Tag: 2025-01-28

5 Attack Reports | 101 Vulnerabilities

Attack reports

Analysis of Interlock Ransomware Attack on Healthcare Facilities

The Interlock ransomware group has been actively targeting healthcare facilities in the United States, causing significant disruptions and exposing sensitive patient data. The attacks involve drive-by compromise techniques, using fake software updaters to deploy malware. The group employs double-ex…
ransomware
credential theft
healthcare
lateral movement
data exfiltration
double-extortion
interlock
2025-01-28
drive-by compromise
Published: January 28, 2025
Downloadable IOCs: 0

New TorNet backdoor seen in widespread campaign

A financially motivated threat actor has been conducting a malicious campaign since July 2024, primarily targeting users in Poland and Germany. The campaign uses phishing emails impersonating financial institutions and companies to deliver various payloads, including a new backdoor called TorNet. T…
backdoor
phishing
evasion
poland
purecrypter
agent tesla
snake keylogger
2025-01-28
tornet
tor network
Published: January 28, 2025
Downloadable IOCs: 0

Security Brief: Threat Actors Take Taxes Into Account

Proofpoint researchers have identified an increase in campaigns and malicious domains impersonating tax agencies and financial organizations. This aligns with the annual increase in tax-related content observed from December through April. Phishing lures impersonate government agencies and financia…
xworm
rhadamanthys
financial fraud
asyncrat
venomrat
credential harvesting
metastealer
zgrat
malware delivery
government impersonation
2025-01-28
intuit
mygov
hmrc
tax-themed phishing
revolut
Published: January 28, 2025
Downloadable IOCs: 0

Fileless Python InfoStealer Targeting Exodus

A new Python-based info stealer targeting the Exodus crypto wallet has been discovered. This malware employs fileless techniques, clipboard monitoring, and keylogging to capture wallet passwords and sensitive data. It checks for the existence of 'passphrase.json' and, if not found, uses a keylogger…
python
infostealer
keylogger
2025-01-28
exodus
crypto-wallet
Published: January 28, 2025
Downloadable IOCs: 1

Technical Analysis of Xloader Versions 6 and 7

This analysis examines the latest versions of Xloader malware, focusing on its advanced obfuscation techniques. Xloader, successor to Formbook, is an information stealer targeting browsers, email clients, and FTP applications. The malware employs complex encryption layers to protect critical code a…
obfuscation
encryption
formbook
information stealer
process injection
xloader
2025-01-28
api resolution
ntdll hook evasion
Published: January 28, 2025
Downloadable IOCs: 261
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-23211

9.9
    Tandoor Recipes
Published: January 28, 2025

CVE-2022-3365

9.8
    Remote Mouse Server by Emote Interactive
Published: January 28, 2025

CVE-2024-12647

9.8
    Small Office Multifunction Printers and Laser Printers
Published: January 28, 2025

CVE-2024-12648

9.8
    Unknown
Published: January 28, 2025

CVE-2024-12649

9.8
    Small Office Multifunction Printers and Laser Printers
Published: January 28, 2025

CVE-2024-13448

9.8
    Themerex
  • Addons
Published: January 28, 2025

CVE-2024-45340

8.8
    UNKNOWN
Published: January 28, 2025

CVE-2018-9373

8.8
    MTK WLAN driver
Published: January 28, 2025

CVE-2024-57376

8.8
    D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N
Published: January 28, 2025

CVE-2025-23213

8.7
    Tandoor Recipes
Published: January 28, 2025

CVE-2025-0781

8.6
    UNKNOWN
Published: January 28, 2025

CVE-2025-22217

8.6
    Avi Load Balancer
Published: January 28, 2025

CVE-2024-34732

8.4
    UNKNOWN
Published: January 28, 2025

CVE-2024-34733

8.4
    Linux Kernel
Published: January 28, 2025

CVE-2024-34748

8.4
    Linux Kernel
Published: January 28, 2025

CVE-2024-40649

8.4
    Android Kernel
Published: January 28, 2025

CVE-2024-40651

8.4
    Linux Kernel
Published: January 28, 2025

CVE-2024-40669

8.4
    UNKNOWN
Published: January 28, 2025

CVE-2024-40670

8.4
    UNKNOWN
Published: January 28, 2025

CVE-2024-40672

8.4
    Android
Published: January 28, 2025

CVE-2024-40677

8.4
    Android
Published: January 28, 2025

CVE-2024-13484

8.2
    ArgoCD
Published: January 28, 2025

CVE-2024-0146

7.8
    NVIDIA vGPU software
Published: January 28, 2025

CVE-2025-0065

7.8
    TeamViewer
Published: January 28, 2025

CVE-2025-23385

7.8
    JetBrains ReSharper
    Rider
    dotTrace
    ETW Host Service
Published: January 28, 2025

CVE-2025-23212

7.7
    Tandoor Recipes
Published: January 28, 2025

CVE-2024-40676

7.7
    Android
Published: January 28, 2025

CVE-2024-0135

7.6
    NVIDIA Container Toolkit
Published: January 28, 2025

CVE-2024-0136

7.6
    NVIDIA Container Toolkit
Published: January 28, 2025

CVE-2025-22865

7.5
    Golang
Published: January 28, 2025

CVE-2024-11135

7.5
    Jyothisjoy
  • Eventer
Published: January 28, 2025

CVE-2024-40675

7.5
    Android
Published: January 28, 2025

CVE-2024-13509

7.2
    Westguardsolutions
  • Ws Form
Published: January 28, 2025

CVE-2024-45339

7.1
    glog
Published: January 28, 2025

CVE-2024-0150

7.1
    NVIDIA GPU display driver
Published: January 28, 2025

CVE-2024-0140

6.8
    NVIDIA RAPIDS
Published: January 28, 2025

CVE-2025-24826

6.7
    Acronis Snap Deploy (Windows)
Published: January 28, 2025

CVE-2025-0750

6.6
    CRI-O
Published: January 28, 2025

CVE-2022-31749

6.5
    WatchGuard Fireware OS
Published: January 28, 2025

CVE-2024-28786

6.5
    IBM QRadar SIEM
Published: January 28, 2025

CVE-2025-23053

6.5
    HPE Aruba Networking Fabric Composer
Published: January 28, 2025

CVE-2025-23054

6.5
    HPE Aruba Networking Fabric Composer
Published: January 28, 2025

CVE-2024-40673

6.5
    Android
Published: January 28, 2025

CVE-2025-0321

6.4
    Wpmet
  • Elementskit
Published: January 28, 2025

CVE-2024-13527

6.4
    Philantro
  • Philantro
Published: January 28, 2025

CVE-2023-50316

6.3
    IBM Sterling B2B Integrator
Published: January 28, 2025

CVE-2025-0752

6.3
    OpenShift Service Mesh
Published: January 28, 2025

CVE-2025-0783

6.3
    UNKNOWN
Published: January 28, 2025

CVE-2025-0786

6.3
    ESAFENET CDG
Published: January 28, 2025

CVE-2025-0788

6.3
    ESAFENET CDG
Published: January 28, 2025

CVE-2025-0789

6.3
    ESAFENET CDG
Published: January 28, 2025

CVE-2018-9378

6.2
    Android
Published: January 28, 2025

CVE-2024-45336

6.1
    Go programming language
Published: January 28, 2025

CVE-2024-45341

6.1
    UNKNOWN
Published: January 28, 2025

CVE-2024-12723

6.1
    Infility Global WordPress plugin
Published: January 28, 2025

CVE-2024-13521

6.1
    Ilghera
  • Mailup Auto Subscription
Published: January 28, 2025

CVE-2025-0432

5.7
    EWON Flexy 202
Published: January 28, 2025

CVE-2017-13317

5.7
    Android
Published: January 28, 2025

CVE-2017-13318

5.7
    Android
Published: January 28, 2025

CVE-2025-23084

5.6
    Node.js
Published: January 28, 2025

CVE-2024-0137

5.5
    NVIDIA Container Toolkit
Published: January 28, 2025

CVE-2024-0147

5.5
    NVIDIA GPU display driver
Published: January 28, 2025

CVE-2024-53869

5.5
    NVIDIA Unified Memory driver for Linux
Published: January 28, 2025

CVE-2024-53881

5.5
    NVIDIA vGPU software
Published: January 28, 2025

CVE-2025-0736

5.5
    Infinispan
Published: January 28, 2025

CVE-2025-23055

5.5
    HPE Aruba Networking Fabric Composer
Published: January 28, 2025

CVE-2025-23056

5.5
    HPE Aruba Networking Fabric Composer
Published: January 28, 2025

CVE-2025-23057

5.5
    HPE Aruba Networking Fabric Composer
Published: January 28, 2025

CVE-2024-29869

5.5
    Apache Hive
Published: January 28, 2025

CVE-2024-8401

5.4
    UNKNOWN
Published: January 28, 2025

CVE-2025-22917

5.4
    Audemium ERP
Published: January 28, 2025

CVE-2024-27263

5.3
    IBM Sterling B2B Integrator
Published: January 28, 2025

CVE-2024-40674

5.3
    Android
Published: January 28, 2025

CVE-2024-7881

5.1
    UNKNOWN
Published: January 28, 2025

CVE-2025-24810

4.8
    Simple Image Sizes
Published: January 28, 2025

CVE-2024-12807

4.8
    Social Share Buttons for WordPress plugin
Published: January 28, 2025

CVE-2024-57514

4.8
    TP-Link Archer A20 router
Published: January 28, 2025

CVE-2024-11956

4.7
    Pimcore customer-data-framework
Published: January 28, 2025

CVE-2025-0290

4.3
    GitLab CE/EE
Published: January 28, 2025

CVE-2025-0754

4.3
    OpenShift Service Mesh
Published: January 28, 2025

CVE-2024-6351

4.3
    Ember ZNet stack
Published: January 28, 2025

CVE-2024-22315

4.0
    IBM Fusion
    IBM Fusion HCI
Published: January 28, 2025

CVE-2025-0784

3.7
    Intelbras InControl
Published: January 28, 2025

CVE-2025-0785

3.5
    unknown
Published: January 28, 2025

CVE-2025-0787

3.5
    ESAFENET CDG
Published: January 28, 2025

CVE-2024-0149

3.3
    NVIDIA GPU Display Driver for Linux
Published: January 28, 2025

CVE-2024-11954

2.4
    Pimcore
Published: January 28, 2025

CVE-2024-23953

None
    Apache Hive
Published: January 28, 2025

CVE-2025-0659

None
    Rockwell Automation DataEdge Platform DataMosaix Private Cloud
Published: January 28, 2025

CVE-2025-23045

None
    Computer Vision Annotation Tool (CVAT)
Published: January 28, 2025

CVE-2025-24800

None
    ismp-grandpa crate
Published: January 28, 2025

CVE-2025-0631

None
    UNKNOWN
Published: January 28, 2025

CVE-2025-24478

None
    Rockwell Automation products
Published: January 28, 2025

CVE-2025-24479

None
    Windows
Published: January 28, 2025

CVE-2025-24480

None
    UNKNOWN
Published: January 28, 2025

CVE-2025-24481

None
    Rockwell Automation
Published: January 28, 2025

CVE-2025-24482

None
    UNKNOWN
Published: January 28, 2025

CVE-2024-55968

None
    DTEX DEC-M (DTEX Forwarder)
Published: January 28, 2025

CVE-2024-48310

None
    AutoLib Software Systems OPAC
Published: January 28, 2025

CVE-2024-56529

None
    Mailcow
Published: January 28, 2025

CVE-2024-57519

None
    Open5GS
Published: January 28, 2025
Click here to see more Vulnerabilities