Tag: 2025-06-11

5 Attack Reports | 73 Vulnerabilities

Attack reports

Analysis of the Triple Combo Threat of the Kimsuky Group

The Genians Security Center (GSC) detected an APT (Advanced Persistent Threat) campaign targeting users of Facebook, email, and Telegram in Korea between March and April 2025. The threat actor explored reconnaissance and selected attack targets through two Facebook accounts.
apt
kimsuky
babyshark
powershell
shell
dll file
execution
appleseed
telegram
facebook
linkedin
vmprotect
2025-06-11
username
kimsuky group
flowerpower
golddragon
Published: June 11, 2025
Downloadable IOCs: 14

New BrowserVenom malware being distributed via fake DeepSeek phishing website

A new malicious campaign is distributing previously unknown malware through a fake DeepSeek-R1 LLM environment installer. The phishing site, promoted via Google Ads, mimics the official DeepSeek homepage. The attack installs BrowserVenom, an implant that forces all browsing traffic through a proxy …
phishing
malvertising
proxy
llm
deepseek
2025-06-11
browser manipulation
browservenom
Published: June 11, 2025
Linked vulnerabilities : CVE-2024-3721
Downloadable IOCs: 7

Unmasking the Infrastructure of a Spear‑phishing Campaign

Censys researchers uncovered a spear‑phishing campaign where threat actors leveraged a cluster of 16 open directories hosting heavily obfuscated Visual Basic Script (VBS) files. The study analyzes how attackers set up these public-accessible directories to store malicious scripts, the obfuscation t…
spearphishing
remcos
asyncrat
dcrat
2025-06-11
limerat
opendir
Published: June 11, 2025
Downloadable IOCs: 54

Eggs in a Cloudy Basket: Skeleton Spider's Trusted Cloud Malware Delivery

Skeleton Spider, also known as FIN6, is a financially motivated cybercrime group that has evolved from POS breaches to broader enterprise threats. They employ social engineering tactics, posing as job seekers on platforms like LinkedIn to deliver phishing messages. Their preferred payload is more_e…
backdoor
phishing
social engineering
aws
evasion techniques
more_eggs
2025-06-11
cloud infrastructure
resume lures
skeleton spider
Published: June 11, 2025
Downloadable IOCs: 24

Stealth Falcon and Horus: A Saga of Middle Eastern Cyber Espionage

Check Point Research (CPR) uncovered an active-weaponized Microsoft WebDAV zero‑day (CVE‑2025‑33053) exploited by the Stealth Falcon APT in a targeted campaign against defense and government organizations across the Middle East and Africa. The attack began with a spear-phishing-disguised .url file …
apt
cyberespionage
webdav
keylogger
mythic
CVE-2025-33053
2025-06-11
zeroday
Published: June 11, 2025
Downloadable IOCs: 40
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-49709

9.8
    Mozilla
  • Firefox
Published: June 11, 2025

CVE-2025-49710

9.8
    Mozilla
  • Firefox
Published: June 11, 2025

CVE-2025-40914

9.8
    Perl
  • Cryptx
    Libtommath
Published: June 11, 2025

CVE-2025-40912

9.8
    Perl
  • Cryptx
Published: June 11, 2025

CVE-2024-1243

9.5
    Wazuh
  • Wazuh Agent
Published: June 11, 2025

CVE-2024-1244

9.5
    Ossec
  • Ossec Hids
Published: June 11, 2025

CVE-2025-32711

9.3
    Microsoft
  • M365 Copilot
Published: June 11, 2025

CVE-2025-30085

9.2
    Joomla
  • Rsform!Pro
Published: June 11, 2025

CVE-2025-5958

8.8
    Google
  • Chrome
Published: June 11, 2025

CVE-2025-5959

8.8
    Google
  • Chrome
Published: June 11, 2025

CVE-2025-5395

8.8
    Wordpress
  • Automatic Plugin
Published: June 11, 2025

CVE-2025-41661

8.8
    *
  • *
Published: June 11, 2025

CVE-2025-41662

8.8
    Unknown
  • Iot Device
Published: June 11, 2025

CVE-2025-4315

8.8
    Cubewp
  • All-In-One Dynamic Content Framework
Published: June 11, 2025

CVE-2025-48445

8.8
    Drupal
  • Commerce Eurobank Redirect
Published: June 11, 2025

CVE-2025-48446

8.8
    Drupal
  • Commerce Alphabank Redirect
Published: June 11, 2025

CVE-2025-32465

8.5
    Joomla
  • Rstickets!
Published: June 11, 2025

CVE-2025-32717

8.4
    Microsoft
  • Office Word
Published: June 11, 2025

CVE-2025-29756

8.3
    Sungrow
  • Isolarcloud
Published: June 11, 2025

CVE-2025-6001

8.3
    Virtuemart
  • Virtuemart
Published: June 11, 2025

CVE-2025-49091

8.2
    Kde
  • Konsole
Published: June 11, 2025

CVE-2025-49146

8.2
    Postgresql
  • Pgjdbc
Published: June 11, 2025

CVE-2025-41663

8.1
    Whh
  • Whh
Published: June 11, 2025

CVE-2025-4922

8.1
    Hashicorp
  • Nomad
Published: June 11, 2025

CVE-2024-7457

7.8
    Apple
  • Mac Os
Published: June 11, 2025

CVE-2024-9062

7.8
    Oct4pie
  • Archify
Published: June 11, 2025

CVE-2025-4275

7.8
    Insyde
  • Insyde Bios
Published: June 11, 2025

CVE-2025-5687

7.8
    Mozilla
  • Mozilla Vpn
Published: June 11, 2025

CVE-2025-22874

7.5
    Golang
  • Go
Published: June 11, 2025

CVE-2025-25032

7.5
    Ibm
  • Cognos Analytics
Published: June 11, 2025

CVE-2025-49148

7.3
    Clipshare
  • Clipshare
Published: June 11, 2025

CVE-2025-4799

7.2
    Wordpress
  • Wp-Downloadmanager
Published: June 11, 2025

CVE-2025-3302

7.2
    Xagio
  • Seo Plugin
Published: June 11, 2025

CVE-2025-6002

7.2
    Virtuemart
  • Virtuemart
Published: June 11, 2025

CVE-2025-48447

7.1
    Drupal
  • Lightgallery
Published: June 11, 2025

CVE-2025-40915

7.0
    Mojolicious
  • Mojolicious Plugin Csr
Published: June 11, 2025

CVE-2025-26412

6.8
    Simecom
  • Simecom Sim7600g
Published: June 11, 2025

CVE-2025-4673

6.8
    Golang
  • Golang
Published: June 11, 2025

CVE-2025-3473

6.7
    Ibm
  • Security Guardium
Published: June 11, 2025

CVE-2025-32466

6.7
    Joomla
  • Rsm Ediagallery
Published: June 11, 2025

CVE-2025-5986

6.5
    Mozilla
  • Thunderbird
Published: June 11, 2025

CVE-2025-48448

6.5
    Drupal
  • Admin Audit Trail
Published: June 11, 2025

CVE-2025-4666

6.4
    Zotpress
  • Zotpress
Published: June 11, 2025

CVE-2025-5144

6.4
    Moderntribe
  • The Events Calendar
Published: June 11, 2025

CVE-2025-26383

6.3
    Jci
  • Istar Configuration Utility
Published: June 11, 2025

CVE-2025-49150

5.9
    Cursor
  • Cursor
Published: June 11, 2025

CVE-2025-1055

5.6
    K7 Security
  • K7 Security Anti-Malware
  • K7rkscan
Published: June 11, 2025

CVE-2024-8270

5.5
    Rocket.Chat
  • Rocket.Chat
Published: June 11, 2025

CVE-2025-35941

5.5
    Unknown
  • Unknown
Published: June 11, 2025

CVE-2025-4605

5.5
    Autodesk
  • Maya
Published: June 11, 2025

CVE-2025-0913

5.5
    Golang
  • Go
Published: June 11, 2025

CVE-2025-0917

5.5
    Ibm
  • Cognos Analytics
Published: June 11, 2025

CVE-2025-0163

5.3
    Ibm
  • Security Verify Access Appliance
  • Security Verify Access Docker
Published: June 11, 2025

CVE-2025-48013

5.3
    Drupal
  • Quick Node Block
Published: June 11, 2025

CVE-2025-48444

5.3
    Drupal
  • Quick Node Block
Published: June 11, 2025

CVE-2025-0923

5.3
    Ibm
  • Cognos Analytics
Published: June 11, 2025

CVE-2024-35295

5.2
    Siemens
  • Perfect Harmony Gh180
Published: June 11, 2025

CVE-2025-4798

4.9
    Wordpress
  • Wp-Downloadmanager
Published: June 11, 2025

CVE-2025-30675

4.7
    Apache
  • Cloudstack
Published: June 11, 2025

CVE-2025-4573

4.1
    Mattermost
  • Mattermost
Published: June 11, 2025

CVE-2025-4128

3.1
    Mattermost
  • Mattermost
Published: June 11, 2025

CVE-2025-1698

2.4
    Lenovo
  • Fingerprint Sensor Service
Published: June 11, 2025

CVE-2025-1699

2.4
    Lenovo
  • Motodesign
Published: June 11, 2025

CVE-2025-5991

2.1
    Qt
  • Qt Network
Published: June 11, 2025

CVE-2025-49785

None
    Fortinet
  • *
Published: June 11, 2025

CVE-2025-49786

None
    Fortinet
  • Fortiguard
Published: June 11, 2025

CVE-2025-49787

None
    Fortinet
  • Fortinet
Published: June 11, 2025

CVE-2025-49788

None
    Fortinet
  • Fortinet
Published: June 11, 2025

CVE-2025-49789

None
    Fortinet
  • Fortinet
Published: June 11, 2025

CVE-2025-49790

None
    Fortinet
  • *
Published: June 11, 2025

CVE-2025-49791

None
    Fortinet
  • Fortigate
Published: June 11, 2025

CVE-2025-49792

None
    Fortinet
  • *
Published: June 11, 2025

CVE-2025-49793

None
    Fortinet
  • Fortinet
Published: June 11, 2025
Click here to see more Vulnerabilities