Tag: 2025-07-17

8 Attack Reports | 88 Vulnerabilities

Attack reports

Phish and Chips: China-Aligned Espionage Actors Ramp Up Taiwan Semiconductor Industry Targeting

Between March and June 2025, three Chinese state-sponsored threat actors conducted targeted phishing campaigns against the Taiwanese semiconductor industry. The campaigns targeted organizations involved in semiconductor manufacturing, design, testing, supply chain, and financial analysis. This acti…
espionage
phishing
cobalt strike
sparkrat
voldemort
2025-07-17
semiconductor
unk_droppitch
unk_sparkycarp
unk_fistbump
healthkick
Published: July 17, 2025
Downloadable IOCs: 54

Powerful MaaS On the Prowl for Credentials and Crypto Assets

Katz Stealer is a sophisticated infostealer marketed as Malware-as-a-Service (MaaS), launched in early 2025. It features robust credential and data theft capabilities, along with modern evasion and anti-analysis techniques. The stealer targets a wide range of personal and sensitive information, inc…
infostealer
cryptocurrency
credential theft
data exfiltration
maas
evasion techniques
browser injection
katz stealer
2025-07-17
Published: July 17, 2025
Downloadable IOCs: 31

Evolution of macOS Odyssey Stealer: New Techniques & Signed Malware

A new variant of the Odyssey infostealer for macOS has been discovered, featuring code signing, notarization, and a persistent backdoor. The malware mimics a Google Meet updater and uses a SwiftUI-based 'Technician Panel' for social engineering. It steals sensitive data, including passwords, browse…
backdoor
infostealer
cryptocurrency
persistence
macos
amos
2025-07-17
code-signing
notarization
odyssey
odyssey stealer
Published: July 17, 2025
Downloadable IOCs: 0

GhostContainer backdoor for Exchange servers

A sophisticated backdoor targeting Exchange servers of high-value organizations in Asia has been discovered. The malware, named GhostContainer, is a multi-functional backdoor that can be dynamically extended with additional modules. It leverages several open-source projects and employs various evas…
backdoor
apt
evasion
proxy
open-source
asia
2025-07-17
exchange
ghostcontainer
Published: July 17, 2025
Downloadable IOCs: 1

MaaS operation using Emmenhtal and Amadey linked to threats against Ukrainian entities

A Malware-as-a-Service operation utilizing Amadey for payload delivery has been identified, with connections to a SmokeLoader phishing campaign targeting Ukrainian entities. The operation exploits fake GitHub accounts to host payloads and tools, bypassing web filtering. Emmenhtal, a multistage down…
obfuscation
phishing
rhadamanthys
ukraine
amadey
asyncrat
redline
smokeloader
downloader
github
lumma
maas
emmenhtal
2025-07-17
Published: July 17, 2025
Downloadable IOCs: 4

SVG Smuggling - Image Embedded JavaScript Redirect Attacks

Threat actors are increasingly using Scalable Vector Graphics (SVG) files to deliver JavaScript-based redirect attacks. These SVGs contain embedded, obfuscated JavaScript that initiates browser redirects to attacker-controlled infrastructure. The campaign uses email spoofing and impersonation to de…
obfuscation
phishing
javascript
email spoofing
xor encryption
svg
redirect
2025-07-17
Published: July 17, 2025
Downloadable IOCs: 0

DNS: A Small but Effective C2 system

This analysis explores the exploitation of DNS for command-and-control operations and data exfiltration. It details how cybercriminals leverage DNS tunneling to create covert communication channels, bypassing traditional security measures. The article examines various DNS tunneling families, includ…
cobalt strike
dns tunneling
sliver
command-and-control
2025-07-17
dnscat2
dns exfiltrator
iodine
weasel
Published: July 17, 2025
Downloadable IOCs: 0

Infrastructure of Interest: Suspicious Domains

Domains identified by an automated threat monitoring infrastructure, which leverages advanced AI-driven analysis to detect anomalous and high-risk activity.
2025-07-17
Published: July 17, 2025
Downloadable IOCs: 268
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-5396

9.8
    Wordpress
  • Bears Backup
Published: July 17, 2025

CVE-2025-51630

9.8
    Totolink
  • N350rt Firmware
  • N350rt
Published: July 17, 2025

CVE-2025-25257

9.8
    Fortinet
  • Fortiweb
Published: July 17, 2025

CVE-2025-52046

9.8
    Totolink
  • A3300r Firmware
  • A3300r
Published: July 17, 2025

CVE-2025-50240

9.8
    Nbcio
  • Nbcio-Boot
Published: July 17, 2025

CVE-2025-53964

9.6
    Goldendict
  • Goldendict
Published: July 17, 2025

CVE-2025-53946

9.4
    Wegia
  • Wegia
Published: July 17, 2025

CVE-2025-54058

9.4
    Wegia
  • Wegia
Published: July 17, 2025

CVE-2025-54060

9.4
    Wegia
  • Wegia
Published: July 17, 2025

CVE-2025-54061

9.4
    Wegia
  • Wegia
Published: July 17, 2025

CVE-2025-54062

9.4
    Wegia
  • Wegia
Published: July 17, 2025

CVE-2025-54068

9.2
    Laravel
  • Livewire
Published: July 17, 2025

CVE-2025-7712

9.1
    Wordpress
  • Madara Core
Published: July 17, 2025

CVE-2025-53909

9.1
    Mailcow
  • Mailcow
Published: July 17, 2025

CVE-2025-23266

9.0
    Nvidia
  • Container Toolkit
Published: July 17, 2025

CVE-2024-13972

8.8
    Sophos
  • Intercept X
Published: July 17, 2025

CVE-2025-7433

8.8
    Sophos
  • Intercept X
Published: July 17, 2025

CVE-2025-7735

8.7
    Unimax
  • Hospital Information System
Published: July 17, 2025

CVE-2025-7398

8.6
    Brocade
  • Ascg
Published: July 17, 2025

CVE-2025-5344

8.5
    Bluebird
  • Kiosk Application
Published: July 17, 2025

CVE-2025-0886

8.5
    Elliptic Labs
  • Virtual Lock Sensor
Published: July 17, 2025

CVE-2025-23267

8.5
    Nvidia
  • Nvidia Container Toolkit
Published: July 17, 2025

CVE-2025-6231

8.5
    Lenovo
  • Vantage
Published: July 17, 2025

CVE-2025-6232

8.5
    Lenovo
  • Vantage
Published: July 17, 2025

CVE-2025-4657

8.4
    Lenovo
  • Protection Driver
  • Pc Manager
  • Browser
  • App Store
Published: July 17, 2025

CVE-2025-6249

8.4
    Lenovo
  • Filez
Published: July 17, 2025

CVE-2024-39289

7.8
    Ros
  • Rosparam
  • Robot Operating System
Published: July 17, 2025

CVE-2024-39835

7.8
    Ros
  • Robot Operating System
  • Roslaunch
Published: July 17, 2025

CVE-2024-41148

7.8
    Robot Operating System
  • Ros
Published: July 17, 2025

CVE-2024-41921

7.8
    Robot Operating System
  • Ros
Published: July 17, 2025

CVE-2025-3753

7.8
    Ros
  • Robot Operating System
Published: July 17, 2025

CVE-2025-53644

7.7
    Opencv
  • Opencv
Published: July 17, 2025

CVE-2025-23263

7.6
    Nvidia
  • Doca-Host
    Mellanox
Published: July 17, 2025

CVE-2025-1713

7.5
    Xen
  • Xen
Published: July 17, 2025

CVE-2025-7338

7.5
    Multer
  • Multer
Published: July 17, 2025

CVE-2025-7472

7.5
    Sophos
  • Intercept X
Published: July 17, 2025

CVE-2025-7747

7.4
    Tenda
  • Fh451 Firmware
  • Fh451
Published: July 17, 2025

CVE-2025-7758

7.4
    Totolink
  • T6
Published: July 17, 2025

CVE-2025-7762

7.4
    D-Link
  • Di-8100
Published: July 17, 2025

CVE-2025-1700

7.1
    Lenovo
  • Motorola Software Fix
  • Rescue And Smart Assistant
Published: July 17, 2025

CVE-2025-23270

7.1
    Nvidia
  • Jetson Linux
Published: July 17, 2025

CVE-2025-6248

7.1
    Lenovo
  • Browser
Published: July 17, 2025

CVE-2025-6391

7.1
    Brocade
  • Ascg
Published: July 17, 2025

CVE-2025-54064

6.9
    Rucio
  • Rucio-Server
  • Rucio-Ui
  • Rucio-Webui
Published: July 17, 2025

CVE-2025-53638

6.9
    Solady
  • Solady
Published: July 17, 2025

CVE-2025-7749

6.9
    Anisha
  • Online Appointment Booking System
Published: July 17, 2025

CVE-2025-54070

6.9
    Openzeppelin
  • Contracts
Published: July 17, 2025

CVE-2025-7750

6.9
    Anisha
  • Online Appointment Booking System
Published: July 17, 2025

CVE-2025-7751

6.9
    Anisha
  • Online Appointment Booking System
Published: July 17, 2025

CVE-2025-7752

6.9
    Anisha
  • Online Appointment Booking System
Published: July 17, 2025

CVE-2025-7753

6.9
    Anisha
  • Online Appointment Booking System
Published: July 17, 2025

CVE-2025-7757

6.9
    Phpgurukul
  • Land Record System
Published: July 17, 2025

CVE-2025-7764

6.9
    Code-Projects
  • Online Appointment Booking System
Published: July 17, 2025

CVE-2025-7765

6.9
    Code-Projects
  • Online Appointment Booking System
Published: July 17, 2025

CVE-2025-7397

6.8
    Brocade
  • Ascgshell
Published: July 17, 2025

CVE-2025-40924

6.5
    Catalyst
Published: July 17, 2025

CVE-2025-5345

6.3
    Bluebird
  • Bluebird Device
Published: July 17, 2025

CVE-2025-53941

6.1
    Hollo
  • Hollo
Published: July 17, 2025

CVE-2025-47189

6.1
    Netwrix
  • Directory Manager
Published: July 17, 2025

CVE-2025-53816

5.5
    7-Zip
  • 7-Zip
Published: July 17, 2025

CVE-2025-53817

5.5
    7-Zip
  • 7-Zip
Published: July 17, 2025

CVE-2025-46102

5.4
    Beakon
  • Beakon Learning Management System
Published: July 17, 2025

CVE-2025-1729

5.4
    Lenovo
  • Trackpoint Quick Menu
Published: July 17, 2025

CVE-2025-4302

5.3
    Wordpress
  • Stop User Enumeration
Published: July 17, 2025

CVE-2025-7754

5.3
    Fabianros
  • Patient Record Management System
Published: July 17, 2025

CVE-2025-7755

5.3
    Code-Projects
  • Online Ordering System
Published: July 17, 2025

CVE-2025-7756

5.3
    Code-Projects
  • E-Commerce Site
Published: July 17, 2025

CVE-2025-7759

5.3
    Thinkgem
  • Jeesite
Published: July 17, 2025

CVE-2025-7763

5.3
    Thinkgem
  • Jeesite
Published: July 17, 2025

CVE-2025-7728

5.1
    Scada-Lts
  • Scada-Lts
Published: July 17, 2025

CVE-2025-7729

5.1
    Scada-Lts
  • Scada-Lts
Published: July 17, 2025

CVE-2025-5346

5.1
    Bluebird
  • Barcode Scanner Application
Published: July 17, 2025

CVE-2025-7748

5.1
    Zcms
  • Zcms
Published: July 17, 2025

CVE-2025-2818

5.1
    Motorola
  • Smart Connect
Published: July 17, 2025

CVE-2025-6230

4.8
    Lenovo
  • Lenovo Vantage
Published: July 17, 2025

CVE-2025-54066

4.7
    Diracx
  • Diracx-Web
Published: July 17, 2025

CVE-2025-23269

4.7
    Nvidia
  • Jetson Linux
  • Jetson Linux Kernel
Published: July 17, 2025

CVE-2025-53927

4.6
    Maxkb
  • Maxkb
Published: July 17, 2025

CVE-2025-53928

4.6
    Maxkb
  • Maxkb
Published: July 17, 2025

CVE-2025-3415

4.3
    Grafana
  • Grafana
Published: July 17, 2025

CVE-2024-42209

3.5
    Hcl
  • Hcl Connections
Published: July 17, 2025

CVE-2025-7339

3.4
    On-Headers
  • On-Headers
Published: July 17, 2025

CVE-2025-52933

None
    *
  • *
Published: July 17, 2025

CVE-2023-41566

None
    Oa
  • Ekp
Published: July 17, 2025

CVE-2023-47356

None
    Mingyu Security
  • Mingyu Security Gateway
Published: July 17, 2025

CVE-2025-53867

None
    Island Lake
  • Webbatch
Published: July 17, 2025

CVE-2024-32323

None
    Cnhcit.Com
  • Haichang Oa
Published: July 17, 2025

CVE-2025-51497

None
    Adguard
  • Plugin
Published: July 17, 2025
Click here to see more Vulnerabilities