Tag: 2025-10-02

5 Attack Reports | 129 Vulnerabilities

Attack reports

New spyware campaigns target privacy-conscious Android users in the UAE

Two Android spyware campaigns, ProSpy and ToSpy, have been discovered targeting users in the United Arab Emirates. These campaigns impersonate secure messaging apps like Signal and ToTok, distributing malware through deceptive websites and social engineering tactics. Once installed, the spyware exf…
phishing
android
persistence
spyware
data exfiltration
uae
signal
2025-10-02
android/spy.tospy
totok
app impersonation
android/spy.prospy
Published: October 2, 2025
Downloadable IOCs: 30

UAT-8099: Chinese-speaking cybercrime group targets high-value IIS for SEO fraud

A Chinese-speaking cybercrime group, UAT-8099, is targeting high-value Internet Information Services (IIS) servers for search engine optimization fraud and data theft. The group focuses on reputable servers in India, Thailand, Vietnam, Canada, and Brazil, affecting universities, tech firms, and tel…
data theft
cobalt strike
cybercrime
badiis
chinese-speaking
web shells
seo fraud
2025-10-02
iis servers
Published: October 2, 2025
Downloadable IOCs: 80

Threat Actors Leverage SEO Poisoning and Malicious Ads to Distribute Backdoored Microsoft Teams Installers

A new campaign is distributing the Oyster (Broomstick) backdoor through trojanized Microsoft Teams installers. Threat actors are using SEO poisoning and malvertising to trick users into downloading fake installers from spoofed websites. The malicious installers deploy a persistent backdoor that ena…
malvertising
seo poisoning
persistence
dll sideloading
microsoft teams
c2 communication
oyster
broomstick
2025-10-02
oyster backdoor
trojanized installer
Published: October 2, 2025
Downloadable IOCs: 15

Werewolf raids Russia's public sector with trusted relationship attacks

Cavalry Werewolf, a malicious actor group, targeted Russian state agencies and enterprises in the energy, mining, and manufacturing sectors from May to August 2025. The attackers used targeted phishing emails, posing as Kyrgyz government officials, to gain initial access. They employed custom malwa…
rat
phishing
russia
government
asyncrat
mining
telegram
reverse shell
manufacturing
kyrgyzstan
2025-10-02
energy
foalshell
stallionrat
Published: October 2, 2025
Downloadable IOCs: 0

Analysis: AI-powered Ransomware from APT Group

FunkLocker, a ransomware strain developed by the FunkSec APT group, showcases the growing trend of AI-assisted malware creation. The ransomware exhibits inconsistent quality across multiple builds, with some versions incorporating advanced features like anti-VM checks. It aggressively disrupts syst…
ransomware
powershell
encryption
ai-assisted
2025-10-02
funklocker
process-disruption
system-abuse
Published: October 2, 2025
Downloadable IOCs: 1
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-9697

9.8
    Wordpress
  • Ajax Woosearch
Published: October 2, 2025

CVE-2025-59407

9.8
    Flock Safety
  • Detectionprocessing
Published: October 2, 2025

CVE-2025-11221

9.4
    Gtone
  • Changeflow
Published: October 2, 2025

CVE-2025-34210

9.4
    Printerlogic
  • Vasion Print
Published: October 2, 2025

CVE-2025-61603

9.4
    Wegia
  • Wegia
Published: October 2, 2025

CVE-2025-61605

9.4
    Wegia
  • Wegia
Published: October 2, 2025

CVE-2025-61588

9.3
    Risc0
  • Risc0-Zkvm-Platform
  • Risc0-Aggregation
  • Risc0-Zkos-V1compat
  • Risc0-Zkvm
Published: October 2, 2025

CVE-2025-41064

9.3
    Opensiac
  • Opensiac
Published: October 2, 2025

CVE-2025-59735

9.3
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59736

9.3
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59737

9.3
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59738

9.3
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59739

9.3
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59740

9.3
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59741

9.3
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59742

9.3
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59743

9.3
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-61595

8.8
    Mantrachain
  • Mantrachain
Published: October 2, 2025

CVE-2025-11020

8.7
    Markany
  • Safepc Enterprise
Published: October 2, 2025

CVE-2025-40645

8.7
    Viday
  • Viday
Published: October 2, 2025

CVE-2025-59744

8.7
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-61665

8.7
    Wegia
  • Wegia
Published: October 2, 2025

CVE-2025-61666

8.7
    Traccar
  • Traccar
Published: October 2, 2025

CVE-2025-61668

8.7
    Plone
  • Volto
Published: October 2, 2025

CVE-2025-59835

8.6
    Langbot
  • Langbot
Published: October 2, 2025

CVE-2025-10653

8.6
    *
  • *
Published: October 2, 2025

CVE-2025-58775

8.4
    Kv Studio
  • Kv Studio
    Vt5wx
Published: October 2, 2025

CVE-2025-58776

8.4
    Kv Studio
  • Kv Studio
Published: October 2, 2025

CVE-2025-34208

8.2
    Printerlogic
  • Vasion Print
  • Virtual Appliance
Published: October 2, 2025

CVE-2024-58267

8.0
    Rancher
  • Manager
Published: October 2, 2025

CVE-2024-58260

7.6
    Suse
  • Rancher Manager
Published: October 2, 2025

CVE-2025-54286

7.5
    Canonical
  • Lxd
Published: October 2, 2025

CVE-2025-61733

7.5
    Apache
  • Kylin
Published: October 2, 2025

CVE-2025-61734

7.5
    Apache
  • Kylin
Published: October 2, 2025

CVE-2023-28760

7.5
    Tp-Link
  • Archer Ax21
    Minidlna
Published: October 2, 2025

CVE-2025-56161

7.5
    Yoshop
  • Yoshop
Published: October 2, 2025

CVE-2025-60660

7.5
    Tenda
  • Ac18
Published: October 2, 2025

CVE-2025-60662

7.5
    Tenda
  • Ac18
Published: October 2, 2025

CVE-2025-59405

7.5
    Flock Safety
  • Peripheral
Published: October 2, 2025

CVE-2025-59409

7.5
    Flock Safety
  • Falcon
  • Sparrow
Published: October 2, 2025

CVE-2025-60663

7.5
    Tenda
  • Ac18
Published: October 2, 2025

CVE-2025-61600

7.5
    Stalwart
  • Stalwart
Published: October 2, 2025

CVE-2025-54289

7.4
    Canonical
  • Lxd
Published: October 2, 2025

CVE-2025-61735

7.3
    Apache
  • Kylin
Published: October 2, 2025

CVE-2025-32942

7.2
    Thorny
  • Ssh Tectia Server
Published: October 2, 2025

CVE-2025-11182

7.1
    Gtone
  • Changeflow
Published: October 2, 2025

CVE-2025-58777

7.1
    Vt
  • Studio
Published: October 2, 2025

CVE-2025-61690

7.1
    Kv Studio
  • Kv Studio
Published: October 2, 2025

CVE-2025-61691

7.1
    Vt Studio
  • Vt Studio
Published: October 2, 2025

CVE-2025-61692

7.1
    Vt Studio
  • Vt Studio
Published: October 2, 2025

CVE-2025-54287

7.1
    Canonical
  • Lxd
Published: October 2, 2025

CVE-2025-54293

7.1
    Canonical
  • Lxd
Published: October 2, 2025

CVE-2025-49090

7.1
    Matrix
  • Matrix Specification
Published: October 2, 2025

CVE-2025-54315

7.1
    Matrix
  • Matrix
Published: October 2, 2025

CVE-2025-61604

7.1
    Wegia
  • Wegia
Published: October 2, 2025

CVE-2025-54290

6.9
    Canonical
  • Lxd
Published: October 2, 2025

CVE-2025-54291

6.9
    Canonical
  • Lxd
Published: October 2, 2025

CVE-2025-53881

6.9
    Exim
  • Exim
Published: October 2, 2025

CVE-2025-59745

6.9
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59746

6.9
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59747

6.9
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59748

6.9
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59749

6.9
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59755

6.9
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-22862

6.7
    Fortinet
  • Fortios
  • Fortiproxy
Published: October 2, 2025

CVE-2025-9587

6.5
    Ctl
  • Behance Importer Lite
Published: October 2, 2025

CVE-2025-56380

6.5
    Frappe
  • Erpnext
  • Frappe
Published: October 2, 2025

CVE-2025-56381

6.5
    Frappe
  • Erpnext
  • Frappe
Published: October 2, 2025

CVE-2025-61096

6.5
    Phpgurukul
  • Online Shopping Portal
Published: October 2, 2025

CVE-2025-56162

6.5
    Yoshop
  • Yoshop
Published: October 2, 2025

CVE-2025-57305

6.5
    Vitara
  • Vitara Charts
Published: October 2, 2025

CVE-2025-59403

6.5
    Flock Safety
  • Collins
Published: October 2, 2025

CVE-2025-56019

6.5
    Agasta
  • Easytouch+
Published: October 2, 2025

CVE-2025-0642

6.3
    Poscube
  • Assist
Published: October 2, 2025

CVE-2025-59406

6.2
    Flock Safety
  • Pisco
Published: October 2, 2025

CVE-2025-61087

6.1
    Sourcecodester
  • Pet Grooming Management Software
Published: October 2, 2025

CVE-2025-56154

6.1
    Htmly
  • Htmly
Published: October 2, 2025

CVE-2025-40646

5.9
    Viday
  • Viday
Published: October 2, 2025

CVE-2025-54088

5.5
    Netmotionsoftware
  • Secure Access
Published: October 2, 2025

CVE-2025-56379

5.4
    Frappe
  • Erpnext
  • Frappe
Published: October 2, 2025

CVE-2025-60782

5.4
    Php Education Manager
  • Php Education Manager
Published: October 2, 2025

CVE-2025-11240

5.3
    Knime
  • Business Hub
Published: October 2, 2025

CVE-2025-60661

5.3
    Tenda
  • Ac18
Published: October 2, 2025

CVE-2025-54086

5.3
    Netmotion
  • Absolute Secure Access
Published: October 2, 2025

CVE-2025-54288

5.1
    Canonical
  • Lxd
Published: October 2, 2025

CVE-2025-40989

5.1
    Creativeitem
  • Ekushey Crm
Published: October 2, 2025

CVE-2025-40990

5.1
    Creativeitem
  • Ekushey Crm
Published: October 2, 2025

CVE-2025-40991

5.1
    Creativeitem
  • Ekushey Crm
Published: October 2, 2025

CVE-2025-40992

5.1
    Creativeitem
  • Sociopro
Published: October 2, 2025

CVE-2025-41010

5.1
    Hiberus
  • Sintra
Published: October 2, 2025

CVE-2025-57443

5.1
    Frostwire
  • Frostwire
Published: October 2, 2025

CVE-2025-59750

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59751

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59752

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59753

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59754

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59756

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59757

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59758

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59759

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59760

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59761

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59762

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59763

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59764

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59765

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59766

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59767

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59768

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59769

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59770

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59771

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59772

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59773

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-59774

5.1
    Andsoft
  • E-Tms
Published: October 2, 2025

CVE-2025-54292

4.8
    Canonical
  • Lxd Ui
Published: October 2, 2025

CVE-2025-61606

4.8
    Wegia
  • Wegia
Published: October 2, 2025

CVE-2025-54468

4.7
    Suse
  • Rancher Manager
Published: October 2, 2025

CVE-2025-54089

4.6
    Netmotion
  • Secure Access
Published: October 2, 2025

CVE-2025-11239

2.3
    Knime
  • Business Hub
Published: October 2, 2025

CVE-2025-54087

1.8
    Netmotion Software
  • Secure Access
Published: October 2, 2025

CVE-2025-61849

None
    Fortinet
  • *
Published: October 2, 2025

CVE-2025-61850

None
    Fortinet
  • Fortinet
Published: October 2, 2025

CVE-2025-61851

None
    Fortinet
  • Fortinet
Published: October 2, 2025

CVE-2025-61852

None
    Fortinet
  • Fortinet
Published: October 2, 2025

CVE-2025-61853

None
    Fortinet
  • Fortinet
Published: October 2, 2025

CVE-2025-61854

None
    Fortinet
  • *
Published: October 2, 2025

CVE-2025-61855

None
    Fortinet
  • Fortinet
Published: October 2, 2025

CVE-2025-10895

None
Published: October 2, 2025
Click here to see more Vulnerabilities