OGO Security - Notice history

Added virtual patches for in-the-wild CVE exploits

Virtual Patch CVE 2025-24813

Refinement of XSS & SST detections

Minor improvements & bug fixes

• Improved detection of command and XSS injections.

• Refined pattern matching for SQL injections.

• Added virtual patches for newly listed CISA KEV CVEs.

• Improved detection with a new drive for XSLT Injection.

• Enhanced SQL security with a drive targeting most obvious escape patterns.

Minor improvements & bug fixes

• Experimental detection of abusive 2FA OTP attempts to mitigate fraud.

• Expanded SQLi detection scope for improved coverage.

• Added artifacts to existing drives.

• New virtual patch Next.js CVE-2024-46982

• New virtual patch Cleo Harmony CVE-2024-55956

• Introduced new detection capabilities for JWT anomalies, enhancing security monitoring

• Minor performance optimizations and improvements.

• New virtual patch drive for Kerio Control CVE-2024-52875

• Resolve false positives and enhance protection provided by XSS drives

A new Dashboard feature is ready for launch :

Bugs solved :

• Site status issue : a site could appear to be "Created and waiting for DNS changeover" although the DNS changeover was detected and the SSL certificate was created and deployed.

A new Dashboard feature is ready for launch :

What's new :

• Improve performances

• Improve UI