Cyber999 Advisories

10 January 2025     Advisory

Recently, Ivanti released security updates to address one actively exploited Zero-day critical and one high severity vulnerability in Ivanti Connect Secure, Policy Secure and ZTA Gateways.

6 January 2025     Advisory

The water utilities sector faces increasing cyber threats, targeting IT and OT systems alike. These attacks often target internet-exposed operation technology (OT) and industrial control system (ICS) devices. OT controls vital functions like pumps, chlorination, and valves. Older systems with inadequate updates and unprotected access points are vulnerable. Attackers may exploit weak security, such as default passwords, to breach critical infrastructure. They could use relatively simple techniques to attack smaller ICS and OT environments, including water, dams, energy, food and agriculture sectors. Some of these attacks include ransomware, unauthorised access to programmable logic controllers (PLCs), breaches exposing customer data, brute force attacks and accessing systems using default credentials. While larger utilities bolstered their defences, smaller systems remain highly vulnerable.

3 January 2025     Advisory

Recently, Adobe released security updates to address vulnerabilities in Adobe ColdFusion version 2023 and 2021.

3 January 2025     Advisory

Recently, Google has released security updates for the stable channel for 131.0.6778.241 (Platform version: 16063.68.0) for ChromeOS devices.