Tag: 2025-08-29

8 Attack Reports | 161 Vulnerabilities

Attack reports

Warning About NightSpire Ransomware Following Cases of Damage in South Korea

NightSpire, a ransomware group active since February 2025, employs an aggressive strategy and specialized infrastructure similar to Ransomware-as-a-Service models. They operate a Dedicated Leak Site, posting victim information and countdown timers for data release. Using highly threatening language…
ransomware
encryption
south korea
double-extortion
nightspire
rsa
2025-08-29
2025-09-01
aes
cyber extortion
dedicated leak site
Published: September 1, 2025
Downloadable IOCs: 2

Interlock Ransomware Targeting Businesses

The Interlock ransomware group has been actively targeting businesses and critical infrastructures in North America and Europe since September 2024. Their ransomware employs AES-256-GCM encryption with RSA-4096 key protection, leveraging the OpenSSL library for efficient file encryption. The malwar…
ransomware
data theft
europe
interlock
file encryption
code obfuscation
2025-08-29
openssl
north america
aes-256-gcm
rsa-4096
Published: August 29, 2025
Downloadable IOCs: 0

New Mac malware identified that evades detection through fake PDF conversion tool

Mosyle has discovered a new Mac malware strain called 'JSCoreRunner' that evades detection by masquerading as a PDF conversion tool. The malware spreads through a malicious website, fileripple.com, and operates in two stages. The first stage, FileRipple.pkg, appears as a legitimate PDF tool while r…
2025-08-29
mac
chrome hijacking
apple security
jscorerunner
mosyle
zero-day threat
two-stage infection
fileripple.com
pdf conversion
browser redirection
Published: August 29, 2025
Downloadable IOCs: 0

Unmasking the new Chaos RaaS group attacks

Cisco Talos Incident Response has observed attacks by Chaos, a new ransomware-as-a-service group conducting big-game hunting and double extortion attacks. The group uses spam flooding, voice-based social engineering, RMM tool abuse, and legitimate file-sharing software for data exfiltration. Their …
blacksuit
raas
royal
2025-08-29
Published: August 29, 2025
Downloadable IOCs: 6

Operation HanKook Phantom: Spear-Phishing Campaign

APT37, a North Korean state-backed cyber espionage group, has launched a sophisticated spear-phishing campaign targeting South Korean government sectors, research institutions, and academics. The attackers use malicious LNK files disguised as legitimate documents to deliver a multi-stage infection …
espionage
north korea
powershell
rokrat
south korea
data exfiltration
fileless
spear-phishing
cloud services
lnk files
2025-08-29
Published: August 29, 2025
Downloadable IOCs: 0

The First AI-Powered Ransomware & How It Works

PromptLock, a proof-of-concept AI-powered ransomware, leverages Lua scripts generated from hard-coded prompts to perform malicious activities across Windows, Linux, and macOS. Written in Go, it communicates with a locally hosted LLM through the Ollama API. The malware scans the filesystem, identifi…
ransomware
cross-platform
proof-of-concept
2025-08-29
promptlock
speck encryption
filesystem scanning
dynamic ransom notes
ai-powered
ollama api
lua scripts
go language
Published: August 29, 2025
Downloadable IOCs: 0

Hunting Laundry Bear: Infrastructure Analysis Guide and Findings

This analysis explores the infrastructure of Laundry Bear, a Russian state-sponsored APT group active since April 2024, targeting NATO countries and Ukraine. The investigation expands on initial indicators, using advanced pivoting techniques to uncover additional domains and infrastructure. Key fin…
apt
infrastructure analysis
spear-phishing
russian threat actor
2025-08-29
domain typosquatting
ukraine targets
nato targets
Published: August 29, 2025
Downloadable IOCs: 0

Loophole allows threat actors to claim VS Code extension names

A loophole in VS Code Marketplace allows malicious actors to reuse names of removed extensions. ReversingLabs discovered this vulnerability after finding a malicious extension with the same name as one previously identified. The platform's documentation states that extension names must be unique, b…
vulnerability
open-source
cybersecurity
extension
vs code
software supply chain
2025-08-29
loophole
package names
Published: August 29, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-44033

9.8
    Oa System
  • Oasys
Published: August 29, 2025

CVE-2024-46484

9.8
    Trendnet
  • Tv-Ip410
Published: August 29, 2025

CVE-2025-8857

9.3
    Changing
  • Clinic Image System
Published: August 29, 2025

CVE-2025-8861

9.3
    Changing
  • Tsa
Published: August 29, 2025

CVE-2025-52856

9.3
    Qnap
  • Viostor
Published: August 29, 2025

CVE-2025-9605

8.9
    Tenda
  • Ac21
  • Ac23
Published: August 29, 2025

CVE-2025-58158

8.8
    Harness
  • Open Source
Published: August 29, 2025

CVE-2025-8858

8.7
    Changing
  • Clinic Image System
Published: August 29, 2025

CVE-2025-9639

8.7
    Ai3
  • Qbicrmgateway
Published: August 29, 2025

CVE-2025-39247

8.6
    Hikvision
  • Hikcentral Professional
Published: August 29, 2025

CVE-2025-53508

8.6
    Ind Co.Ltd
  • *
Published: August 29, 2025

CVE-2025-9377

8.6
    Tp-Link
  • Archer C7
  • Tl-Wr841n
Published: August 29, 2025

CVE-2025-56577

8.4
    Evoke
  • Core
Published: August 29, 2025

CVE-2025-30277

8.3
    Qnap
  • Qsync Central
Published: August 29, 2025

CVE-2025-30278

8.3
    Qnap
  • Qsync Central
Published: August 29, 2025

CVE-2024-13342

8.1
    Woocommerce
  • Booster For Woocommerce
Published: August 29, 2025

CVE-2024-46916

8.1
    Diebold Nixdorf
  • Vynamic Security Suite
Published: August 29, 2025

CVE-2024-46917

8.1
    Diebold Nixdorf
  • Vynamic Security Suite
Published: August 29, 2025

CVE-2025-55177

8.0
    Facebook
  • Whatsapp
  • Whatsapp Business
Published: August 29, 2025

CVE-2025-43187

7.8
    Apple
  • Macos Sonoma
  • Macos Ventura
  • Macos Sequoia
Published: August 29, 2025

CVE-2025-43268

7.8
    Apple
  • Macos Sequoia
Published: August 29, 2025

CVE-2023-41471

7.8
    Copyparty
  • Copyparty
Published: August 29, 2025

CVE-2025-58323

7.7
    Naver
  • Mybox Explorer
Published: August 29, 2025

CVE-2025-30264

7.7
    Qnap
  • Qts
  • Quts Hero
Published: August 29, 2025

CVE-2025-55763

7.5
    Civetweb
  • Civetweb
Published: August 29, 2025

CVE-2025-29893

7.5
    Qnap
  • Qsync Central
Published: August 29, 2025

CVE-2025-29894

7.5
    Qnap
  • Qsync Central
Published: August 29, 2025

CVE-2025-40927

7.3
    Cpan
  • Cgi Simple
Published: August 29, 2025

CVE-2025-47909

7.3
    Golang
  • Csrf
Published: August 29, 2025

CVE-2025-5808

7.3
    Opentext
  • Self Service Password Reset
Published: August 29, 2025

CVE-2025-33033

7.2
    Qnap
  • Qsync Central
Published: August 29, 2025

CVE-2025-33036

7.2
    Qnap
  • Qsync Central
Published: August 29, 2025

CVE-2025-33037

7.2
    Qnap
  • Qsync Central
Published: August 29, 2025

CVE-2025-33038

7.2
    Qnap
  • Qsync Central
Published: August 29, 2025

CVE-2025-53507

7.1
    Ind
  • Product
  • *
Published: August 29, 2025

CVE-2025-22483

7.1
    Qnap
  • License Center
Published: August 29, 2025

CVE-2025-29875

7.1
    Qnap
  • File Station 5
Published: August 29, 2025

CVE-2025-29887

7.1
    Qnap
  • Qurouter
Published: August 29, 2025

CVE-2025-29890

7.1
    Qnap
  • File Station
Published: August 29, 2025

CVE-2025-29899

7.1
    Qnap
  • File Station
Published: August 29, 2025

CVE-2025-29900

7.1
    Qnap
  • File Station
Published: August 29, 2025

CVE-2025-30260

7.1
    Qnap
  • Qsync Central
Published: August 29, 2025

CVE-2025-30261

7.1
    Qnap
  • Qsync Central
Published: August 29, 2025

CVE-2025-30273

7.1
    Qnap
  • Qts
  • Quts Hero
Published: August 29, 2025

CVE-2025-52861

7.0
    Qnap
  • Viostor
Published: August 29, 2025

CVE-2025-9596

6.9
    Itsourcecode
  • Sports Management System
Published: August 29, 2025

CVE-2025-9597

6.9
    Itsourcecode
  • Apartment Management System
Published: August 29, 2025

CVE-2025-9598

6.9
    Itsourcecode
  • Apartment Management System
Published: August 29, 2025

CVE-2025-9599

6.9
    Itsourcecode
  • Apartment Management System
Published: August 29, 2025

CVE-2025-9600

6.9
    Itsourcecode
  • Apartment Management System
Published: August 29, 2025

CVE-2025-9601

6.9
    Itsourcecode
  • Apartment Management System
Published: August 29, 2025

CVE-2025-9610

6.9
    Code-Projects
  • Online Event Judging System
Published: August 29, 2025

CVE-2025-9619

6.9
    E4 Sistemas
  • Mercatus Erp
Published: August 29, 2025

CVE-2025-9643

6.9
    Itsourcecode
  • Apartment Management System
Published: August 29, 2025

CVE-2025-9644

6.9
    Itsourcecode
  • Apartment Management System
Published: August 29, 2025

CVE-2025-9645

6.9
    Itsourcecode
  • Apartment Management System
Published: August 29, 2025

CVE-2025-9660

6.9
    Sourcecodester
  • Bakeshop Online Ordering System
Published: August 29, 2025

CVE-2025-9662

6.9
    Code-Projects
  • Simple Grading System
Published: August 29, 2025

CVE-2025-9669

6.9
    Jinher
  • Oa
Published: August 29, 2025

CVE-2025-9441

6.5
    Iats
  • Iats Online Forms
Published: August 29, 2025

CVE-2025-9217

6.5
    Slider Revolution
  • Slider Revolution
Published: August 29, 2025

CVE-2025-55750

6.5
    Gitpod
  • Gitpod
Published: August 29, 2025

CVE-2025-8290

6.4
    Wordpress
  • List Subpages
Published: August 29, 2025

CVE-2025-8619

6.4
    Wordpress
  • Osm Map Widget
Published: August 29, 2025

CVE-2025-8150

6.4
    Wordpress
  • Events Addon For Elementor
Published: August 29, 2025

CVE-2025-9604

6.3
    Coze-Studio
  • Coze-Studio
Published: August 29, 2025

CVE-2025-4643

6.3
    Payload
  • Payload
Published: August 29, 2025

CVE-2025-55579

6.1
    Solidinvoice
  • Solidinvoice
Published: August 29, 2025

CVE-2025-55580

6.1
    Solidinvoice
  • Solidinvoice
Published: August 29, 2025

CVE-2025-29898

6.0
    Qnap
  • Qsync Central
Published: August 29, 2025

CVE-2024-13987

5.9
    Synology
  • Radius Server
Published: August 29, 2025

CVE-2025-7071

5.9
    Oberon Microsystem Ag
  • Ocrypto
Published: August 29, 2025

CVE-2025-7383

5.9
    Oberon
  • Oberon Psa Crypto Library
Published: August 29, 2025

CVE-2024-54554

5.5
    Apple
  • Macos Sequoia
Published: August 29, 2025

CVE-2025-43284

5.5
    Apple
  • Macos Sonoma
  • Macos Ventura
  • Macos Sequoia
Published: August 29, 2025

CVE-2025-9670

5.5
    Mixmark-Io
  • Turndown
Published: August 29, 2025

CVE-2025-9595

5.3
    Code-Projects
  • Student Information Management System
Published: August 29, 2025

CVE-2025-9602

5.3
    Xinhu
  • Rockoa
Published: August 29, 2025

CVE-2025-9603

5.3
    Telesquare
  • Tlr-2005ksh
Published: August 29, 2025

CVE-2025-39246

5.3
    Hikvision
  • Hikcentral Focsign
Published: August 29, 2025

CVE-2025-9606

5.3
    Portabilis
  • I-Educar
Published: August 29, 2025

CVE-2025-9607

5.3
    Portabilis
  • I-Educar
Published: August 29, 2025

CVE-2025-9608

5.3
    Portabilis
  • I-Educar
Published: August 29, 2025

CVE-2025-9609

5.3
    Portabilis
  • I-Educar
Published: August 29, 2025

CVE-2025-54777

5.3
    Konica Minolta
  • Bizhub
Published: August 29, 2025

CVE-2025-4644

5.3
    Payload
  • Sqlite Adapter
Published: August 29, 2025

CVE-2025-9647

5.3
    Mtons
  • Mblog
Published: August 29, 2025

CVE-2025-9650

5.3
    Yeqifu
  • Carrental
Published: August 29, 2025

CVE-2025-9651

5.3
    Shafhasan
  • Chatbox
Published: August 29, 2025

CVE-2025-9654

5.3
    Aiondadotcom
  • Mcp-Ssh
Published: August 29, 2025

CVE-2025-54877

5.3
    Tuleap
  • Tuleap Community Edition
  • Tuleap Enterprise Edition
Published: August 29, 2025

CVE-2025-9656

5.3
    Phpgurukul
  • Directory Management System
Published: August 29, 2025

CVE-2025-29874

5.3
    Qnap
  • File Station
Published: August 29, 2025

CVE-2025-29878

5.3
    Qnap
  • File Station
Published: August 29, 2025

CVE-2025-29879

5.3
    Qnap
  • File Station
Published: August 29, 2025

CVE-2025-9663

5.3
    Code-Projects
  • Simple Grading System
Published: August 29, 2025

CVE-2025-9664

5.3
    Code-Projects
  • Simple Grading System
Published: August 29, 2025

CVE-2025-29882

5.3
    Qnap
  • Qts
  • Quts Hero
Published: August 29, 2025

CVE-2025-29886

5.3
    Qnap
  • File Station 5
Published: August 29, 2025

CVE-2025-29888

5.3
    Qnap
  • File Station
Published: August 29, 2025

CVE-2025-29889

5.3
    Qnap
  • File Station
Published: August 29, 2025

CVE-2025-30262

5.3
    Qnap
  • Qsync Central
Published: August 29, 2025

CVE-2025-30263

5.3
    Qnap
  • Qsync Central
Published: August 29, 2025

CVE-2025-30267

5.3
    Qnap
  • Qts
  • Quts Hero
Published: August 29, 2025

CVE-2025-30268

5.3
    Qnap
  • Qts
  • Quts Hero
Published: August 29, 2025

CVE-2025-30270

5.3
    Qnap
  • Qts
  • Quts Hero
Published: August 29, 2025

CVE-2025-30271

5.3
    Qnap
  • Qts
  • Quts Hero
Published: August 29, 2025

CVE-2025-30275

5.3
    Qnap
  • Qsync Central
Published: August 29, 2025

CVE-2025-9665

5.3
    Code-Projects
  • Simple Grading System
Published: August 29, 2025

CVE-2025-9666

5.3
    Code-Projects
  • Simple Grading System
Published: August 29, 2025

CVE-2025-9667

5.3
    Code-Projects
  • Simple Grading System
Published: August 29, 2025

CVE-2025-58066

5.3
    Nptd-Rs
  • Nptd-Rs
Published: August 29, 2025

CVE-2025-40702

5.1
    Acdh-Ch
  • Openatlas
Published: August 29, 2025

CVE-2025-40703

5.1
    Acdh-Ch
  • Openatlas
Published: August 29, 2025

CVE-2025-40704

5.1
    Acdh-Ch
  • Openatlas
Published: August 29, 2025

CVE-2025-40705

5.1
    Openatlas
  • Openatlas
Published: August 29, 2025

CVE-2025-40706

5.1
    Openatlas
  • Openatlas
Published: August 29, 2025

CVE-2025-40707

5.1
    Openatlas
  • Openatlas
Published: August 29, 2025

CVE-2025-40708

5.1
    Acdh-Ch
  • Openatlas
Published: August 29, 2025

CVE-2025-40709

5.1
    Acdh-Ch
  • Openatlas
Published: August 29, 2025

CVE-2025-9646

5.1
    O2oa
  • O2oa
Published: August 29, 2025

CVE-2025-9652

5.1
    Portabilis
  • I-Eduquem
Published: August 29, 2025

CVE-2025-9653

5.1
    Portabilis
  • I-Educar
Published: August 29, 2025

CVE-2025-9655

5.1
    O2oa
  • O2oa
Published: August 29, 2025

CVE-2025-9657

5.1
    O2oa
  • O2oa
Published: August 29, 2025

CVE-2025-9658

5.1
    O2oa
  • O2oa
  • Personal Profile Page
Published: August 29, 2025

CVE-2025-9659

5.1
    O2oa
  • O2oa
Published: August 29, 2025

CVE-2025-30272

5.1
    Qnap
  • Qts
  • Quts Hero
Published: August 29, 2025

CVE-2025-30274

5.1
    Qnap
  • Qts
  • Qu Ts Hero
Published: August 29, 2025

CVE-2025-33032

5.1
    Qnap
  • Qts
  • Quts Hero
Published: August 29, 2025

CVE-2025-9649

4.8
    Appneta
  • Tcpreplay
Published: August 29, 2025

CVE-2025-9671

4.8
    Uab
  • Paytend App
Published: August 29, 2025

CVE-2025-9672

4.8
    Rejseplanen
  • Rejseplanen App
Published: August 29, 2025

CVE-2025-9673

4.8
    Kakao
  • Hey Kakao App
Published: August 29, 2025

CVE-2025-9674

4.8
    Transbyte
  • Scooper News App
Published: August 29, 2025

CVE-2025-9675

4.8
    Tuyangkeji
  • Voice Changer App
Published: August 29, 2025

CVE-2025-39245

4.7
    Hikvision
  • Hikcentral Master Lite
Published: August 29, 2025

CVE-2025-43773

4.6
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: August 29, 2025

CVE-2024-54568

4.3
    Apple
  • Macos Sequoia
Published: August 29, 2025

CVE-2025-8147

4.3
    Wordpress
  • Lws Cache
Published: August 29, 2025

CVE-2025-9374

4.3
    Ultimate Tag Warrior
  • Ultimate Tag Warrior Importer
Published: August 29, 2025

CVE-2025-58067

4.2
    Basecamp
  • Google Sign In
    Rails
Published: August 29, 2025

CVE-2025-54142

4.0
    Akamai
  • Ghost
Published: August 29, 2025

CVE-2025-48979

3.4
    Uisp
  • Uisp
Published: August 29, 2025

CVE-2024-44271

3.3
    Apple
  • Macos Sequoia
Published: August 29, 2025

CVE-2025-43255

3.3
    Apple
  • Macos Sonoma
  • Macos Sequoia
  • Macos Ventura
Published: August 29, 2025

CVE-2025-55202

2.7
    Opencast
  • Opencast
Published: August 29, 2025

CVE-2025-9071

2.3
    Oberon Microsystems
  • Oberon Psa Crypto
Published: August 29, 2025

CVE-2025-30265

2.3
    Qnap
  • Qts
  • Quts Hero
Published: August 29, 2025

CVE-2025-44015

2.3
    Qnap
  • Hybriddesk Station
Published: August 29, 2025

CVE-2024-12923

2.0
    Qnap
  • Photo Station
Published: August 29, 2025

CVE-2025-54080

1.8
    Exiv2
  • Exiv2
Published: August 29, 2025

CVE-2025-55304

1.8
    Exiv2
  • Exiv2
Published: August 29, 2025

CVE-2025-58326

None
    Fortinet
  • Fortinet
Published: August 29, 2025

CVE-2025-58327

None
    Fortinet
  • Fortigate
Published: August 29, 2025

CVE-2025-58328

None
    Fortinet
  • Fortinet
Published: August 29, 2025

CVE-2025-58329

None
    Fortinet
  • Fortinet
Published: August 29, 2025

CVE-2025-58330

None
    Fortinet
  • *
Published: August 29, 2025

CVE-2025-58331

None
    Fortinet
  • Fortinet
Published: August 29, 2025

CVE-2025-58332

None
    Fortinet
  • Fortinet
Published: August 29, 2025

CVE-2025-58333

None
    Fortinet
  • Fortinet
Published: August 29, 2025
Click here to see more Vulnerabilities