Tag: 2025-11-03

5 Attack Reports | 63 Vulnerabilities

Attack reports

Remote access, real cargo: cybercriminals targeting trucking and logistics

Cybercriminals are targeting trucking and logistics companies to steal cargo freight through elaborate attack chains. They compromise companies and use their access to bid on cargo shipments, which they then steal and sell. The threat actors typically deliver remote monitoring and management (RMM) …
screenconnect
phishing
social engineering
supply chain
lumma stealer
cybercrime
danabot
netsupport
stealc
simplehelp
fleetdeck
n-able
pdq connect
logistics
2025-11-03
cargo theft
logmein resolve
trucking
remote monitoring tools
Published: November 3, 2025
Downloadable IOCs: 39

Leveraging Generative AI to Reverse Engineer XLoader

This report details how generative AI was used to accelerate the reverse engineering of XLoader malware. The researchers employed a combination of cloud-based static analysis using exported IDA data and occasional dynamic checks via MCP to rapidly unpack encrypted code, deobfuscate API calls, and d…
obfuscation
encryption
malware analysis
chatgpt
reverse engineering
xloader
generative ai
2025-11-03
ioc extraction
Published: November 3, 2025
Downloadable IOCs: 16

Operation Peek-a-Baku: APT Targets Dushanbe with Espionage Campaign

The Silent Lynx APT group has been conducting espionage campaigns targeting diplomatic entities and critical infrastructure in Central Asia, Russia, and China. Two major campaigns were identified: one focused on Russia-Azerbaijan relations and another on China-Central Asia relations. The group used…
apt
espionage
powershell
russia
china
github
reverse shell
central asia
tajikistan
2025-11-03
azerbaijan
silent loader
laplas
silentsweeper
ligolo-ng
Published: November 3, 2025
Downloadable IOCs: 33

DPRK's Playbook: HttpTroy and New BLINDINGCAN Variant

Recent investigations have uncovered two new toolsets from North Korean threat actors. Kimsuky deployed a new backdoor called HttpTroy, targeting a victim in South Korea through a VPN invoice-themed attack. The attack chain involves a dropper, a loader called MemLoad, and the HttpTroy backdoor, whi…
backdoor
obfuscation
espionage
comebacker
dprk
stealth
remote access tool
2025-11-03
blindingcan
httptroy
Published: November 3, 2025
Downloadable IOCs: 15

Certified OysterLoader: Tracking Rhysida ransomware gang activity via code-signing certificates

The Rhysida ransomware gang, formerly known as Vice Society, is conducting an ongoing malicious ad campaign to deliver OysterLoader malware. This initial access tool establishes a foothold on devices for dropping a persistent backdoor. The campaign uses Bing search engine advertisements to direct u…
ransomware
malvertising
latrodectus
initial access
code-signing
2025-11-03
microsoft trusted signing
oysterloader
Published: November 3, 2025
Downloadable IOCs: 271
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-0987

9.9
    Cb Project Ltd.Co
  • Cvland
Published: November 3, 2025

CVE-2025-8900

9.8
    Wordpress
  • Doccure Core
Published: November 3, 2025

CVE-2025-63451

9.8
    Car-Booking-System-Php
  • Car-Booking-System-Php
Published: November 3, 2025

CVE-2025-63453

9.8
    Car-Booking-System
  • Car-Booking-System
Published: November 3, 2025

CVE-2025-11953

9.8
    Facebook
  • React Native
Published: November 3, 2025

CVE-2025-12463

9.8
    Geutebruck
  • G-Cam
Published: November 3, 2025

CVE-2025-63452

9.4
    Car-Booking-System-Php
  • Car-Booking-System-Php
Published: November 3, 2025

CVE-2024-13997

9.4
    Nagios
  • Nagios Xi
Published: November 3, 2025

CVE-2025-60785

8.8
    Icescrum
  • Icescrum
Published: November 3, 2025

CVE-2025-60503

8.7
    Ultimatefosters
  • Ultimatepos
Published: November 3, 2025

CVE-2025-11761

8.5
    Hp
  • Hp Client Management Script Library
Published: November 3, 2025

CVE-2025-48396

8.3
    Eaton
  • Blss
Published: November 3, 2025

CVE-2025-50735

7.5
    Nextchat
  • Nextchat
Published: November 3, 2025

CVE-2025-12611

7.4
    Tenda
  • Ac21
Published: November 3, 2025

CVE-2025-12618

7.4
    Tenda
  • Ac8
Published: November 3, 2025

CVE-2025-12619

7.4
    Tenda
  • A15
Published: November 3, 2025

CVE-2025-12622

7.4
    Tenda
  • Ac10
Published: November 3, 2025

CVE-2025-63441

7.3
    Open Source Social Network
  • Ossn
Published: November 3, 2025

CVE-2025-12503

7.1
    Digiwin
  • Easyflow
  • Easyflow Ainet
Published: November 3, 2025

CVE-2025-48397

7.1
    Eaton
  • Application Protocol
Published: November 3, 2025

CVE-2025-10280

7.1
    Sailpoint
  • Identityiq
Published: November 3, 2025

CVE-2025-12531

7.1
    Ibm
  • Infosphere Information Server
Published: November 3, 2025

CVE-2025-34501

7.0
    Deckmate
  • Deck Mate 2
Published: November 3, 2025

CVE-2025-12606

6.9
    Itsourcecode
  • Online Loan Management System
Published: November 3, 2025

CVE-2025-12607

6.9
    Itsourcecode
  • Online Loan Management System
Published: November 3, 2025

CVE-2025-12608

6.9
    Itsourcecode
  • Online Loan Management System
Published: November 3, 2025

CVE-2025-12617

6.9
    Itsourcecode
  • Billing System
Published: November 3, 2025

CVE-2025-12642

6.9
    Lighttpd
  • Lighttpd
Published: November 3, 2025

CVE-2025-60892

6.8
    Raspberry Pi
  • Raspberry Pi Imager
Published: November 3, 2025

CVE-2025-11193

6.8
    Lenovo
  • Tablet
Published: November 3, 2025

CVE-2024-51317

6.5
    Netsurf
  • Netsurf
Published: November 3, 2025

CVE-2025-29699

6.5
    Netsurf
  • Netsurf
Published: November 3, 2025

CVE-2025-45663

6.5
    Netsurf
  • Netsurf
Published: November 3, 2025

CVE-2025-36092

6.5
    Ibm
  • Cloud Pak For Business Automation
Published: November 3, 2025

CVE-2025-63293

6.5
    Fairsys
  • Fairsys Rise
Published: November 3, 2025

CVE-2025-36172

6.4
    Ibm
  • Cloud Pak For Business Automation
  • Business Automation Workflow
Published: November 3, 2025

CVE-2025-12616

6.3
    Phpgurukul
  • News Portal
Published: November 3, 2025

CVE-2025-63446

6.1
    Water Management System
  • Water Management System
Published: November 3, 2025

CVE-2025-63447

6.1
    Vendor
  • Water Management System
Published: November 3, 2025

CVE-2025-63448

6.1
    Water Management
  • Water Management System
Published: November 3, 2025

CVE-2024-13998

6.0
    Nagios
  • Nagios Xi
Published: November 3, 2025

CVE-2025-12657

5.9
    Mongodb
  • Mongo
Published: November 3, 2025

CVE-2025-63443

5.4
    School Management System Php
  • School Management System Php
Published: November 3, 2025

CVE-2025-63449

5.4
    Water Management System
  • Water Management System
Published: November 3, 2025

CVE-2025-63450

5.4
    Car-Booking-System
  • Car-Booking-System-Php
Published: November 3, 2025

CVE-2025-50363

5.4
    Phpgurukul
  • Maid Hiring Management System
Published: November 3, 2025

CVE-2025-12612

5.3
    Campcodes
  • School Fees Payment Management System
Published: November 3, 2025

CVE-2025-12626

5.3
    Jeecg
  • Jeecgboot
Published: November 3, 2025

CVE-2025-64294

5.3
    D3wp
  • Wp Snow Effect
Published: November 3, 2025

CVE-2025-12609

5.1
    Codeastro
  • Gym Management System
Published: November 3, 2025

CVE-2025-12610

5.1
    Codeastro
  • Gym Management System
Published: November 3, 2025

CVE-2025-12614

5.1
    Sourcecodester
  • Best House Rental Management System
Published: November 3, 2025

CVE-2016-15054

5.1
    Nagios
  • Nagios Xi
Published: November 3, 2025

CVE-2021-47698

5.1
    Nagios
  • Nagios Xi
  • Nagios Core
Published: November 3, 2025

CVE-2025-36093

4.8
    Ibm
  • Cloud Pak For Business Automation
Published: November 3, 2025

CVE-2025-63442

4.6
    Php-Mysql
  • Simple User Management System
Published: November 3, 2025

CVE-2025-36091

4.3
    Ibm
  • Cloud Pak For Business Automation
Published: November 3, 2025

CVE-2025-12615

2.3
    Phpgurukul
  • News Portal
Published: November 3, 2025

CVE-2025-12623

2.3
    Fushengqian
  • Fuint
Published: November 3, 2025

CVE-2025-8558

2.3
    Proofpoint
  • Insider Threat Management
Published: November 3, 2025

CVE-2025-40107

None
    Linux
  • Kernel
Published: November 3, 2025

CVE-2025-45959

None
Published: November 3, 2025

CVE-2025-63593

None
    Grav
  • Grav Cms
Published: November 3, 2025
Click here to see more Vulnerabilities