Tag: 2025-06-12

3 Attack Reports | 87 Vulnerabilities

Attack reports

Fog Ransomware: Unusual Toolset Used in Recent Attack

A financial institution in Asia was targeted by Fog ransomware in May 2025, using an atypical toolset including legitimate employee monitoring software and open-source pentesting tools. The attackers deployed Syteca, GC2, Adaptix, and Stowaway, which are uncommon in ransomware attacks. They remaine…
espionage
data theft
persistence
lateral movement
CVE-2024-40711
fog ransomware
fog
asia
2025-06-12
unusual toolset
employee monitoring software
financial institution
pentesting tools
2025-06-17
Published: June 17, 2025
Linked vulnerabilities : CVE-2024-40711 (CVSS 9.8)
Downloadable IOCs: 0

Graphite Caught: First Forensic Confirmation of Paragon's iOS Mercenary Spyware Finds Journalists Targeted

An investigation reveals that two journalists were targeted with Paragon's Graphite mercenary spyware on iOS devices. Forensic analysis confirmed the use of a zero-click attack exploiting a vulnerability (CVE-2025-43200) in iOS 18.2.1. The same attacker targeted both victims, suggesting a coordinat…
ios
graphite
imessage
2025-06-12
mercenary spyware
journalists
bigpretzel
zero-click attack
paragon
CVE-2025-43200
Published: June 12, 2025
Downloadable IOCs: 0

Know thyself, know thy environment

This intelligence report emphasizes the importance of understanding one's own environment and personal weaknesses in cybersecurity. It stresses the need for repeatable processes to maintain knowledge of one's environment and advocates for continuous learning to fill skill gaps. The report also high…
ransomware
qilin
critical infrastructure
pathwiper
2025-06-12
patch management
environment knowledge
gps vulnerabilities
self-awareness
vulnerability disclosure
Published: June 12, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2022-4976

9.8
    Perl
  • Archive
    Infozip
Published: June 12, 2025

CVE-2025-4973

9.8
    Workreap
  • Workreap
Published: June 12, 2025

CVE-2024-56158

9.3
    Xwiki
  • Xwiki
Published: June 12, 2025

CVE-2025-49467

9.3
    Joomla
  • Jevents
Published: June 12, 2025

CVE-2025-5012

8.8
    Workreap
  • Workreap
Published: June 12, 2025

CVE-2025-49199

8.8
    Sick
  • Application
Published: June 12, 2025

CVE-2025-5485

8.8
    *
  • *
Published: June 12, 2025

CVE-2025-2254

8.7
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: June 12, 2025

CVE-2025-4278

8.7
    Gitlab
  • Gitlab
Published: June 12, 2025

CVE-2025-49080

8.7
    Netmotionsoftware
  • Absolute Secure Access
Published: June 12, 2025

CVE-2025-49181

8.6
    *
  • *
Published: June 12, 2025

CVE-2025-27689

7.8
    Dell
  • Idrac Tools
Published: June 12, 2025

CVE-2025-6031

7.7
    Amazon
  • Cloud Cam
Published: June 12, 2025

CVE-2025-5484

7.6
    Sino Track
  • Device Management Interface
Published: June 12, 2025

CVE-2025-0673

7.5
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: June 12, 2025

CVE-2025-6021

7.5
    Gnome
  • Libxml2
Published: June 12, 2025

CVE-2025-49182

7.5
    Sick
  • Application
Published: June 12, 2025

CVE-2025-49183

7.5
    Sick
  • Unknown
Published: June 12, 2025

CVE-2025-49184

7.5
    Sick
  • Sick Product
Published: June 12, 2025

CVE-2025-49194

7.5
    *
  • *
Published: June 12, 2025

CVE-2025-46035

7.5
    Tenda
  • Ac6
Published: June 12, 2025

CVE-2024-55567

7.5
    Insyde
  • Insydeh2o
Published: June 12, 2025

CVE-2024-7562

7.3
    Flexera
  • Installshield
Published: June 12, 2025

CVE-2025-4613

7.1
    Google
  • Web Designer
Published: June 12, 2025

CVE-2025-36573

7.1
    Dell
  • Smart Dock
Published: June 12, 2025

CVE-2025-36539

7.1
    Aveva
  • Pi Data Archive
Published: June 12, 2025

CVE-2025-44019

7.1
    Aveva
  • Pi Data Archive
Published: June 12, 2025

CVE-2025-35978

6.9
    Update Navi
  • Update Navi
  • Update Naviinstallservice
Published: June 12, 2025

CVE-2025-49081

6.9
    Netmotion
  • Absolute Secure Access
Published: June 12, 2025

CVE-2025-4417

6.9
    Aveva
  • Pi Connector
Published: June 12, 2025

CVE-2025-41233

6.8
    Vmware
  • Avi Load Balancer
Published: June 12, 2025

CVE-2025-4418

6.7
    Aveva
  • Pi Connector For Cygnet
Published: June 12, 2025

CVE-2025-1478

6.5
    Gitlab
  • Gitlab Ce
Published: June 12, 2025

CVE-2025-1516

6.5
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: June 12, 2025

CVE-2025-5996

6.5
    Gitlab
  • Gitlab-Ce
  • Gitlab-Ee
Published: June 12, 2025

CVE-2025-49196

6.5
    Sick
  • *
Published: June 12, 2025

CVE-2025-49197

6.5
    Sick
  • Ftp Application
Published: June 12, 2025

CVE-2025-49200

6.5
    Sick
  • Application
Published: June 12, 2025

CVE-2025-49575

6.5
    Mediawiki
  • Citizen
Published: June 12, 2025

CVE-2025-49576

6.5
    Mediawiki
  • Citizen
Published: June 12, 2025

CVE-2025-49577

6.5
    Mediawiki
  • Citizen
Published: June 12, 2025

CVE-2025-49578

6.5
    Mediawiki
  • Citizen
Published: June 12, 2025

CVE-2025-49579

6.5
    Mediawiki
  • Mediawiki
Published: June 12, 2025

CVE-2025-41234

6.5
    Vmware
  • Spring Framework
Published: June 12, 2025

CVE-2025-5301

6.1
    Onlyoffice
  • Docs
Published: June 12, 2025

CVE-2025-49589

6.1
    Pcsx2
  • Pcsx2
Published: June 12, 2025

CVE-2025-49185

5.5
    Sick
  • Sick Web Application
Published: June 12, 2025

CVE-2025-44091

5.4
    Yangyouwang
  • Crud
Published: June 12, 2025

CVE-2025-6003

5.3
    Wordpress
  • Plugin
Published: June 12, 2025

CVE-2024-9512

5.3
    Gitlab
  • Gitlab
Published: June 12, 2025

CVE-2025-49186

5.3
    Sick
  • Sick Product
Published: June 12, 2025

CVE-2025-49187

5.3
    Sick
  • Application
Published: June 12, 2025

CVE-2025-49188

5.3
    Sick
  • Sick Application
Published: June 12, 2025

CVE-2025-49189

5.3
    Application
  • Web
Published: June 12, 2025

CVE-2025-49195

5.3
    Ftp Server
  • *
Published: June 12, 2025

CVE-2025-6005

5.1
    Kicode111
  • Like-Girl
Published: June 12, 2025

CVE-2025-6006

5.1
    Kicode111
  • Like-Girl
Published: June 12, 2025

CVE-2025-6007

5.1
    Kicode111
  • Like-Girl
Published: June 12, 2025

CVE-2025-6008

5.1
    Kicode
  • Like-Girl
Published: June 12, 2025

CVE-2025-6009

5.1
    Kicode111
  • Like-Girl
Published: June 12, 2025

CVE-2025-4233

5.1
    Palo Alto Networks
  • Prisma Access
Published: June 12, 2025

CVE-2025-49191

4.8
    Sick
  • Widget
  • Dashboard
Published: June 12, 2025

CVE-2025-40592

4.6
    Mendix
  • Mendix Studio Pro
Published: June 12, 2025

CVE-2025-2745

4.5
    Aveva
  • Pi Web Api
Published: June 12, 2025

CVE-2025-5195

4.3
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: June 12, 2025

CVE-2025-49190

4.3
    Sick
  • Application
Published: June 12, 2025

CVE-2025-49192

4.3
    Sick
  • Application Web
Published: June 12, 2025

CVE-2025-49193

4.2
    Application
  • *
Published: June 12, 2025

CVE-2025-5982

3.7
    Gitlab
  • Gitlab
Published: June 12, 2025

CVE-2025-49198

3.1
    Sick
  • Media Server
Published: June 12, 2025

CVE-2025-43863

1.7
    Vantage6
  • Vantage6
Published: June 12, 2025

CVE-2025-43866

1.7
    Vantage6
  • Vantage6
Published: June 12, 2025

CVE-2023-36636

None
    Fortinet
  • Fortinet
Published: June 12, 2025

CVE-2025-49814

None
    Fortinet
  • Fortinet
Published: June 12, 2025

CVE-2025-49815

None
    Fortinet
  • *
Published: June 12, 2025

CVE-2025-49816

None
    Fortinet
  • Fortigate
Published: June 12, 2025

CVE-2025-49817

None
    Fortinet
  • Fortinet
Published: June 12, 2025

CVE-2025-49818

None
    Fortinet
  • Fortinet
Published: June 12, 2025

CVE-2025-49819

None
    Fortinet
  • Fortinet
Published: June 12, 2025

CVE-2025-49820

None
    Fortinet
  • Fortinet
Published: June 12, 2025

CVE-2025-49821

None
    Fortinet
  • Fortinet
Published: June 12, 2025

CVE-2025-49822

None
    Fortinet
  • Unknown
Published: June 12, 2025

CVE-2024-44905

None
    Go-Pg
  • Pg
Published: June 12, 2025

CVE-2024-44906

None
    Uptrace
  • Pgdriver
Published: June 12, 2025

CVE-2025-29744

None
    Pg-Promise
  • Pg-Promise
Published: June 12, 2025

CVE-2023-45256

None
    Prestashop
  • Moneticopaiement
  • Prestashop
Published: June 12, 2025

CVE-2025-48699

None
Published: June 12, 2025
Click here to see more Vulnerabilities