Tag: 2025-05-29

6 Attack Reports | 75 Vulnerabilities

Attack reports

Cybercriminals camouflaging threats as AI tool installers

Cybercriminals are exploiting the popularity of AI by distributing malware disguised as AI solution installers. Three threats have been identified: CyberLock ransomware, Lucky_Gh0$t ransomware, and a newly discovered destructive malware called Numero. CyberLock, developed using PowerShell, encrypts…
ransomware
powershell
seo poisoning
ai
yashma
chaos
seo manipulation
2025-05-29
cyberlock
technology sector
b2b sales
ai tools
lucky_gh0$t
marketing sector
fake installers
numero
2025-06-05
Published: June 5, 2025
Downloadable IOCs: 20

Chasing Eddies: New Rust-based InfoStealer used in CAPTCHA campaigns

A novel Rust-based infostealer called EDDIESTEALER has been discovered, distributed through fake CAPTCHA campaigns. The malware uses deceptive verification pages to trick users into executing a malicious PowerShell script, which deploys the infostealer. EDDIESTEALER targets sensitive data including…
powershell
infostealer
cryptocurrency
rust
data exfiltration
captcha
2025-05-29
eddiestealer
Published: May 29, 2025
Downloadable IOCs: 27

Malware Analysis Reveals Sophisticated RAT With Corrupted Headers

A sophisticated remote access Trojan (RAT) has been discovered operating within a legitimate Windows process, using advanced evasion techniques. The malware's PE and DOS headers were deliberately corrupted, making traditional analysis difficult. Fortinet's FortiGuard Incident Response Team analyzed…
remote access trojan
2025-05-29
corrupted headers
tls transmission
api mapping
Published: May 29, 2025
Downloadable IOCs: 0

PhaaS the Secrets: The Hidden Ties Between Tycoon2FA and Dadsec's Operations

This analysis explores the connections between two Phishing-as-a-Service (PhaaS) platforms: Tycoon2FA and Dadsec. The investigation reveals shared infrastructure and operational similarities, suggesting a common origin or adaptation. The report details the evolving tactics of Tycoon2FA, including i…
aitm
credential theft
mfa bypass
phishing-as-a-service
dadsec
tycoon2fa
2025-05-29
Published: May 29, 2025
Downloadable IOCs: 0

Thousands of ASUS Routers Hijacked in Stealthy Backdoor Campaign

A sophisticated hacking campaign has compromised approximately 9000 ASUS routers, creating persistent backdoors that survive firmware updates and reboots. The attackers utilize the routers' legitimate features to maintain long-term access without dropping malware or leaving traces. This operation a…
backdoor
botnet
2025-05-29
ssh access
operational relay box
asus routers
CVE-2023-39780
Published: May 29, 2025
Downloadable IOCs: 0

Inside a VenomRAT Malware Campaign

A malicious campaign utilizing VenomRAT, a Remote Access Trojan, is analyzed. The attackers use a fake Bitdefender download website to spread malware, including VenomRAT, StormKitty, and SilentTrinity. These tools work together to provide initial access, steal credentials, and maintain long-term hi…
phishing
credential theft
venomrat
open-source malware
command and control
remote access trojan
stormkitty
silenttrinity
2025-05-29
Published: May 29, 2025
Downloadable IOCs: 35
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-48748

10.0
    Netwrix
  • Directory Manager
Published: May 29, 2025

CVE-2023-41591

9.8
    Open Network Foundation
  • Onos
Published: May 29, 2025

CVE-2025-48336

9.8
    Thimpress
  • Course Builder
Published: May 29, 2025

CVE-2025-30466

9.8
    Apple
  • Safari
  • Ios
  • Ipad Os
  • Vision Os
  • Macos Sequoia
Published: May 29, 2025

CVE-2025-48047

9.4
    Netfax
  • Server
Published: May 29, 2025

CVE-2025-3755

9.1
    Mitsubishi
  • Melsec Iq F Series Cpu Modules
Published: May 29, 2025

CVE-2025-4967

9.1
    Esri
  • Portal For Arcgis
Published: May 29, 2025

CVE-2025-31263

9.1
    Apple
  • Macos
Published: May 29, 2025

CVE-2025-47933

9.0
    Argoproj
  • Argo Cd
Published: May 29, 2025

CVE-2024-51392

8.8
    Openknowledgemaps
  • Headstart
Published: May 29, 2025

CVE-2025-48045

8.7
    *
  • *
Published: May 29, 2025

CVE-2025-48389

8.6
    Freescout
  • Freescout
Published: May 29, 2025

CVE-2025-48390

8.6
    Freescout
  • Freescout
Published: May 29, 2025

CVE-2025-5307

8.4
    Santesoft
  • Sante Dicoms Viewer Pro
Published: May 29, 2025

CVE-2025-5273

8.2
    Mcp
  • Markdownify-Server
Published: May 29, 2025

CVE-2025-5276

8.2
    Mcp
  • Markdownify-Server
Published: May 29, 2025

CVE-2025-31189

8.2
    Apple
  • Macos
Published: May 29, 2025

CVE-2025-46823

8.0
    Openmrs
  • Openmrs Module Fhir2
Published: May 29, 2025

CVE-2024-22654

7.5
    Tcpreplay
  • Tcpreplay
Published: May 29, 2025

CVE-2025-5334

7.5
    Devolutions
  • Remote Desktop Manager
Published: May 29, 2025

CVE-2024-54952

7.5
    Mikrotik
  • Routeros
Published: May 29, 2025

CVE-2025-45474

7.3
    Maccms10
  • Maccms10
Published: May 29, 2025

CVE-2025-46701

7.3
    Apache
  • Tomcat
Published: May 29, 2025

CVE-2025-4687

7.2
    Teltonika
  • Remote Management System
Published: May 29, 2025

CVE-2025-48388

7.0
    Freescout
  • Freescout
Published: May 29, 2025

CVE-2025-48471

7.0
    Freescout
  • Freescout
Published: May 29, 2025

CVE-2025-48472

6.9
    Freescout
  • Freescout
Published: May 29, 2025

CVE-2025-5330

6.9
    Freefloat
  • Ftp Server
Published: May 29, 2025

CVE-2025-5331

6.9
    Pcman
  • Ftp Server
Published: May 29, 2025

CVE-2025-5332

6.9
    1000projects
  • Online Notice Board
Published: May 29, 2025

CVE-2024-49350

6.5
    Ibm
  • Ibm Db2
Published: May 29, 2025

CVE-2025-4670

6.4
    Easy Digital Downloads
  • Easy Digital Downloads
Published: May 29, 2025

CVE-2025-5122

6.4
    Wordpress
  • Plugin
Published: May 29, 2025

CVE-2025-5286

6.4
    Wordpress
  • Plugin
Published: May 29, 2025

CVE-2025-5320

6.3
    Gradio-App
  • Gradio
Published: May 29, 2025

CVE-2025-5323

6.3
    Fossasia
  • Open-Event-Server
Published: May 29, 2025

CVE-2025-33043

5.8
    Ami
  • Aptio
Published: May 29, 2025

CVE-2024-53423

5.6
    Open Network Foundation
  • Onos
Published: May 29, 2025

CVE-2025-31198

5.5
    Apple
  • Macos Ventura
  • Macos Sequoia
  • Macos Sonoma
Published: May 29, 2025

CVE-2025-31199

5.5
    Apple
  • Ios
  • Ipad Os
  • Vision Os
  • Macos Sequoia
Published: May 29, 2025

CVE-2025-31231

5.5
    Apple
  • Macos Sequoia
Published: May 29, 2025

CVE-2025-31261

5.5
    Apple
  • Macos Ventura
  • Macos Sequoia
  • Macos Sonoma
Published: May 29, 2025

CVE-2025-4583

5.4
    Smashballoon
  • Social Photo Feed
Published: May 29, 2025

CVE-2025-29632

5.4
    Free5gc
  • Free5gc
Published: May 29, 2025

CVE-2025-48046

5.3
    Server
  • Smtp Server
Published: May 29, 2025

CVE-2025-46078

5.3
    Huocms
  • Huocms
Published: May 29, 2025

CVE-2025-46080

5.3
    Huocms
  • Huocms
Published: May 29, 2025

CVE-2025-5321

5.3
    Aimhubio
  • Aim
Published: May 29, 2025

CVE-2025-3913

5.3
    Mattermost
  • Mattermost
Published: May 29, 2025

CVE-2025-48473

5.3
    Freescout
  • Freescout
Published: May 29, 2025

CVE-2025-48474

5.3
    Freescout
  • Freescout
Published: May 29, 2025

CVE-2025-48475

5.3
    Freescout
  • Freescout
Published: May 29, 2025

CVE-2025-2518

5.3
    Ibm
  • Db2
Published: May 29, 2025

CVE-2025-3050

5.3
    Ibm
  • Db2
Published: May 29, 2025

CVE-2025-5325

5.3
    Zhilink
  • Adp Application Developer Platform
Published: May 29, 2025

CVE-2025-5326

5.3
    Zhilink
  • Adp Application Developer Platform
Published: May 29, 2025

CVE-2025-5327

5.3
    Chshcms
  • Mccms
Published: May 29, 2025

CVE-2025-5328

5.3
    Chshcms
  • Mccms
Published: May 29, 2025

CVE-2024-52588

4.9
    Strapi
  • Strapi
Published: May 29, 2025

CVE-2025-32752

4.9
    Dell
  • Thin Os
Published: May 29, 2025

CVE-2024-22653

4.8
    Yasm
  • Yasm
Published: May 29, 2025

CVE-2025-4081

4.8
    Apple
  • Da Vinci Resolve
Published: May 29, 2025

CVE-2025-5324

4.8
    Techpowerup
  • Gpu-Z
Published: May 29, 2025

CVE-2025-27151

4.7
    Redis
  • Redis
Published: May 29, 2025

CVE-2025-31264

4.6
    Apple
  • Macos Ventura
  • Macos Sequoia
  • Macos Sonoma
Published: May 29, 2025

CVE-2025-46722

4.2
    Vllm
  • Vllm
Published: May 29, 2025

CVE-2025-47288

3.5
    Discourse
  • Discourse Policy Plugin
Published: May 29, 2025

CVE-2025-46570

2.6
    Vllm
  • Vllm
Published: May 29, 2025

CVE-2025-37993

None
    Linux
  • Linux Kernel
Published: May 29, 2025

CVE-2025-37994

None
    Linux
  • Linux Kernel
Published: May 29, 2025

CVE-2025-37995

None
    Linux
  • Linux Kernel
Published: May 29, 2025

CVE-2025-37996

None
    Linux
  • Linux Kernel
    Qemu
Published: May 29, 2025

CVE-2025-37997

None
    Linux
  • Linux Kernel
Published: May 29, 2025

CVE-2025-37998

None
    Linux
  • Linux Kernel
    Openvswitch
Published: May 29, 2025

CVE-2025-37999

None
    Linux
  • Kernel
Published: May 29, 2025
Click here to see more Vulnerabilities