InfoSecBulletin Cybersecurity for mankind
In 2024, Intel addressed a remarkable 374 vulnerabilities across its software, firmware, and hardware products, distributing bug bounty rewards for approximately half of these issues.
Intel’s latest product security report reveals that the highest number of resolved bugs last year (272) were in utilities (146), drivers (68), applications (35), SDKs (9), toolkits (8), and NUC appliances (5).
AWS SNS misused for Data Exfiltration and Phishing
Researcher found non protected database form ESHYFT containig 86000 records
CVE-2024-55591 and CVE-2025-24472
New SuperBlack ransomware exploits Fortinet flaws
CVE-2025-25291 & CVE-2025-25292
Attention! GitLab Patched Critical Authentication Bypass Flaws
CVE-2025-20138
Cisco released High Security Alert for IOS XR Software
400+ IPs Exploiting Multiple SSRF Vulnerabilities
NVIDIA has released update for NVIDIA Riva
CVE-2025-24201
Apple fixes 0-day exploited in “extremely sophisticated attack”
Microsoft’s March 2025 updates fix 7 zero-day, 57 flaws
Ballista Botnet infects 6000 Unpatched TP-Link Routers
In 2024, the company fixed 81 firmware flaws, primarily affecting UEFI (30), NUC BIOS (19), networking products (10), and chipsets (8).
Last year, Intel fixed 21 hardware vulnerabilities related to processors, Intel SGX, and side-channel issues, all found internally.
Last year, the number of resolved security defects was 6% higher than in 2023. Intel reported that proactive efforts led to an increase in flaws addressed, with 94% for firmware bugs and 92% for software issues.
The company reported that bug bounty rewards were given for 53% of the 374 vulnerabilities fixed in 2024. Most rewards (84%) were for software flaws, while 16% were for firmware defects.
In recent years Intel has no longer shared information on the bug bounty amounts it has paid out.
Intel’s report reveals that UEFI had the most bug bounties last year, followed by Power Gadget, NUC, NUC BIOS, and networking components.
The tech giant reported 52 platform firmware vulnerabilities, seven issues in its hardware root-of-trust firmware, and 10 GPU flaws last year.
The company updates microcode, firmware, and system BIOS quarterly, allowing partners to validate and implement fixes on a consistent schedule.
