructions on how to remediate the issues can be found in these Security Advisories: Ivanti Neurons for ITSM (on-premises only) Cloud Security Application (CSA) Ivanti Neurons for MDM Our Support team is always available to help customers and partners should they have any questions. Cases can be logged via the Success portal (login credentials required). Want to stay up to date on Ivanti Security Advisories? Paste https://www.ivanti.com/blog/topics/security-advisory/rss into your preferred RSS reader / functionality in your email program.

Source: Ivanti Security Advisories

May 13th, 2025 (about 1 month ago)

New Intel CPU Flaw Bypasses Spectre v2 Defenses to Leak Kernel Memory

Description: Researchers from ETH Zurich have uncovered a new class of vulnerabilities affecting all modern Intel CPUs, undermining key hardware defenses against Spectre v2 attacks. The attack, dubbed “Branch Privilege Injection” (BPI), exploits race conditions in branch predictor updates to inject privileged predictions from user space, enabling attackers to leak sensitive kernel data, even on fully … The post New Intel CPU Flaw Bypasses Spectre v2 Defenses to Leak Kernel Memory appeared first on CyberInsider.

Source: CyberInsider

May 13th, 2025 (about 1 month ago)

DeepSeek, Deep Research Mean Deep Changes for AI Security

Description: Why securing the inference chain is now the top priority for AI applications and infrastructure.

Source: Dark Reading

May 13th, 2025 (about 1 month ago)

The Simulation Says the Orioles Should Be Good

Description: AI, simulations, and technology have revolutionized not just how baseball is played and managed, but how we experience it, too.

Source: 404 Media

May 13th, 2025 (about 1 month ago)

Microsoft will update Office apps on Windows 10 until 2028

Description: Microsoft has backtracked on its plan to end support for Office apps on Windows 10 later this year and announced that it will continue providing security updates for three more years, until 2028. [...]

Source: BleepingComputer

May 13th, 2025 (about 1 month ago)

Increase Red Team Operations 10X with Adversarial Exposure Validation

Description: Red teams uncover what others miss — but they can't be everywhere, all the time. Adversarial Exposure Validation combines BAS + Automated Pentesting to extend red team impact, uncover real attack paths, and validate defenses continuously. Learn more from Picus Security on how AEV can help protect your network. [...]

Source: BleepingComputer

May 13th, 2025 (about 1 month ago)

Post-Exploitation Activities Observed from the Samsung MagicINFO 9 Server Flaw

Description: Huntress has verified that attackers are exploiting flaws in Samsung MagicINFO 9 Server (version 21.1050.0). Understand why MagicINFO 9 Server shouldn’t be internet-facing until a patch is available and applied.

Source: Huntress Blog

May 13th, 2025 (about 1 month ago)

Time to Ransom is Money

Description: During ransomware attacks, the average time-to-ransom for attackers is almost 17 hours. Learn more about what this means for businesses.

Source: Huntress Blog

May 13th, 2025 (about 1 month ago)

Threat and Vulnerability Intelligence Database

Example Searches:

	New Intel CPU flaws leak sensitive data from privileged memory Description: A new "Branch Privilege Injection" flaw in all modern Intel CPUs allows attackers to leak sensitive data from memory regions allocated to privileged software like the operating system kernel. [...] Source: BleepingComputer May 13th, 2025 (about 1 month ago)
	EU launches vulnerability database to tackle cybersecurity threats Description: The European Union launched on Tuesday its new vulnerability database to provide aggregated information regarding cybersecurity issues affecting various products and services. Source: The Record May 13th, 2025 (about 1 month ago)
	May Security Update 🚨 Marked as known exploited on May 13th, 2025 (about 1 month ago). Description: Ivanti releases standard security patches on the second Tuesday of every month. For many of our customers, the predictable schedule facilitates better planning and management of IT resources, allowing them to allocate time and personnel efficiently for the timely updates. Today, Ivanti is disclosing vulnerabilities in Ivanti ITSM (on-premises only), Cloud Security Application (CSA) and Neurons for MDM. It is important for customers to know: We have no evidence of any of these vulnerabilities being exploited in the wild. These vulnerabilities do not impact any other Ivanti solutions. More information on these vulnerabilities and detailed instructions on how to remediate the issues can be found in these Security Advisories: Ivanti Neurons for ITSM (on-premises only) Cloud Security Application (CSA) Ivanti Neurons for MDM Our Support team is always available to help customers and partners should they have any questions. Cases can be logged via the Success portal (login credentials required). Want to stay up to date on Ivanti Security Advisories? Paste https://www.ivanti.com/blog/topics/security-advisory/rss into your preferred RSS reader / functionality in your email program. Source: Ivanti Security Advisories May 13th, 2025 (about 1 month ago)
	New Intel CPU Flaw Bypasses Spectre v2 Defenses to Leak Kernel Memory Description: Researchers from ETH Zurich have uncovered a new class of vulnerabilities affecting all modern Intel CPUs, undermining key hardware defenses against Spectre v2 attacks. The attack, dubbed “Branch Privilege Injection” (BPI), exploits race conditions in branch predictor updates to inject privileged predictions from user space, enabling attackers to leak sensitive kernel data, even on fully … The post New Intel CPU Flaw Bypasses Spectre v2 Defenses to Leak Kernel Memory appeared first on CyberInsider. Source: CyberInsider May 13th, 2025 (about 1 month ago)
	DeepSeek, Deep Research Mean Deep Changes for AI Security Description: Why securing the inference chain is now the top priority for AI applications and infrastructure. Source: Dark Reading May 13th, 2025 (about 1 month ago)
	The Simulation Says the Orioles Should Be Good Description: AI, simulations, and technology have revolutionized not just how baseball is played and managed, but how we experience it, too. Source: 404 Media May 13th, 2025 (about 1 month ago)
	Microsoft will update Office apps on Windows 10 until 2028 Description: Microsoft has backtracked on its plan to end support for Office apps on Windows 10 later this year and announced that it will continue providing security updates for three more years, until 2028. [...] Source: BleepingComputer May 13th, 2025 (about 1 month ago)
	Increase Red Team Operations 10X with Adversarial Exposure Validation Description: Red teams uncover what others miss — but they can't be everywhere, all the time. Adversarial Exposure Validation combines BAS + Automated Pentesting to extend red team impact, uncover real attack paths, and validate defenses continuously. Learn more from Picus Security on how AEV can help protect your network. [...] Source: BleepingComputer May 13th, 2025 (about 1 month ago)
	Post-Exploitation Activities Observed from the Samsung MagicINFO 9 Server Flaw Description: Huntress has verified that attackers are exploiting flaws in Samsung MagicINFO 9 Server (version 21.1050.0). Understand why MagicINFO 9 Server shouldn’t be internet-facing until a patch is available and applied. Source: Huntress Blog May 13th, 2025 (about 1 month ago)
	Time to Ransom is Money Description: During ransomware attacks, the average time-to-ransom for attackers is almost 17 hours. Learn more about what this means for businesses. Source: Huntress Blog May 13th, 2025 (about 1 month ago)