Tag: 2025-11-03

5 Attack Reports | 63 Vulnerabilities

Attack reports

Remote access, real cargo: cybercriminals targeting trucking and logistics

Cybercriminals are targeting trucking and logistics companies to steal cargo freight through elaborate attack chains. They compromise companies and use their access to bid on cargo shipments, which they then steal and sell. The threat actors typically deliver remote monitoring and management (RMM) …
screenconnect
phishing
social engineering
supply chain
lumma stealer
cybercrime
danabot
netsupport
stealc
simplehelp
fleetdeck
n-able
pdq connect
logistics
2025-11-03
cargo theft
logmein resolve
trucking
remote monitoring tools
Published: November 3, 2025
Downloadable IOCs: 39

Leveraging Generative AI to Reverse Engineer XLoader

This report details how generative AI was used to accelerate the reverse engineering of XLoader malware. The researchers employed a combination of cloud-based static analysis using exported IDA data and occasional dynamic checks via MCP to rapidly unpack encrypted code, deobfuscate API calls, and d…
obfuscation
encryption
malware analysis
chatgpt
reverse engineering
xloader
generative ai
2025-11-03
ioc extraction
Published: November 3, 2025
Downloadable IOCs: 16

Operation Peek-a-Baku: APT Targets Dushanbe with Espionage Campaign

The Silent Lynx APT group has been conducting espionage campaigns targeting diplomatic entities and critical infrastructure in Central Asia, Russia, and China. Two major campaigns were identified: one focused on Russia-Azerbaijan relations and another on China-Central Asia relations. The group used…
apt
espionage
powershell
russia
china
github
reverse shell
central asia
tajikistan
2025-11-03
azerbaijan
silent loader
laplas
silentsweeper
ligolo-ng
Published: November 3, 2025
Downloadable IOCs: 33

DPRK's Playbook: HttpTroy and New BLINDINGCAN Variant

Recent investigations have uncovered two new toolsets from North Korean threat actors. Kimsuky deployed a new backdoor called HttpTroy, targeting a victim in South Korea through a VPN invoice-themed attack. The attack chain involves a dropper, a loader called MemLoad, and the HttpTroy backdoor, whi…
backdoor
obfuscation
espionage
comebacker
dprk
stealth
remote access tool
2025-11-03
blindingcan
httptroy
Published: November 3, 2025
Downloadable IOCs: 15

Certified OysterLoader: Tracking Rhysida ransomware gang activity via code-signing certificates

The Rhysida ransomware gang, formerly known as Vice Society, is conducting an ongoing malicious ad campaign to deliver OysterLoader malware. This initial access tool establishes a foothold on devices for dropping a persistent backdoor. The campaign uses Bing search engine advertisements to direct u…
ransomware
malvertising
latrodectus
initial access
code-signing
2025-11-03
microsoft trusted signing
oysterloader
Published: November 3, 2025
Downloadable IOCs: 271
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-0987

9.9
    cvland
    cvland
Published: November 3, 2025

CVE-2025-8900

9.8
    doccure_core
Published: November 3, 2025

CVE-2025-63451

9.8
    Car-Booking-System-Php Project
  • Car-Booking-System-Php
Published: November 3, 2025

CVE-2025-63453

9.8
    Car-Booking-System-Php Project
  • Car-Booking-System-Php
Published: November 3, 2025

CVE-2025-11953

9.8
    react_native
Published: November 3, 2025

CVE-2025-12463

9.8
    g-cam
Published: November 3, 2025

CVE-2025-63452

9.4
    Car-Booking-System-Php Project
  • Car-Booking-System-Php
Published: November 3, 2025

CVE-2024-13997

9.4
    Nagios
  • Nagios Xi
Published: November 3, 2025

CVE-2025-60785

8.8
    icescrum
Published: November 3, 2025

CVE-2025-60503

8.7
    ultimatepos
Published: November 3, 2025

CVE-2025-11761

8.5
    hp_client_management_script_library
Published: November 3, 2025

CVE-2025-48396

8.3
    blss
Published: November 3, 2025

CVE-2025-50735

7.5
    Nextchat
  • Nextchat
Published: November 3, 2025

CVE-2025-12611

7.4
    Tenda
  • Ac21 Firmware
  • Ac21
Published: November 3, 2025

CVE-2025-12618

7.4
    Tenda
  • Ac8 Firmware
  • Ac8
Published: November 3, 2025

CVE-2025-12619

7.4
    Tenda
  • A15 Firmware
  • A15
Published: November 3, 2025

CVE-2025-12622

7.4
    Tenda
  • Ac10 Firmware
  • Ac10
Published: November 3, 2025

CVE-2025-63441

7.3
    ossn
Published: November 3, 2025

CVE-2025-12503

7.1
    easyflow_ainet
    easyflow
Published: November 3, 2025

CVE-2025-48397

7.1
    application_protocol
Published: November 3, 2025

CVE-2025-10280

7.1
    Sailpoint
  • Identityiq
Published: November 3, 2025

CVE-2025-12531

7.1
    Ibm
  • Infosphere Information Server
Published: November 3, 2025

CVE-2025-34501

7.0
    deck_mate_2
Published: November 3, 2025

CVE-2025-12606

6.9
    Angeljudesuarez
  • Online Loan Management System
Published: November 3, 2025

CVE-2025-12607

6.9
    Angeljudesuarez
  • Online Loan Management System
Published: November 3, 2025

CVE-2025-12608

6.9
    Angeljudesuarez
  • Online Loan Management System
Published: November 3, 2025

CVE-2025-12617

6.9
    Angeljudesuarez
  • Billing System
Published: November 3, 2025

CVE-2025-12642

6.9
    Lighttpd
  • Lighttpd
Published: November 3, 2025

CVE-2025-60892

6.8
    raspberry_pi_imager
Published: November 3, 2025

CVE-2025-11193

6.8
    tablet
Published: November 3, 2025

CVE-2024-51317

6.5
    Netsurf-Browser
  • Netsurf
Published: November 3, 2025

CVE-2025-29699

6.5
    Netsurf-Browser
  • Netsurf
Published: November 3, 2025

CVE-2025-45663

6.5
    Netsurf-Browser
  • Netsurf
Published: November 3, 2025

CVE-2025-36092

6.5
    Ibm
  • Cloud Pak For Business Automation
Published: November 3, 2025

CVE-2025-63293

6.5
    Fairsketch
  • Rise Ultimate Project Manager
Published: November 3, 2025

CVE-2025-36172

6.4
    Ibm
  • Cloud Pak For Business Automation
Published: November 3, 2025

CVE-2025-12616

6.3
    Phpgurukul
  • News Portal
Published: November 3, 2025

CVE-2025-63446

6.1
    Water Management System Project
  • Water Management System
Published: November 3, 2025

CVE-2025-63447

6.1
    Water Management System Project
  • Water Management System
Published: November 3, 2025

CVE-2025-63448

6.1
    Water Management System Project
  • Water Management System
Published: November 3, 2025

CVE-2025-63593

6.1
    Getgrav
  • Grav
Published: November 3, 2025

CVE-2024-13998

6.0
    Nagios
  • Nagios Xi
Published: November 3, 2025

CVE-2025-12657

5.9
    Mongodb
  • Mongodb
Published: November 3, 2025

CVE-2025-63443

5.4
    school_management_system_php
Published: November 3, 2025

CVE-2025-63449

5.4
    Water Management System Project
  • Water Management System
Published: November 3, 2025

CVE-2025-63450

5.4
    Car-Booking-System-Php Project
  • Car-Booking-System-Php
Published: November 3, 2025

CVE-2025-50363

5.4
    Phpgurukul
  • Maid Hiring Management System
Published: November 3, 2025

CVE-2025-12612

5.3
    Campcodes
  • School Fees Payment Management System
Published: November 3, 2025

CVE-2025-12626

5.3
    jeecgboot
Published: November 3, 2025

CVE-2025-64294

5.3
    wp_snow_effect
Published: November 3, 2025

CVE-2025-12609

5.1
    Codeastro
  • Gym Management System
Published: November 3, 2025

CVE-2025-12610

5.1
    Codeastro
  • Gym Management System
Published: November 3, 2025

CVE-2025-12614

5.1
    Mayurik
  • Best House Rental Management System
Published: November 3, 2025

CVE-2021-47698

5.1
    Nagios
  • Nagios Xi
Published: November 3, 2025

CVE-2025-36093

4.8
    Ibm
  • Cloud Pak For Business Automation
Published: November 3, 2025

CVE-2025-63442

4.6
    Nababur
  • Simple-User-Management-System
Published: November 3, 2025

CVE-2025-36091

4.3
    Ibm
  • Cloud Pak For Business Automation
Published: November 3, 2025

CVE-2025-12615

2.3
    Phpgurukul
  • News Portal
Published: November 3, 2025

CVE-2025-12623

2.3
    fuint
Published: November 3, 2025

CVE-2025-8558

2.3
    Proofpoint
  • Insider Threat Management Server
Published: November 3, 2025

CVE-2025-40107

None
    kernel
Published: November 3, 2025

CVE-2025-45959

None
Published: November 3, 2025

CVE-2016-15054

None
    nagios_xi
Published: November 3, 2025
Click here to see more Vulnerabilities