CISA Adds Five Known Exploited Vulnerabilities to Catalog

CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-20118 Cisco Small Business RV Series Routers Command Injection Vulnerability CVE-2022-43939 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability CVE-2022-43769 Hitachi Vantara Pentaho BA Server Special…

Scammers Exploit Google and PayPal’s Infrastructure to Steal Users Private Data

  Cybersecurity experts discovered a sophisticated phishing campaign that used Google Ads and PayPal’s infrastructure to defraud users and obtain sensitive personal information.  The attackers abused vulnerabilities in Google’s ad standards and PayPal’s “no-code checkout” feature to create fake payment…

Vulnerability Summary for the Week of February 24, 2025

High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info jupyterhub–ltiauthenticator  `jupyterhub-ltiauthenticator` is a JupyterHub authenticator for learning tools interoperability (LTI). LTI13Authenticator that was introduced in `jupyterhub-ltiauthenticator` 1.3.0 wasn’t validating JWT signatures. This is believed to allow the LTI13Authenticator…