Tag: 2025-03-29

2 Attack Reports | 20 Vulnerabilities

Attack reports

Pulling the Threads on the Phish of Troy Hunt

A sophisticated phishing attack targeted Troy Hunt, compromising his Mailchimp account. The analysis reveals connections to the Scattered Spider group through domain pivoting. Using Validin's DNS, host response, and registration data, dozens of related domain names were uncovered. The investigation…
phishing
threat intelligence
infrastructure discovery
2025-03-29
dns pivoting
mailchimp
validin
troy hunt
Published: March 29, 2025
Downloadable IOCs: 0

A Deep Dive into Water Arsenal and Infrastructure

Water Gamayun, a suspected Russian threat actor, exploits the MSC EvilTwin zero-day vulnerability (CVE-2025-26633) to compromise systems and exfiltrate data. The group uses custom payloads like EncryptHub Stealer variants, SilentPrism and DarkWisp backdoors, as well as known malware like Stealc and…
backdoor
powershell
rhadamanthys
zero-day
stealer
stealc
c&c
CVE-2025-26633
msc eviltwin
2025-03-29
lolbins
darkwisp
encrypthub stealer
silentprism
Published: March 29, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-2266

9.8
    Wordpress
  • Checkout Mestres Do Wp For Woocommerce
Published: March 29, 2025

CVE-2025-2006

8.8
    Wordpress
  • Bbpress
Published: March 29, 2025

CVE-2025-2249

8.8
    Wordpress
  • Soj Soundslides
Published: March 29, 2025

CVE-2025-2803

7.3
    Wordpress
  • Air Quotes
Published: March 29, 2025

CVE-2024-13557

6.5
    United Themes
  • Shortcodes
Published: March 29, 2025

CVE-2024-11180

6.4
    Wordpress
  • Elementskit
Published: March 29, 2025

CVE-2025-1217

6.3
    Php
  • Php
Published: March 29, 2025

CVE-2024-43186

5.3
    Ibm
  • Infosphere Information Server
Published: March 29, 2025

CVE-2025-2840

5.3
    Wordpress
  • Plugin Dap To Autoresponders Email Syncing
Published: March 29, 2025

CVE-2024-7577

4.4
    Ibm
  • Infosphere Information Server
Published: March 29, 2025

CVE-2024-51477

4.3
    Ibm
  • Infosphere Information Server
Published: March 29, 2025

CVE-2024-55895

2.7
    Ibm
  • Infosphere Information Server
Published: March 29, 2025

CVE-2025-31367

None
    Fortinet
  • Fortinet
Published: March 29, 2025

CVE-2025-31368

None
    Fortinet
  • Fortinet
Published: March 29, 2025

CVE-2025-31369

None
    Fortinet
  • Fortinet
Published: March 29, 2025

CVE-2025-31370

None
    Fortinet
  • Fortigate
Published: March 29, 2025

CVE-2025-31371

None
    Fortinet
  • Fortinet
Published: March 29, 2025

CVE-2025-31372

None
    Fortinet
  • *
Published: March 29, 2025

CVE-2025-31373

None
    Fortinet
  • Fortinet
Published: March 29, 2025

CVE-2025-31374

None
    Fortinet
  • Fortinet
Published: March 29, 2025
Click here to see more Vulnerabilities