Tag: 2025-09-02

3 Attack Reports | 51 Vulnerabilities

Attack reports

Three Lazarus RATs coming for your cheese

This report analyzes three remote access trojans (RATs) used by a Lazarus subgroup targeting financial and cryptocurrency organizations: PondRAT, ThemeForestRAT, and RemotePE. It details an incident response case from 2024 involving social engineering and possible zero-day exploitation. PondRAT is …
rat
social engineering
cryptocurrency
zero-day
poolrat
pondrat
financial
2025-09-02
remotepe
themeforestrat
2025-09-03
Published: September 3, 2025
Downloadable IOCs: 0

CTI Analysis: Malicious Email Campaign

An Iran-nexus spear-phishing campaign masquerading as the Omani Ministry of Foreign Affairs targeted global governments in August 2025. Attributed to Iranian-aligned operators linked to the Homeland Justice group and MOIS, the campaign used compromised mailboxes to send emails with malicious Micros…
anti-analysis
reconnaissance
spear-phishing
2025-09-02
vba macro
diplomatic targets
iran-nexus
oman mfa
Published: September 2, 2025
Downloadable IOCs: 15

Sindoor Dropper: New Phishing Campaign

A sophisticated phishing campaign targeting Indian organizations has been uncovered, utilizing spear-phishing techniques reminiscent of Operation Sindoor. The campaign employs a Linux-focused infection method using weaponized .desktop files, a tactic previously associated with APT36. When executed,…
linux
obfuscation
phishing
meshagent
apt36
spear-phishing
2025-09-02
sindoor
Published: September 2, 2025
Downloadable IOCs: 14
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-57140

9.8
    Rsbi
  • Rsbi-Pom
Published: September 2, 2025

CVE-2025-5662

9.8
    H2o
  • H2o
    Mysql
    Oracle
Published: September 2, 2025

CVE-2025-52551

9.3
    E2
  • Facility Management Systems
Published: September 2, 2025

CVE-2025-6519

9.3
    E3
  • E3 Site Supervisor
Published: September 2, 2025

CVE-2025-52549

9.2
    E3
  • E3 Site Supervisor Control
Published: September 2, 2025

CVE-2025-52544

8.8
    E3
  • Site Supervisor Control
Published: September 2, 2025

CVE-2025-52547

8.7
    E3
  • Site Supervisor Control
Published: September 2, 2025

CVE-2025-9573

8.6
Published: September 2, 2025

CVE-2025-2414

8.6
    Akinsoft
  • Octocloud
Published: September 2, 2025

CVE-2025-52550

8.6
    *
  • E3 Site Supervisor Control
Published: September 2, 2025

CVE-2025-2413

8.6
    Akinsoft
  • Prokuafor
Published: September 2, 2025

CVE-2025-9815

8.5
    Alaneuler
  • Batterykid
    Apple
Published: September 2, 2025

CVE-2025-46810

8.5
    Suse
  • Traefik2
  • Opensuse Tumbleweed
Published: September 2, 2025

CVE-2024-58259

8.2
    Rancher
  • Rancher Manager
Published: September 2, 2025

CVE-2025-57808

8.1
    Esp
  • Esphome
Published: September 2, 2025

CVE-2025-58178

7.8
    Sonarqube
  • Sonarqube
Published: September 2, 2025

CVE-2024-52284

7.7
    Suse
  • Bundle Deployment
  • Helm
Published: September 2, 2025

CVE-2025-52545

7.7
    E3
  • Site Supervisor Control
Published: September 2, 2025

CVE-2025-9784

7.5
    Redhat
  • Undertow
Published: September 2, 2025

CVE-2025-9812

7.4
    Tenda
  • Ch22
Published: September 2, 2025

CVE-2025-9813

7.4
    Tenda
  • Ch22
Published: September 2, 2025

CVE-2025-41690

7.4
    *
  • Bluetooth Device
Published: September 2, 2025

CVE-2025-9811

6.9
    Campcodes
  • Farm Management System
Published: September 2, 2025

CVE-2025-9814

6.9
    Phpgurukul
  • Beauty Parlour Management System
Published: September 2, 2025

CVE-2025-41030

6.9
    T-Innova
  • Deporsite
Published: September 2, 2025

CVE-2025-41031

6.9
    T-Innova
  • Deporsite
Published: September 2, 2025

CVE-2025-52548

6.9
    E3
  • Site Supervisor Control
Published: September 2, 2025

CVE-2025-58162

6.5
    Mobsf
  • Mobsf
Published: September 2, 2025

CVE-2025-9805

5.3
    Simstudioai
  • Sim
Published: September 2, 2025

CVE-2025-52543

5.3
    E3
  • Site Supervisor Control
Published: September 2, 2025

CVE-2025-9802

5.1
    Remoteclinic
  • Remoteclinic
Published: September 2, 2025

CVE-2025-44017

5.1
    Gunosy
  • Gunosy App
Published: September 2, 2025

CVE-2025-52546

5.1
    E3
  • E3 Site Supervisor Control
Published: September 2, 2025

CVE-2024-12973

4.7
    Akinsoft
  • Octocloud
Published: September 2, 2025

CVE-2025-0640

4.7
    Akinsoft
  • Octocloud
Published: September 2, 2025

CVE-2025-0670

4.7
    Akinsoft
  • Prokuafor
Published: September 2, 2025

CVE-2024-12972

4.3
    Akinsoft
  • Octocloud
Published: September 2, 2025

CVE-2025-56254

4.3
    Phpgurukul
  • Employee Leave Management System
Published: September 2, 2025

CVE-2024-12974

4.3
    Akinsoft
  • Prokuaför
Published: September 2, 2025

CVE-2025-8662

2.3
    Forgerock
  • Openam
Published: September 2, 2025

CVE-2025-9806

1.8
    Tenda
  • F1202
Published: September 2, 2025

CVE-2025-58161

1.3
    Mobsf
  • Mobsf
Published: September 2, 2025

CVE-2025-58414

None
    Fortinet
  • *
Published: September 2, 2025

CVE-2025-58415

None
    Fortinet
  • Fortinet
Published: September 2, 2025

CVE-2025-58416

None
    Fortinet
  • Fortinet
Published: September 2, 2025

CVE-2025-58417

None
    Fortinet
  • Fortinet
Published: September 2, 2025

CVE-2025-58418

None
    Fortinet
  • Fortinet
Published: September 2, 2025

CVE-2025-58419

None
    Fortinet
  • Fortinet
Published: September 2, 2025

CVE-2025-58420

None
    Fortinet
  • Fortinet
Published: September 2, 2025

CVE-2025-58421

None
    Fortinet
  • Fortinet
Published: September 2, 2025

CVE-2025-46047

None
    Silverpeas
  • Silverpeas
Published: September 2, 2025
Click here to see more Vulnerabilities