Tag: 2025-03-21

6 Attack Reports | 70 Vulnerabilities

Attack reports

SVC New Stealer on the Horizon

SvcStealer 2025 is a newly discovered information stealer malware distributed through spear phishing emails. It targets sensitive data including machine information, installed software, user credentials, cryptocurrency wallets, and browser data. The malware creates a unique folder, terminates speci…
cryptocurrency
data exfiltration
information stealer
c2 communication
evasion techniques
spear phishing
2025-03-21
svcstealer
Published: March 21, 2025
Downloadable IOCs: 0

Real-Time Anti-Phishing: Essential Defense Against Evolving Cyber Threats

Phishing remains a prevalent cybersecurity threat, causing financial loss, data theft, and malware deployment. Attackers are expanding targets across platforms and using AI to refine techniques, making detection more challenging. Real-time anti-phishing (RTAP) solutions using AI and machine learnin…
phishing
social engineering
ai
cybersecurity
machine learning
2025-03-21
real-time anti-phishing
employee awareness
Published: March 21, 2025
Downloadable IOCs: 11

Operation FishMedley targeting governments, NGOs, and think tanks

ESET researchers have uncovered a global espionage operation called Operation FishMedley, conducted by the FishMonger APT group, which is operated by the Chinese contractor I-SOON. The campaign targeted governments, NGOs, and think tanks across Asia, Europe, and the United States during 2022. The a…
apt
espionage
china
government
shadowpad
ngo
2025-03-21
spyder
sodamaster
think tank
i-soon
rpipecommander
Published: March 21, 2025
Downloadable IOCs: 12

Clickbait to Catastrophe: How a Fake Meta Email Leads to Password Plunder

A sophisticated phishing campaign targeting Meta Business accounts has been uncovered by the Cofense Phishing Defense Center. The attack begins with a fake Instagram alert claiming the user's ads are suspended due to policy violations. Victims are directed to a fraudulent page mimicking Meta's busi…
phishing
credential theft
meta
social media
two-factor authentication
instagram
2025-03-21
chat support
business accounts
Published: March 21, 2025
Linked vulnerabilities : CVE-2025-24071 (CVSS 7.5)
Downloadable IOCs: 5

The rising threat of social engineering through fake fixes

ClickFix is an emerging social engineering tactic that manipulates users into executing malicious actions under the guise of troubleshooting or system maintenance. Attackers present fake error messages, CAPTCHA verifications, or system prompts to convince users to take actions that compromise their…
phishing
social engineering
powershell
asyncrat
clickfix
captcha
2025-03-21
command line
fake fixes
Published: March 21, 2025
Downloadable IOCs: 4

Albabat Ransomware Group Potentially Expands Targets to Multiple OS Uses GitHub to Streamline Operations

The Albabat ransomware group has evolved its malware to target Windows, Linux, and macOS devices, as evidenced by new versions 2.0.0 and 2.5. The group is using GitHub to streamline operations, storing configuration files and essential components. The ransomware ignores specific folders, encrypts c…
ransomware
cryptocurrency
encryption
github
multi-platform
2025-03-21
albabat
database
configuration
system information
Published: March 21, 2025
Downloadable IOCs: 2
Click here to see more Attack Reports

Vulnerabilities

CVE-2023-43029

10.0
    Ibm
  • Storage Virtualize Vsphere Remote Plugin
Published: March 21, 2025

CVE-2025-29814

9.3
    Microsoft
  • Partner Center
Published: March 21, 2025

CVE-2025-29927

9.1
    Vercel
  • Next.Js
Published: March 21, 2025

CVE-2025-2585

8.8
    Ebm Technologies
  • Ebm Maintenance Center
Published: March 21, 2025

CVE-2025-29807

8.7
    Microsoft
  • Dataverse
Published: March 21, 2025

CVE-2025-29230

8.6
    Linksys
  • E5600
Published: March 21, 2025

CVE-2025-26336

8.3
    Dell
  • Chassis Management Controller
Published: March 21, 2025

CVE-2025-2609

8.2
    Magnussolution
  • Magnusbilling
Published: March 21, 2025

CVE-2024-44305

7.8
    Apple
  • Macos
Published: March 21, 2025

CVE-2025-24915

7.8
    Tenable
  • Nessus Agent
Published: March 21, 2025

CVE-2025-2610

7.6
    Magnussolution
  • Magnusbilling
Published: March 21, 2025

CVE-2024-54551

7.5
    Apple
  • Watchos
  • Tvos
  • Safari
  • Macos Sonoma
  • Visionos
  • Ios
  • Ipados
Published: March 21, 2025

CVE-2025-25068

7.5
    Mattermost
  • Mattermost
Published: March 21, 2025

CVE-2025-30204

7.5
    Github
  • Golang-Jwt
Published: March 21, 2025

CVE-2025-25035

7.3
    Jalios
  • Jplatform
  • Jworkplace
Published: March 21, 2025

CVE-2025-30349

7.2
    Horde
  • Imp
  • Horde Application Framework
Published: March 21, 2025

CVE-2024-44199

7.1
    Apple
  • Macos Sonoma
Published: March 21, 2025

CVE-2025-30168

6.9
    Parse
  • Parse Server
Published: March 21, 2025

CVE-2025-25036

6.8
    Jalios
  • Jplatform
Published: March 21, 2025

CVE-2024-54564

6.5
    Apple
  • Visionos
  • Macos Sonoma
  • Ios
  • Ipad Os
Published: March 21, 2025

CVE-2025-30157

6.5
    Envoy
  • Envoy
Published: March 21, 2025

CVE-2024-50053

6.3
    Zohocorp
  • Managedengine Servicedesk Plus
  • Servicedesk Plus Msp
  • Supportcentre Plus
Published: March 21, 2025

CVE-2025-29223

6.3
    Linksys
  • E5600
Published: March 21, 2025

CVE-2025-29226

6.3
    Linksys
  • E5600
Published: March 21, 2025

CVE-2025-29227

6.3
    Linksys
  • E5600
Published: March 21, 2025

CVE-2025-27612

5.9
    Libcontainer
  • Libcontainer
Published: March 21, 2025

CVE-2025-30348

5.8
    Qt
  • Qt
Published: March 21, 2025

CVE-2025-2598

5.7
    Aws
  • Cloud Development Kit
Published: March 21, 2025

CVE-2023-28207

5.5
    Apple
  • Macos Ventura
  • Macos Monterey
  • Macos Big Sur
Published: March 21, 2025

CVE-2025-30342

5.4
    Openslides
  • Openslides
Published: March 21, 2025

CVE-2025-30346

5.4
    Varnish-Cache
  • Varnish Cache
    Varnish
Published: March 21, 2025

CVE-2025-27933

5.4
    Mattermost
  • Mattermost
Published: March 21, 2025

CVE-2025-2581

5.3
    Xmedcon
  • Xmedcon
Published: March 21, 2025

CVE-2025-30344

5.3
    Openslides
  • Openslides
Published: March 21, 2025

CVE-2024-13903

5.3
    Quickjs-Ng
  • Quickjs
Published: March 21, 2025

CVE-2025-2587

5.3
    Jinher
  • Oa
Published: March 21, 2025

CVE-2025-2591

5.3
    Open Asset Import Library
  • Assimp
Published: March 21, 2025

CVE-2025-2592

5.3
    Assimp
  • Open Asset Import Library
Published: March 21, 2025

CVE-2025-2593

5.3
    Fastcms
  • Fastcms
Published: March 21, 2025

CVE-2025-2601

5.3
    Sourcecodester
  • Kortex Lite Advocate Office Management System
Published: March 21, 2025

CVE-2025-2602

5.3
    Sourcecodester
  • Kortex Lite Advocate Office Management System
Published: March 21, 2025

CVE-2025-2603

5.3
    Sourcecodester
  • Kortex Lite Advocate Office Management System
Published: March 21, 2025

CVE-2025-2604

5.3
    Sourcecodester
  • Kortex Lite Advocate Office Management System
Published: March 21, 2025

CVE-2025-2606

5.3
    Sourcecodester
  • Best Church Management Software
Published: March 21, 2025

CVE-2025-2607

5.3
    Phplaozhang
  • Lzcms-Laozhangbokexitong
Published: March 21, 2025

CVE-2025-2608

5.3
    Phpgurukul
  • Banquet Booking System
Published: March 21, 2025

CVE-2021-25635

5.2
    The Document Foundation
  • Libreoffice
Published: March 21, 2025

CVE-2025-2582

5.1
    Simplemachines
  • Smf
Published: March 21, 2025

CVE-2025-2583

5.1
    Simplemachines
  • Smf
Published: March 21, 2025

CVE-2025-2597

5.1
    Impact Technologies
  • Itium 6050
Published: March 21, 2025

CVE-2025-2589

5.1
    Code-Projects
  • Human Resource Management System
Published: March 21, 2025

CVE-2025-2588

4.8
    Hercules
  • Augeas
Published: March 21, 2025

CVE-2025-2590

4.8
    Code-Projects
  • Human Resource Management System
Published: March 21, 2025

CVE-2019-16151

4.7
    Fortinet
  • Fortios
Published: March 21, 2025

CVE-2025-26500

4.6
    Wind River Systems
  • Vxworks
Published: March 21, 2025

CVE-2025-24920

4.3
    Mattermost
  • Mattermost
Published: March 21, 2025

CVE-2025-25274

4.3
    Mattermost
  • Mattermost
Published: March 21, 2025

CVE-2025-30179

4.3
    Mattermost
  • Mattermost
Published: March 21, 2025

CVE-2025-30347

4.0
    Varnish
  • Varnish Enterprise
Published: March 21, 2025

CVE-2025-30345

3.5
    Openslides
  • Openslides
Published: March 21, 2025

CVE-2025-27715

3.3
    Mattermost
  • Mattermost
Published: March 21, 2025

CVE-2025-30343

3.0
    Openslides
  • Openslides
Published: March 21, 2025

CVE-2025-2584

2.3
    Wabt
  • Wabt
Published: March 21, 2025

CVE-2024-57490

None
    Guangzhou Hongfan Technology Co.,Ltd
  • Ioffice20
Published: March 21, 2025

CVE-2025-29640

None
    Phpgurukul
  • Hmpv Testing Management System
Published: March 21, 2025

CVE-2025-29641

None
    Phpgurukul
  • Vehicle Record Management System
Published: March 21, 2025

CVE-2024-53348

None
    Loxilb
  • Loxilb
Published: March 21, 2025

CVE-2024-53349

None
    Kuadrant
  • Kuadrant
Published: March 21, 2025

CVE-2024-53350

None
    Kubeslice
  • Kubeslice
Published: March 21, 2025

CVE-2024-53351

None
    Pipecd
  • Pipecd
Published: March 21, 2025
Click here to see more Vulnerabilities