Vulnerability Summary for the Week of February 17, 2025

High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info a1post–A1POST.BG Shipping for Woo  Cross-Site Request Forgery (CSRF) vulnerability in a1post A1POST.BG Shipping for Woo allows Privilege Escalation. This issue affects A1POST.BG Shipping for Woo: from n/a through 1.5.1.…

LogonBox SSPR 2.4.11 – Now Available

IntroductionLogonBox is pleased to announce the immediate availability of LogonBox SSPR 2.4.11.This release includes extra support for TOTP in our own authenticator as well as updated components to address potential security concerns.TOTP additionsThe LogonBox Authenticator now supports failover to using…

LogonBox VPN 2.4.11 – Now Available

IntroductionLogonBox is pleased to announce the immediate availability of LogonBox VPN 2.4.11.This release includes extra support for TOTP in our own authenticator as well as updated components to address potential security concerns.TOTP additionsThe LogonBox Authenticator now supports failover to using…

Phishing Campaigns Targeting Higher Education Institutions

Written by: Ashley Pearson, Ryan Rath, Gabriel Simches, Brian Timberlake, Ryan Magaw, Jessica Wilbur < div class=”block-paragraph_advanced”> Overview Beginning in August 2024, Mandiant observed a notable increase in phishing attacks targeting the education industry, specifically U.S.-based universities. A separate investigation conducted…