Tag: 2025-06-13

9 Attack Reports | 87 Vulnerabilities

Attack reports

New FIN7-Linked Infrastructure, PowerNet Loader, and Fake Update Attacks

Insikt Group uncovered new infrastructure linked to GrayAlpha, a threat actor associated with FIN7. They identified a custom PowerShell loader named PowerNet that deploys NetSupport RAT, and another loader called MaskBat. Three main infection vectors were discovered: fake browser updates, fake 7-Zi…
netsupport rat
infrastructure
tag-124
7-zip
fin7
fake updates
2025-06-13
powernet
maskbat
Published: June 13, 2025
Downloadable IOCs: 0

Private Contractor Linked to Multiple Chinese State-Sponsored Groups

A recent leak from I-SOON, a Chinese IT and cybersecurity company, has revealed connections to several state-sponsored cyber groups including RedAlpha, RedHotel, and Poison Carp. The leak exposes a sophisticated espionage network involving the theft of communications data for individual tracking. A…
state-sponsored
i-soon
2025-06-13
poison carp
contractor
redhotel
redalpha
Published: June 13, 2025
Downloadable IOCs: 0

May 2025 Security Issues in Korean & Global Financial Sector

This comprehensive analysis covers cyber threats targeting financial companies in Korea and globally. It examines malware and phishing cases, top 10 malware strains, and statistics on leaked Korean accounts. The report delves into major financial threats on the dark web, including credit card data …
ransomware
lockbit
data breach
identity theft
play
dark web
2025-06-13
customer data
brokerage
arkana
safepay
Published: June 13, 2025
Downloadable IOCs: 0

From Trust to Threat: Hijacked Discord Invites Used for Multi-Stage Malware Delivery

Check Point Research uncovered a malware campaign exploiting expired Discord invite links to redirect users to malicious servers. The attackers use a combination of techniques including ClickFix phishing, multi-stage loaders, and time-based evasions to deliver AsyncRAT and a customized Skuld Steale…
phishing
evasion
asyncrat
discord
crypto wallets
2025-06-13
chromekatz
skuld stealer
Published: June 13, 2025
Downloadable IOCs: 0

Serverless Tokens in the Cloud: Exploitation and Detections

This article explores the security implications of serverless authentication across major cloud platforms. It details how attackers target serverless functions to exploit vulnerabilities arising from insecure code and misconfigurations. The mechanics of serverless authentication are explained for A…
cloud security
authentication
rce
2025-06-13
ssrf
google cloud functions
token exfiltration
aws lambda
azure functions
serverless
Published: June 13, 2025
Downloadable IOCs: 0

Anubis: A Closer Look at an Emerging Ransomware with Built-in Wiper

Anubis is a new ransomware-as-a-service (RaaS) group that combines file encryption with file destruction capabilities. Active since December 2024, it features a 'wipe mode' that permanently erases files, making recovery impossible even if ransom is paid. The group operates a flexible affiliate prog…
privilege-escalation
ransomware-as-a-service
spear-phishing
2025-06-13
file-wiping
anubis
ecies-encryption
sphinx
Published: June 13, 2025
Downloadable IOCs: 0

What is the Real Relationship between WordPress Hackers and Malicious Adtech?

An investigation into VexTrio, a malicious traffic distribution system (TDS), revealed surprising connections between WordPress hackers and adtech companies. When VexTrio's operations were disrupted, multiple malware actors migrated to a new TDS that was discovered to be related to VexTrio. Several…
malware
dns
wordpress
adtech
tds
push notifications
2025-06-13
balada
sign1
dollyway
hackers
affiliate networks
Published: June 13, 2025
Downloadable IOCs: 83

Beware of AI Pickpockets: Pickai Backdoor Spreading Through ComfyUI Vulnerability

A new backdoor named Pickai is exploiting ComfyUI vulnerabilities to spread and steal sensitive AI data. Developed in C++, Pickai offers remote command execution and reverse shell capabilities with strong persistence and evasion techniques. It uses multiple C2 servers for redundancy and has infecte…
backdoor
evasion
vulnerability
persistence
c2
supply chain attack
2025-06-13
pickai
comfyui
ai data theft
Published: June 13, 2025
Downloadable IOCs: 9

Understanding CyberEYE RAT Builder: Capabilities and Implications

CyberEye is a modular, .NET-based Remote Access Trojan that utilizes Telegram for Command and Control, eliminating the need for attackers to maintain their own infrastructure. It offers a wide array of surveillance and data theft capabilities, including keylogging, file grabbing, and clipboard hija…
rat
persistence
anti-analysis
credential theft
data exfiltration
telegram
2025-06-13
cybereye
windows defender evasion
telegramrat
Published: June 13, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-29902

10.0
    Bosch
  • *
Published: June 13, 2025

CVE-2025-5288

9.8
    Wordpress
  • Custom Api Generator For Cross Platform And Import Export In Wp
Published: June 13, 2025

CVE-2025-45984

9.8
    Blink
  • Bl-Wr9000
  • Bl-Ac1900
  • Bl-Ac2100 Az3
  • Bl-X10 Ac8
  • Bl-Lte300
  • Bl-F1200 At1
  • Bl-X26 Ac8
  • Blac450m Ae4
  • Bl-X26 Da3
Published: June 13, 2025

CVE-2025-45985

9.8
    Blink
  • Bl-Wr9000
  • Bl-Ac2100 Az3
  • Bl-X10 Ac8
  • Bl-Lte300
  • Bl-F1200 At1
  • Bl-X26 Ac8
  • Blac450m Ae4
  • Bl-X26 Da3
Published: June 13, 2025

CVE-2025-45986

9.8
    Blink
  • Blink Routers
Published: June 13, 2025

CVE-2025-45987

9.8
    Blink
  • Blink Router
Published: June 13, 2025

CVE-2025-45988

9.8
    Blink
  • Bl-Wr9000
  • Bl-Ac2100 Az3
  • Bl-X10 Ac8
  • Bl-Lte300
  • Bl-F1200 At1
  • Bl-X26 Ac8
  • Blac450m Ae4
  • Bl-X26 Da3
Published: June 13, 2025

CVE-2025-46060

9.8
    Totolink
  • N600r
Published: June 13, 2025

CVE-2025-28388

9.8
    Openc3
  • Cosmos
Published: June 13, 2025

CVE-2025-28389

9.8
    Openc3
  • Cosmos
Published: June 13, 2025

CVE-2024-38824

9.6
    Vmware
  • Master Cache Directory
Published: June 13, 2025

CVE-2025-6029

9.4
    Kia
  • Keyless Entry System
Published: June 13, 2025

CVE-2025-6030

9.4
    Kia
  • Key Fob Transmitter
  • Smart Keyless Entry System
Published: June 13, 2025

CVE-2025-49596

9.4
    Mcp Inspector
  • Mcp Inspector
Published: June 13, 2025

CVE-2025-46783

9.3
    Ricoh
  • Streamline Nx Pc Client
Published: June 13, 2025

CVE-2025-28384

9.1
    Openc3
  • Cosmos
Published: June 13, 2025

CVE-2025-36633

8.8
    Tenable
  • Tenable Agent
Published: June 13, 2025

CVE-2025-48918

8.8
    Drupal
  • Simple Klaro
Published: June 13, 2025

CVE-2025-24922

8.8
    Dell
  • Controlvault3
  • Controlvault3 Plus
Published: June 13, 2025

CVE-2025-25050

8.8
    Dell
  • Controlvault3
  • Controlvault 3 Plus
Published: June 13, 2025

CVE-2025-25215

8.8
    Dell
  • Controlvault3
  • Controlvault3 Plus
Published: June 13, 2025

CVE-2025-5491

8.7
    Acer
  • Controlcenter
Published: June 13, 2025

CVE-2025-49581

8.7
    Xwiki
  • Xwiki
Published: June 13, 2025

CVE-2025-49584

8.7
    Xwiki
  • Xwiki
Published: June 13, 2025

CVE-2025-49586

8.7
    Xwiki
  • Xwiki
Published: June 13, 2025

CVE-2025-4231

8.6
    Palo Alto Networks
  • Pan-Os
Published: June 13, 2025

CVE-2025-49468

8.6
    Joomla
  • No Boss Calendar
Published: June 13, 2025

CVE-2025-48914

8.6
    Drupal
  • Cookies Consent Management
Published: June 13, 2025

CVE-2025-48915

8.6
    Drupal
  • Cookies Consent Management
Published: June 13, 2025

CVE-2025-49582

8.6
    Xwiki
  • Xwiki
Published: June 13, 2025

CVE-2025-49585

8.6
    Xwiki
  • Xwiki
Published: June 13, 2025

CVE-2025-4232

8.5
    Palo Alto Networks
  • Globalprotect
Published: June 13, 2025

CVE-2025-49580

8.5
    Xwiki
  • Xwiki
Published: June 13, 2025

CVE-2025-4230

8.4
    Palo Alto Networks
  • Pan-Os
Published: June 13, 2025

CVE-2025-36631

8.4
    Tenable
  • Tenable Agent
    Microsoft
Published: June 13, 2025

CVE-2025-24311

8.4
    Dell
  • Controlvault3
  • Controlvault3 Plus
Published: June 13, 2025

CVE-2025-22236

8.1
    Vmware
  • Minion
Published: June 13, 2025

CVE-2025-22239

8.1
    Saltstack
  • Salt
    Vmware
Published: June 13, 2025

CVE-2025-24919

8.1
    Dell
  • Controlvault3
  • Controlvault3 Plus
Published: June 13, 2025

CVE-2025-30399

7.5
    Microsoft
  • .Net
  • Visual Studio
Published: June 13, 2025

CVE-2025-5282

7.5
    Wordpress
  • Wp Travel Engine
Published: June 13, 2025

CVE-2025-28381

7.5
    Openc3
  • Cosmos
Published: June 13, 2025

CVE-2025-28382

7.5
    Openc3
  • Cosmos
Published: June 13, 2025

CVE-2025-48920

7.3
    Drupal
  • Etracker
Published: June 13, 2025

CVE-2025-39240

7.2
    Hikvision
  • Wifi Access Point
Published: June 13, 2025

CVE-2025-47959

7.1
    Microsoft
  • Visual Studio
Published: June 13, 2025

CVE-2025-36506

6.9
    Ricoh
  • Streamline Nx
Published: June 13, 2025

CVE-2025-22237

6.7
    Vmware
  • Salt
Published: June 13, 2025

CVE-2025-6035

6.6
    Gimp
  • Gimp
Published: June 13, 2025

CVE-2025-48916

6.5
    Drupal
  • Bookable Calendar
Published: June 13, 2025

CVE-2025-4584

6.4
    Wordpress
  • Irm Newsroom Plugin
Published: June 13, 2025

CVE-2025-4585

6.4
    Wordpress
  • Irm Newsroom Plugin
Published: June 13, 2025

CVE-2025-4586

6.4
    Wordpress
  • Irm Newsroom
Published: June 13, 2025

CVE-2025-5123

6.4
    Wordpress
  • Contact People Plugin
Published: June 13, 2025

CVE-2025-5233

6.4
    Wordpress
  • Color Palette
Published: June 13, 2025

CVE-2025-5841

6.4
    Wordpress
  • Acf Onxy Poll
Published: June 13, 2025

CVE-2025-5950

6.4
    Wordpress
  • Indieblocks
Published: June 13, 2025

CVE-2024-38825

6.4
    Vmware
  • Salt
Published: June 13, 2025

CVE-2025-5923

6.4
    Wordpress
  • Game Review Block Plugin
Published: June 13, 2025

CVE-2025-49587

6.4
    Xwiki
  • Xwiki
Published: June 13, 2025

CVE-2025-22240

6.3
    Vmware
  • Gitfs
Published: June 13, 2025

CVE-2025-5926

6.1
    Wordpress
  • Link Shield
Published: June 13, 2025

CVE-2025-46096

6.1
    Solon
  • Solon
Published: June 13, 2025

CVE-2025-4229

6.0
    Palo Alto Networks
  • Pan-Os
Published: June 13, 2025

CVE-2025-22241

5.6
    Vmware
  • Vmware
  • Virtkey
Published: June 13, 2025

CVE-2025-22242

5.6
    Vmware
  • *
Published: June 13, 2025

CVE-2025-6012

5.5
    Wordpress
  • Auto Attachments
Published: June 13, 2025

CVE-2025-5938

5.3
    Wordpress
  • Elementor Plugin
  • Digital Marketing And Agency Templates Addons For Elementor
Published: June 13, 2025

CVE-2025-5815

5.3
    Wordpress
  • Traffic Monitor
Published: June 13, 2025

CVE-2025-6083

5.2
    Extreme Networks
  • Extremecloud Universal Ztna
Published: June 13, 2025

CVE-2025-49583

5.1
    Xwiki
  • Xwiki
Published: June 13, 2025

CVE-2025-48917

5.0
    Drupal
  • Eu Cookie Compliance
Published: June 13, 2025

CVE-2025-48919

5.0
    Drupal
  • Simple Klaro
Published: June 13, 2025

CVE-2025-4228

4.6
    Palo Alto Networks
  • Cortex Xdr Broker Vm
Published: June 13, 2025

CVE-2025-5939

4.4
    Telegram
  • Telegram For Wp
Published: June 13, 2025

CVE-2025-49598

4.4
    Conda-Forge
  • Conda-Forge-Ci-Setup
Published: June 13, 2025

CVE-2025-5928

4.3
    Wordpress
  • Wp Sliding Login Dashboard Panel
Published: June 13, 2025

CVE-2025-5930

4.3
    Wordpress
  • Wp2html
Published: June 13, 2025

CVE-2025-22238

4.2
    Vmware
  • Minion
Published: June 13, 2025

CVE-2025-49597

3.9
    Handcraftedinthealps
  • Goodby-Csv
Published: June 13, 2025

CVE-2025-6052

3.7
    Glib
  • Glib
Published: June 13, 2025

CVE-2024-38822

2.7
    Saltstack
  • Salt
    Vmware
Published: June 13, 2025

CVE-2024-38823

2.7
    Salt
  • Salt
Published: June 13, 2025

CVE-2025-48825

2.0
    Ricoh
  • Streamline Nx Pc Client
Published: June 13, 2025

CVE-2025-4227

1.0
    Palo Alto Networks
  • Globalprotect
Published: June 13, 2025

CVE-2025-28380

None
    Openc3
  • Cosmos
Published: June 13, 2025

CVE-2025-28386

None
    Openc3
  • Cosmos
Published: June 13, 2025
Click here to see more Vulnerabilities