Tag: 2025-10-23

8 Attack Reports | 103 Vulnerabilities

Attack reports

Help Wanted: Vietnamese Actors Using Fake Job Posting Campaigns to Deliver Malware and Steal Credentials

A group of financially motivated threat actors from Vietnam, tracked as UNC6229, is targeting individuals in the digital advertising and marketing sectors through fake job postings. They use social engineering tactics to deliver malware and phishing kits, aiming to compromise high-value corporate a…
social engineering
credential theft
remote access trojans
2025-10-23
fake job postings
digital advertising
Published: October 23, 2025
Downloadable IOCs: 0

TransparentTribe Targets Indian Military with DeskRAT Malware

TransparentTribe, a Pakistani-nexus intrusion set, has launched a new cyber espionage campaign targeting Indian military organizations with DeskRAT malware. The infection chain begins with phishing emails containing links to malicious ZIP archives hosted on staging servers. These archives contain D…
government
2025-10-23
deskrat
Published: October 23, 2025
Downloadable IOCs: 0

Warlock Ransomware: Old Actor, New Tricks?

The Warlock ransomware, first appearing in June 2025, is linked to a China-based actor with a history dating back to 2019. It gained prominence by exploiting the ToolShell vulnerability in Microsoft SharePoint. The group, known as Storm-2603, uses multiple ransomware payloads and a custom C&C frame…
espionage
ransomware
lockbit
warlock
2025-10-23
anylock
Published: October 23, 2025
Downloadable IOCs: 0

ToolShell Used to Compromise Telecoms Company in Middle East

China-based attackers exploited the ToolShell vulnerability (CVE-2025-53770) to compromise a Middle Eastern telecoms company and government agencies in Africa and South America. The attackers deployed malware such as Zingdoor, ShadowPad, and KrustyLoader, which have been associated with Chinese thr…
sliver
shadowpad
krustyloader
toolshell
warlock
2025-10-23
telecoms
zingdoor
Published: October 23, 2025
Downloadable IOCs: 0

Gotta fly: Lazarus targets the UAV sector

ESET researchers have uncovered a new instance of Operation DreamJob, a campaign attributed to the North Korea-aligned Lazarus group, targeting European defense companies involved in UAV technology. The attacks align with North Korea's efforts to enhance its drone program, likely aiming to steal pr…
2025-10-23
scoringmathtea
quanpinloader
operation dreamjob
Published: October 23, 2025
Downloadable IOCs: 0

Dissecting YouTube's Malware Distribution Network

Check Point Research uncovered a sophisticated malware distribution campaign operating on YouTube, dubbed the YouTube Ghost Network. This network utilizes over 3,000 malicious videos to spread malware, primarily targeting users seeking game cheats and pirated software. The operation involves compro…
rhadamanthys
redline
youtube
compromised accounts
hijackloader
stealc
lumma
2025-10-23
0debug
ghost network
Published: October 23, 2025
Downloadable IOCs: 0

Mirai Botnet Propagation and Exploitation of CVE-2025-24016

The Mirai botnet continues to spread as operators repurpose old source code and exploit newly published vulnerabilities. The CVE program, while beneficial, sometimes inadvertently highlights overlooked vulnerabilities. Researchers' attempts to educate through PoCs often lead to negative outcomes, e…
botnet
mirai
CVE-2025-24016
2025-10-23
wazuh
Published: October 23, 2025
Linked vulnerabilities : CVE-2025-24016 (CVSS 9.9)
Downloadable IOCs: 40

Bitter (APT-Q-37) uses diverse means to deliver new backdoor components

The Bitter group, also known as APT-Q-37, has been detected using new attack techniques to deliver a C# backdoor. Two attack chains were identified: one using VBA macros in xlam files to compile and install the backdoor, and another exploiting a WinRAR vulnerability to plant malicious macros. The b…
2025-10-23
winrar vulnerability
apt-q-37
Published: October 23, 2025
Linked vulnerabilities : CVE-2025-8088
Downloadable IOCs: 19
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-12104

10.0
    Blu
  • Blu-Ic2
  • Blu-Ic4
Published: October 23, 2025

CVE-2025-47699

9.9
    Gallagher
  • Command Centre Server
Published: October 23, 2025

CVE-2025-59503

9.9
    Microsoft
  • Azure Compute Gallery
Published: October 23, 2025

CVE-2025-11023

9.8
    Arksigner
  • Acbakimzala
Published: October 23, 2025

CVE-2025-58428

9.4
    Tls4b
  • Atg System
Published: October 23, 2025

CVE-2025-61934

9.3
    Productivity Suite
  • Productivity Suite
Published: October 23, 2025

CVE-2025-11575

8.8
    Mongodb
  • Atlas Sql Odbc Driver
Published: October 23, 2025

CVE-2025-6979

8.8
    Arista
  • Captive Portal
Published: October 23, 2025

CVE-2025-12100

8.8
    Mongodb
  • Bi Connector Odbc Driver
Published: October 23, 2025

CVE-2025-62498

8.6
    Productivity Suite
  • Productivity Suite
Published: October 23, 2025

CVE-2025-61865

8.4
    Narsus
  • Narsus
Published: October 23, 2025

CVE-2025-58078

8.3
    Productivity Suite
  • Productivitysuite
Published: October 23, 2025

CVE-2025-58456

8.2
    Productivity Suite
  • Productivity Software
Published: October 23, 2025

CVE-2025-59048

8.1
    Openbao
  • Auth-Aws Plugin
Published: October 23, 2025

CVE-2025-62169

8.1
    Octoprint
  • Spoolmanager
  • Octoprint
Published: October 23, 2025

CVE-2025-11621

8.1
    Hashicorp
  • Vault
Published: October 23, 2025

CVE-2025-23347

7.8
    Nvidia
  • Project G-Assist
Published: October 23, 2025

CVE-2025-23352

7.8
    Nvidia
  • Vgpu
Published: October 23, 2025

CVE-2025-59500

7.7
    Microsoft
  • Azure Notification Service
Published: October 23, 2025

CVE-2025-10914

7.6
    Proliz Software Ltd Co
  • Obs
Published: October 23, 2025

CVE-2025-12105

7.5
    Gnome
  • Libsoup
    Webkit
Published: October 23, 2025

CVE-2025-62399

7.5
    Moodle
  • Moodle
Published: October 23, 2025

CVE-2025-50950

7.5
    Audiofile
  • Audiofile
Published: October 23, 2025

CVE-2025-50951

7.5
    Fontforge
  • Fontforge
Published: October 23, 2025

CVE-2025-6980

7.5
    Arista
  • Captived Portal
Published: October 23, 2025

CVE-2025-12044

7.5
    Hashicorp
  • Vault
  • Vault Enterprise
Published: October 23, 2025

CVE-2025-54963

7.5
    Bae
  • Socet Gxp
Published: October 23, 2025

CVE-2025-54808

7.3
    Oxford Nanopore Technologies
  • Minknow
Published: October 23, 2025

CVE-2025-59273

7.3
    Microsoft
  • Azure Event Grid
Published: October 23, 2025

CVE-2025-61977

7.3
    Productivity Suite
  • Productivity Suite
Published: October 23, 2025

CVE-2025-62713

7.2
    Kottster
  • Kottster
Published: October 23, 2025

CVE-2025-6978

7.2
    Arista
  • Arista
Published: October 23, 2025

CVE-2025-41073

7.1
    Tesi
  • Gandia Integra Total
Published: October 23, 2025

CVE-2025-53702

7.1
    Vilar
  • Vs-Ipc1002
Published: October 23, 2025

CVE-2025-61132

7.1
    Levlaz
  • Braindump
Published: October 23, 2025

CVE-2025-61136

7.1
    Axewater
  • Sharewarez
Published: October 23, 2025

CVE-2025-55067

7.1
    Tls4b
  • Tls4b Atg System
Published: October 23, 2025

CVE-2025-62256

6.9
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: October 23, 2025

CVE-2025-34155

6.9
    Tibbo
  • Aggreagate Network Manager
Published: October 23, 2025

CVE-2025-34156

6.9
    Tibbo
  • Aggreagate Network Manager
Published: October 23, 2025

CVE-2025-62236

6.9
    Frontier Airlines
  • Website
Published: October 23, 2025

CVE-2025-62688

6.9
    Productivity Suite
  • Productivity Suite
Published: October 23, 2025

CVE-2025-10937

6.8
    Oxford Nanopore Technologies
  • Minknow
Published: October 23, 2025

CVE-2025-48428

6.7
    Gallagher
  • Command Centre Server
Published: October 23, 2025

CVE-2025-60852

6.5
    Instantdeveloper
  • Instant Developer Foundation
Published: October 23, 2025

CVE-2025-56007

6.5
    Keenetic
  • Keeneticos
Published: October 23, 2025

CVE-2025-61464

6.5
    Gnuboard
  • Gnuboard4
Published: October 23, 2025

CVE-2025-8427

6.4
    Beaver Builder
  • Beaver Builder Plugin
Published: October 23, 2025

CVE-2025-56008

6.1
    Keenetic
  • Keenetic Os
Published: October 23, 2025

CVE-2025-57240

6.1
    17gz
  • International Student Service System
Published: October 23, 2025

CVE-2025-61413

6.1
    Piranha
  • Piranha Cms
Published: October 23, 2025

CVE-2025-60837

6.1
    Mcms
  • Mcms
Published: October 23, 2025

CVE-2025-60859

6.1
    Gnuboard
  • Gnuboard
Published: October 23, 2025

CVE-2025-62813

5.9
    Lz4
  • Lz4
Published: October 23, 2025

CVE-2025-62517

5.9
    Rollbar
  • Rollbar.Js
Published: October 23, 2025

CVE-2025-35981

5.5
    Gallagher
  • Command Centre Server
Published: October 23, 2025

CVE-2025-41402

5.5
    Gallagher
  • Command Centre Server
Published: October 23, 2025

CVE-2025-48430

5.5
    Gallagher
  • Command Centre Server
Published: October 23, 2025

CVE-2025-23300

5.5
    Nvidia
  • Display Driver
Published: October 23, 2025

CVE-2025-23330

5.5
    Nvidia
  • Display Driver
Published: October 23, 2025

CVE-2025-10727

5.4
    Ark Signer
  • Acbakimzala
Published: October 23, 2025

CVE-2025-62401

5.4
    Moodle
  • Moodle
Published: October 23, 2025

CVE-2025-11429

5.4
    Keycloak
  • Keycloak
Published: October 23, 2025

CVE-2025-12110

5.4
    Keycloak
  • Keycloak
Published: October 23, 2025

CVE-2025-62396

5.3
    Moodle
  • Moodle
Published: October 23, 2025

CVE-2025-62397

5.3
    Router
  • *
Published: October 23, 2025

CVE-2025-62398

5.3
    *
  • *
Published: October 23, 2025

CVE-2025-10705

5.3
    Wordpress
  • Mxchat
Published: October 23, 2025

CVE-2025-56009

5.3
    Keenetic
  • Keeneticos
Published: October 23, 2025

CVE-2025-50949

5.3
    Fontforge
  • Fontforge
Published: October 23, 2025

CVE-2025-12114

5.2
    Blu
  • Blu-Ic2
  • Blu-Ic4
Published: October 23, 2025

CVE-2025-57848

5.2
    Redhat
  • Container-Native Virtualization
Published: October 23, 2025

CVE-2025-54806

5.1
    Growi
  • Growi
Published: October 23, 2025

CVE-2025-40643

5.1
    Status Tracker Ltd
  • Energy Crm
Published: October 23, 2025

CVE-2025-10355

5.1
    Molgenis
  • Emx2
Published: October 23, 2025

CVE-2025-54964

5.1
    Bae
  • Socet Gxp
Published: October 23, 2025

CVE-2025-54966

5.1
    Bae
  • Socet Gxp
Published: October 23, 2025

CVE-2025-11128

5.0
    Wordpress
  • Feedzy
Published: October 23, 2025

CVE-2025-23332

5.0
    Nvidia
  • Display Driver
Published: October 23, 2025

CVE-2025-62820

4.9
    Slack
  • Nebula
Published: October 23, 2025

CVE-2025-9980

4.8
    Quickcms
  • Quickcms
Published: October 23, 2025

CVE-2025-9981

4.8
    Quickcms
  • Quickcms
Published: October 23, 2025

CVE-2025-1679

4.8
    Moxa
  • Ethernet Switch
Published: October 23, 2025

CVE-2025-53701

4.8
    Vilar
  • Vs-Ipc1002
Published: October 23, 2025

CVE-2025-54856

4.6
    Movable Type
  • Movable Type
Published: October 23, 2025

CVE-2025-62499

4.6
    Movable Type
  • Movable Type
Published: October 23, 2025

CVE-2025-23345

4.4
    Nvidia
  • Display Driver
Published: October 23, 2025

CVE-2025-62393

4.3
    *
  • Learning Management System
  • Course Management System
Published: October 23, 2025

CVE-2025-62394

4.3
    Moodle
  • Moodle
Published: October 23, 2025

CVE-2025-62395

4.3
    *
  • Cohort Search Web Service
Published: October 23, 2025

CVE-2025-62400

4.3
    Moodle
  • Moodle
Published: October 23, 2025

CVE-2025-62255

2.0
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: October 23, 2025

CVE-2025-1680

0.0
    Moxa
  • Ethernet Switch
Published: October 23, 2025

CVE-2025-62804

None
    Fortinet
  • Fortinet
Published: October 23, 2025

CVE-2025-62805

None
    Fortinet
  • Fortinet
Published: October 23, 2025

CVE-2025-62806

None
    Fortinet
  • Fortinet
Published: October 23, 2025

CVE-2025-62807

None
    Fortinet
  • Fortinet
Published: October 23, 2025

CVE-2025-62808

None
    Fortinet
  • Fortinet
Published: October 23, 2025

CVE-2025-62809

None
    Fortinet
  • Fortinet
Published: October 23, 2025

CVE-2025-62810

None
    Fortinet
  • Fortinet
Published: October 23, 2025

CVE-2025-62811

None
    Fortinet
  • Fortinet
Published: October 23, 2025

CVE-2025-62812

None
    Fortinet
  • Fortinet
Published: October 23, 2025

CVE-2024-14011

None
    *
  • *
Published: October 23, 2025
Click here to see more Vulnerabilities