Tag: 2025-02-04

5 Attack Reports | 143 Vulnerabilities

Attack reports

Stealers on the Rise: A Closer Look at a Growing macOS Threat

This analysis examines the increasing prevalence of macOS infostealers, focusing on three prominent threats: Atomic Stealer, Poseidon Stealer, and Cthulhu Stealer. These malware variants target sensitive information, including financial details, credentials, and intellectual property. The article d…
infostealer
macos
credential theft
data exfiltration
atomic stealer
cthulhu stealer
applescript
2025-02-04
poseidon stealer
Published: February 4, 2025
Downloadable IOCs: 26

NOVA: blast from the past

A large-scale campaign targeting Russian organizations across various industries has been uncovered. The attackers are using NOVA stealer, a commercial fork of SnakeLogger, distributed via phishing emails disguised as contract archives. NOVA, marketed under the Malware-as-a-Service model, steals cr…
phishing
credential-theft
stealer
persistence
maas
nova
2025-02-04
snakelogger
Published: February 4, 2025
Downloadable IOCs: 1

CVE-2025-0411: Ukrainian Organizations Targeted in Zero-Day Campaign and Homoglyph Attacks

A zero-day vulnerability in 7-Zip (CVE-2025-0411) was exploited by Russian cybercrime groups to target Ukrainian organizations. The vulnerability allows bypassing Windows Mark-of-the-Web protections through double archiving, enabling execution of malicious content. The campaign involved spear-phish…
zero-day
cyberespionage
smokeloader
spear-phishing
CVE-2025-0411
2025-02-04
7-zip
homoglyph attacks
mark-of-the-web bypass
Published: February 4, 2025
Downloadable IOCs: 0

macOS FlexibleFerret | Further Variants of DPRK Malware Family Unearthed

This intelligence analysis describes newly discovered variants of the DPRK-attributed macOS Ferret malware family, labeled as 'FlexibleFerret'. The malware is part of the ongoing 'Contagious Interview' campaign targeting developers and job seekers. The new variants include a dropper package contain…
persistence
developers
macos
dropper
github
dprk
contagious interview
2025-02-04
friendlyferret_secd
flexibleferret
frostyferret_ui
chromeupdate
multi_frostyferret_cmdcodes
Published: February 4, 2025
Downloadable IOCs: 2

Uncovering Cyber Threat Networks: SmartApeSG & NetSupport RAT

This investigation explores the connections between SmartApeSG, a FakeUpdate threat, and NetSupport RAT. Through analysis of Internet telemetry data, the research uncovered related C2 management hosts, active NetSupport RAT servers, and cross-connections to suspicious infrastructure. Key findings i…
cryptocurrency
socgholish
quasar rat
netsupport rat
clearfake
c2 infrastructure
2025-02-04
moldovan ips
pivoting analysis
fakeupdate
landupdate808
ispmanager
smartapesg
lycantrox
Published: February 4, 2025
Downloadable IOCs: 57
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-24677

9.9
    Post/Page Copying Tool
Published: February 4, 2025

CVE-2025-22204

9.8
    Joomla
Published: February 4, 2025

CVE-2025-0890

9.8
    Zyxel VMG4325-B10A
Published: February 4, 2025

CVE-2025-1009

9.8
    Mozilla
  • Firefox
  • Thunderbird
Published: February 4, 2025

CVE-2025-1016

9.8
    Mozilla
  • Firefox
  • Thunderbird
Published: February 4, 2025

CVE-2025-1017

9.8
    Mozilla
  • Firefox
  • Thunderbird
Published: February 4, 2025

CVE-2025-1020

9.8
    Mozilla
  • Firefox
  • Thunderbird
Published: February 4, 2025

CVE-2024-9643

9.8
    Four-Faith F3x36 router
Published: February 4, 2025

CVE-2024-9644

9.8
    Four-Faith F3x36 router
Published: February 4, 2025

CVE-2025-0364

9.8
    BigAnt Server
Published: February 4, 2025

CVE-2025-0960

9.8
    AutomationDirect C-more EA9 HMI
Published: February 4, 2025

CVE-2024-48445

9.8
    compop.ca ONLINE MALL
Published: February 4, 2025

CVE-2025-24964

9.6
    Vitest
Published: February 4, 2025

CVE-2025-22699

9.0
    Traveler Code
Published: February 4, 2025

CVE-2024-40890

8.8
    Zyxel
  • Vmg1312-B10a Firmware
  • Vmg1312-B10a
  • Vmg1312-B10b Firmware
  • Vmg1312-B10b
  • Vmg1312-B10e Firmware
  • Vmg1312-B10e
  • Vmg3312-B10a Firmware
  • Vmg3312-B10a
  • Vmg3313-B10a Firmware
  • Vmg3313-B10a
  • Vmg3926-B10b Firmware
  • Vmg3926-B10b
  • Vmg4325-B10a Firmware
  • Vmg4325-B10a
  • Vmg4380-B10a Firmware
  • Vmg4380-B10a
  • Vmg8324-B10a Firmware
  • Vmg8324-B10a
  • Vmg8924-B10a Firmware
  • Vmg8924-B10a
  • Sbg3300-N000 Firmware
  • Sbg3300-N000
  • Sbg3300-Nb00 Firmware
  • Sbg3300-Nb00
  • Sbg3500-N000 Firmware
  • Sbg3500-Nb00 Firmware
  • Sbg3500-Nb00
Published: February 4, 2025

CVE-2024-40891

8.8
    Zyxel
  • Vmg1312-B10a Firmware
  • Vmg1312-B10a
  • Vmg1312-B10b Firmware
  • Vmg1312-B10b
  • Vmg1312-B10e Firmware
  • Vmg1312-B10e
  • Vmg3312-B10a Firmware
  • Vmg3312-B10a
  • Vmg3313-B10a Firmware
  • Vmg3313-B10a
  • Vmg3926-B10b Firmware
  • Vmg3926-B10b
  • Vmg4325-B10a Firmware
  • Vmg4325-B10a
  • Vmg4380-B10a Firmware
  • Vmg4380-B10a
  • Vmg8324-B10a Firmware
  • Vmg8324-B10a
  • Vmg8924-B10a Firmware
  • Vmg8924-B10a
  • Sbg3300-N000 Firmware
  • Sbg3300-N000
  • Sbg3300-Nb00 Firmware
  • Sbg3300-Nb00
  • Sbg3500-N000 Firmware
  • Sbg3500-Nb00 Firmware
  • Sbg3500-Nb00
Published: February 4, 2025

CVE-2025-23015

8.8
    Apache Cassandra
Published: February 4, 2025

CVE-2025-1010

8.8
    Mozilla
  • Firefox
  • Thunderbird
Published: February 4, 2025

CVE-2025-1011

8.8
    Mozilla
  • Firefox
  • Thunderbird
Published: February 4, 2025

CVE-2025-1014

8.8
    Mozilla
  • Firefox
  • Thunderbird
Published: February 4, 2025

CVE-2025-23058

8.8
    ClearPass Policy Manager
Published: February 4, 2025

CVE-2025-24968

8.8
    reNgine
Published: February 4, 2025

CVE-2025-22700

8.5
    Traveler Code
Published: February 4, 2025

CVE-2024-55948

8.2
    Discourse
Published: February 4, 2025

CVE-2025-23023

8.2
    Discourse
Published: February 4, 2025

CVE-2023-39943

7.8
    Ashlar-Vellum Cobalt
Published: February 4, 2025

CVE-2023-40222

7.8
    Ashlar-Vellum Cobalt
Published: February 4, 2025

CVE-2024-11467

7.8
    Omnissa Horizon Client for macOS
Published: February 4, 2025

CVE-2024-11468

7.8
    Horizon Client for macOS
Published: February 4, 2025

CVE-2025-22205

7.5
    Joomla Admiror Gallery extension
Published: February 4, 2025

CVE-2025-1012

7.5
    Mozilla
  • Firefox
  • Thunderbird
Published: February 4, 2025

CVE-2025-24648

7.5
    Admin and Site Enhancements (ASE)
Published: February 4, 2025

CVE-2025-0509

7.3
    Sparkle
Published: February 4, 2025

CVE-2024-10237

7.2
    Supermicro MBD-X12DPG-OA6
Published: February 4, 2025

CVE-2024-10238

7.2
    Supermicro MBD-X12DPG-OA6
Published: February 4, 2025

CVE-2024-10239

7.2
    Supermicro MBD-X12DPG-OA6
Published: February 4, 2025

CVE-2024-23690

7.2
    Netgear FVS336Gv2
    Netgear FVS336Gv3
Published: February 4, 2025

CVE-2024-13723

7.2
    Checkmk
Published: February 4, 2025

CVE-2024-13329

7.1
    Solidres WordPress plugin
Published: February 4, 2025

CVE-2024-13330

7.1
    JustRows free WordPress plugin
Published: February 4, 2025

CVE-2025-22794

7.1
    Landoweb Programador World Cup Predictor
Published: February 4, 2025

CVE-2025-23645

7.1
    Find Content IDs
Published: February 4, 2025

CVE-2025-24598

7.1
    Wpmailster
  • Wp Mailster
Published: February 4, 2025

CVE-2025-24599

7.1
    Tribulant Newsletters
Published: February 4, 2025

CVE-2025-24602

7.1
    WP24 Domain Check
Published: February 4, 2025

CVE-2025-20881

7.0
    Samsung
  • Android
Published: February 4, 2025

CVE-2025-20882

7.0
    Samsung
  • Android
Published: February 4, 2025

CVE-2025-20888

7.0
    Samsung
  • Android
Published: February 4, 2025

CVE-2025-20890

7.0
    Samsung
  • Android
Published: February 4, 2025

CVE-2025-20897

6.8
    Secure Folder for Android
Published: February 4, 2025

CVE-2025-23059

6.8
    HPE Aruba Networking ClearPass Policy Manager
Published: February 4, 2025

CVE-2025-23060

6.6
    HPE Aruba Networking ClearPass Policy Manager
Published: February 4, 2025

CVE-2024-13356

6.5
    DSGVO All in one for WP plugin for WordPress
Published: February 4, 2025

CVE-2024-13529

6.5
    WordPress SocialV - Social Network and Community BuddyPress Theme theme
Published: February 4, 2025

CVE-2025-0510

6.5
    Mozilla
  • Thunderbird
Published: February 4, 2025

CVE-2025-1013

6.5
    Thunderbird
    Firefox
    Firefox ESR
Published: February 4, 2025

CVE-2025-22642

6.5
    RTO GmbH Dynamic Conditions
Published: February 4, 2025

CVE-2025-22653

6.5
    Music Press Pro
Published: February 4, 2025

CVE-2025-22662

6.5
    SendPulse Email Marketing Newsletter
Published: February 4, 2025

CVE-2025-22674

6.5
    Product Blocks for WooCommerce
Published: February 4, 2025

CVE-2025-22675

6.5
    bPlugins Alert Box Block - Display notice/alerts in the front end
Published: February 4, 2025

CVE-2025-22697

6.5
    Cyberchimps
  • Responsive Blocks
Published: February 4, 2025

CVE-2025-22730

6.5
    Ksher
Published: February 4, 2025

CVE-2025-24373

6.5
    Wpovernight
  • Woocommerce Pdf Invoices\& Packing Slips
Published: February 4, 2025

CVE-2025-0630

6.5
    Western Telematic (WTI) products
Published: February 4, 2025

CVE-2024-56328

6.5
    Discourse
Published: February 4, 2025

CVE-2025-22602

6.5
    Discourse
Published: February 4, 2025

CVE-2024-12597

6.4
    Hasthemes
  • Ht Mega
Published: February 4, 2025

CVE-2025-20885

6.4
    Samsung
  • Android
Published: February 4, 2025

CVE-2024-13403

6.4
    WPForms plugin
Published: February 4, 2025

CVE-2024-13733

6.4
    SKT Blocks - Gutenberg based Page Builder plugin for WordPress
Published: February 4, 2025

CVE-2024-13699

6.4
    Qodeinteractive
  • Qi Addons For Elementor
Published: February 4, 2025

CVE-2025-20900

6.3
    Blockchain Keystore
Published: February 4, 2025

CVE-2025-20904

6.3
    Samsung
  • Android
Published: February 4, 2025

CVE-2025-20905

6.3
    Samsung
  • Android
Published: February 4, 2025

CVE-2025-0444

6.3
    Google Chrome
Published: February 4, 2025

CVE-2025-0451

6.3
    Google Chrome
Published: February 4, 2025

CVE-2024-13114

6.1
    WP Projects Portfolio with Client Testimonials WordPress plugin
Published: February 4, 2025

CVE-2024-13115

6.1
    WP Projects Portfolio with Client Testimonials WordPress plugin
Published: February 4, 2025

CVE-2024-13325

6.1
    Glossy WordPress plugin
Published: February 4, 2025

CVE-2024-13326

6.1
    iBuildApp WordPress plugin
Published: February 4, 2025

CVE-2024-13327

6.1
    Musicbox WordPress plugin
Published: February 4, 2025

CVE-2024-13328

6.1
    Giga Messenger WordPress plugin
Published: February 4, 2025

CVE-2024-13331

6.1
    WP Dream Carousel WordPress plugin
Published: February 4, 2025

CVE-2024-13332

6.1
    TransFinanz WordPress plugin
Published: February 4, 2025

CVE-2025-0368

6.1
    Banner Garden Plugin for WordPress plugin
Published: February 4, 2025

CVE-2024-13510

6.1
    ShopSite plugin for WordPress
Published: February 4, 2025

CVE-2024-40700

6.1
    IBM Security Verify Access Appliance
Published: February 4, 2025

CVE-2025-20907

6.0
    Samsung
  • Android
Published: February 4, 2025

CVE-2025-20892

5.9
    Samsung
  • Android
Published: February 4, 2025

CVE-2025-22641

5.9
    FM Notification Bar
Published: February 4, 2025

CVE-2025-22664

5.9
    Survey Maker
Published: February 4, 2025

CVE-2025-24963

5.9
    Vitest
Published: February 4, 2025

CVE-2024-43187

5.9
    IBM Security Verify Access Appliance
    IBM Security Verify Access Container
Published: February 4, 2025

CVE-2025-20906

5.5
    Android Settings app
Published: February 4, 2025

CVE-2025-24860

5.4
    Apache Cassandra
Published: February 4, 2025

CVE-2025-1015

5.4
    Mozilla
  • Thunderbird
Published: February 4, 2025

CVE-2025-22696

5.4
    Document Block – Upload & Embed Docs
Published: February 4, 2025

CVE-2024-48019

5.4
    Apache Doris
Published: February 4, 2025

CVE-2025-0445

5.4
    Google Chrome
Published: February 4, 2025

CVE-2024-13722

5.4
    Checkmk
Published: February 4, 2025

CVE-2025-0466

5.3
    Sensei LMS WordPress plugin
Published: February 4, 2025

CVE-2025-20887

5.3
    Samsung
  • Android
Published: February 4, 2025

CVE-2025-20889

5.3
    Samsung
  • Android
Published: February 4, 2025

CVE-2025-20891

5.3
    Samsung
  • Android
Published: February 4, 2025

CVE-2024-27137

5.3
    Apache Cassandra
Published: February 4, 2025

CVE-2025-1018

5.3
    Mozilla
  • Firefox
  • Thunderbird
Published: February 4, 2025

CVE-2024-45659

5.3
    IBM Security Verify Access Appliance
Published: February 4, 2025

CVE-2025-20893

5.1
    Samsung
  • Android
Published: February 4, 2025

CVE-2025-20902

5.1
    Media Controller
Published: February 4, 2025

CVE-2024-45657

5.0
    IBM Security Verify Access Appliance
Published: February 4, 2025

CVE-2025-22206

4.7
    JS Jobs plugin for Joomla
Published: February 4, 2025

CVE-2025-25039

4.7
    HPE Aruba Networking ClearPass Policy Manager
Published: February 4, 2025

CVE-2025-20883

4.6
    Samsung
  • Android
Published: February 4, 2025

CVE-2025-20884

4.6
    Samsung
  • Android
Published: February 4, 2025

CVE-2025-20894

4.6
    Samsung Email
Published: February 4, 2025

CVE-2025-20898

4.6
    Samsung Members
Published: February 4, 2025

CVE-2025-20901

4.4
    Blockchain Keystore
Published: February 4, 2025

CVE-2025-24982

4.3
    Activity Log WinterLock
Published: February 4, 2025

CVE-2024-13607

4.3
    JS Help Desk - The Ultimate Help Desk & Support Plugin plugin for WordPress
Published: February 4, 2025

CVE-2024-12046

4.3
    Medical Addon for Elementor plugin for WordPress
Published: February 4, 2025

CVE-2024-13514

4.3
    B Slider- Gutenberg Slider Block for WP plugin for WordPress
Published: February 4, 2025

CVE-2025-1019

4.3
    Mozilla
  • Firefox
  • Thunderbird
Published: February 4, 2025

CVE-2025-22643

4.3
    OnePress
Published: February 4, 2025

CVE-2024-53266

4.3
    Discourse
Published: February 4, 2025

CVE-2024-53851

4.3
    Discourse
Published: February 4, 2025

CVE-2024-53994

4.3
    Discourse
Published: February 4, 2025

CVE-2025-20886

4.1
    Samsung
  • Android
Published: February 4, 2025

CVE-2025-20896

4.0
    EasySetup
Published: February 4, 2025

CVE-2025-20899

4.0
    PushNotification
Published: February 4, 2025

CVE-2025-22475

3.7
    Dell
  • Data Domain Operating System
Published: February 4, 2025

CVE-2025-20895

3.2
    Samsung Galaxy Store
Published: February 4, 2025

CVE-2025-22601

3.1
    Discourse
Published: February 4, 2025

CVE-2024-45658

2.7
    IBM Security Verify Access Appliance
Published: February 4, 2025

CVE-2024-56197

2.2
    Discourse
Published: February 4, 2025

CVE-2025-1003

None
    HP Anyware Agent for Linux
Published: February 4, 2025

CVE-2024-11623

None
    Authentik
Published: February 4, 2025

CVE-2025-0825

None
    cpp-httplib
Published: February 4, 2025

CVE-2025-24971

None
    DumpDrop
Published: February 4, 2025

CVE-2025-24966

None
    reNgine
Published: February 4, 2025

CVE-2025-24967

None
    reNgine
Published: February 4, 2025

CVE-2024-35138

None
    IBM Security Verify Access Appliance
    IBM Security Verify Access Container
Published: February 4, 2025

CVE-2024-8125

None
    OpenText™ Content Management (Extended ECM)
Published: February 4, 2025
Click here to see more Vulnerabilities