CISA tags NAKIVO backup flaw as actively exploited in attacks

US government warns agencies to make sure their backups are safe from NAKIVO security issue

A NAKIVO bug patched in November 2024 has been added to CISA's KEV catalog, so update now.

CISA tags NAKIVO backup flaw as actively exploited in attacks

CISA has warned U.S. federal agencies to secure their networks against attacks exploiting a high-severity vulnerability in NAKIVO's Backup & Replication software. [...]

The Good, the Bad and the Ugly in Cybersecurity

The Good | CISA Updates Its KEV Catalog, Reminding Users to Prioritize Patch Management CISA has added three newly exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, calling out the urgency of patching security flaws to keep organizations protected from active exploits. The first vulnerability, CVE-2025-1316 (critical severity), affects Edimax IC-7100 IP Cameras. This OS command injection flaw allows remote code exec…

NAKIVO Backup & Replication vulnerability exploited by attackers (CVE-2024-48248) - Help Net Security

A vulnerability (CVE-2024-48248) in NAKIVO Backup and Replication, a backup, ransomware protection and disaster recovery solution designed for organizations of all sizes and managed service providers (MSPs), is being actively exploited. The US Cybersecurity and Infrastructure Security Agency (CISA) has added the vulnerability to its Known Exploited Vulnerabilities catalog on Wednesday, but it’s yet unknown whether the flaw is being leveraged by …

Attackers exploit a vulnerability in the backup solution Nakivo Backup & Replication Director. There is a security patch.

Fortinet vulnerability exploited in ‘SuperBlack’ ransomware attacks, CISA confirms

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning to organizations, confirming that a critical vulnerability in Fortinet products is being actively exploited in an ongoing ransomware campaign. The agency has also added a separate supply chain vulnerability affecting the widely used GitHub Actions platform to its Known Exploited Vulnerabilities (KEV) catalog. […]