Tag: 2025-09-05

4 Attack Reports | 10 Vulnerabilities

Attack reports

Massive IPTV Piracy Network Uncovered

A large-scale Internet Protocol Television (IPTV) piracy network has been discovered, spanning over 1,000 domains and 10,000 IP addresses. Two companies, XuiOne and Tiyansoft, were identified as profiting from hosting pirated content. The network affects more than 20 major brands, including Prime V…
cybercrime
2025-09-05
piracy
iptv
xuione
digital content
infrastructure mapping
streaming
brand protection
tiyansoft
Published: September 5, 2025
Downloadable IOCs: 11

Operation BarrelFire: Targeting Kazakhstan Oil & Gas

A threat group dubbed NoisyBear has been targeting Kazakhstan's oil and gas sector since April 2025. The campaign focuses on KazMunaiGas employees, using spear-phishing emails with malicious attachments. The infection chain involves a ZIP file containing a malicious LNK file and decoy document, whi…
powershell
infrastructure
spear-phishing
kazakhstan
central asia
russian threat actor
dll injection
amsi bypass
oil and gas
2025-09-04
2025-09-05
downshell
Published: September 5, 2025
Downloadable IOCs: 14

New Botnet Emerges from the Shadows: NightshadeC2

A new botnet called NightshadeC2 has been identified, employing sophisticated techniques to bypass malware analysis sandboxes and exclude itself from Windows Defender. It uses a 'UAC Prompt Bombing' technique and has both C and Python variants. The botnet's capabilities include reverse shell, file …
botnet
lumma stealer
keylogging
sandbox evasion
c2 communication
uac bypass
trojanized software
2025-09-05
nightshadec2
Published: September 5, 2025
Downloadable IOCs: 0

From summer camp to grind season

As summer comes to an end, cybersecurity professionals are urged to prioritize mental health during the upcoming 'grind season'. The newsletter discusses the importance of taking breaks and ensuring team members do the same. It highlights a paper on potential psychopathologies in advanced AI system…
ai
vulnerabilities
data breaches
ps1bot
CVE-2025-55177
2025-09-05
threat research
Published: September 5, 2025
Linked vulnerabilities : CVE-2025-55177 (CVSS 8.0)
Downloadable IOCs: 4
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-9990

8.1
    Wordpress
  • Helpdesk Integration
  • Wordpress
Published: September 5, 2025

CVE-2025-58362

7.5
    Hono
  • Hono
Published: September 5, 2025

CVE-2025-58179

7.2
    Astro
  • Astro
  • Cloudflare Adapter
Published: September 5, 2025

CVE-2025-7445

6.5
    Kubernetes
  • Secrets-Store-Sync-Controller
Published: September 5, 2025

CVE-2025-8684

6.4
    Wordpress
  • Flatsome Theme
Published: September 5, 2025

CVE-2025-58359

6.0
    Zf
  • Frost
Published: September 5, 2025

CVE-2025-41408

5.3
    Yahoo
  • Yahoo Shopping
Published: September 5, 2025

CVE-2025-55739

5.1
    Freepbx
  • Freepbx
Published: September 5, 2025

CVE-2025-58401

5.1
    Obsidian
  • Github Copilot Plugin
Published: September 5, 2025

CVE-2025-58352

2.1
    Weblate
  • Weblate
Published: September 5, 2025
Click here to see more Vulnerabilities