Tag: 2025-12-17

8 Attack Reports | 189 Vulnerabilities

Attack reports

GachiLoader: Defeating Node.js Malware with API Tracing

A new malware distribution campaign utilizing compromised YouTube accounts to spread infostealers has been identified. The campaign employs GachiLoader, a heavily obfuscated Node.js loader, to deploy the Rhadamanthys infostealer. GachiLoader implements anti-analysis techniques and uses a novel PE i…
malware
obfuscation
rhadamanthys
infostealer
anti-analysis
node.js
youtube
2025-12-17
api tracing
gachiloader
kidkadi
pe injection
Published: December 17, 2025
Downloadable IOCs: 10

NuGet malware targets crypto wallets, OAuth tokens

ReversingLabs discovered malicious packages on NuGet targeting the crypto ecosystem. The campaign, starting in July 2025, involved 14 packages impersonating legitimate crypto-related tools. The malware aimed to steal crypto funds by redirecting transactions or exfiltrating secrets for wallet access…
cryptocurrency
supply chain attack
oauth
homoglyphs
2025-12-17
coinbase.net.api
googleads.api
netherеum.all
nuget
version bumping
wallet stealer
Published: December 17, 2025
Downloadable IOCs: 0

BlueDelta’s Persistent Campaign Against UKR.NET

Between June 2024 and April 2025, a sustained credential-harvesting campaign targeting UKR.NET users was identified, attributed to the Russian state-sponsored threat group BlueDelta. The group deployed multiple credential-harvesting pages themed as UKR.NET login portals, leveraging free web service…
phishing
ngrok
credential harvesting
russian threat actor
gru
2025-12-17
pdf lures
proxy tunneling
ukr.net
ukrainian targets
webmail compromise
Published: December 17, 2025
Downloadable IOCs: 23

UAT-9686 actively targets Cisco Secure Email Gateway and Secure Email and Web Manager

A Chinese-nexus advanced persistent threat actor, UAT-9686, is actively targeting Cisco AsyncOS Software for Secure Email Gateway and Secure Email and Web Manager. The campaign, ongoing since late November 2025, exploits non-standard configurations to execute system-level commands and deploy a pers…
backdoor
apt
chinese threat actor
email security
2025-12-17
aquapurge
aquashell
aquatunnel
cisco asyncos
log purging
reverse tunneling
Published: December 17, 2025
Downloadable IOCs: 4

Parked Domains Become Weapons with Direct Search Advertising

Parked domains are increasingly being weaponized through direct search advertising, posing significant risks to users. The investigation found that over 90% of visits to parked domains led to scams, malware, or unwanted content. Three key actors were identified: one using lookalike domains and mail…
malvertising
typosquatting
traffic distribution systems
dns abuse
2025-12-17
babar
direct search advertising
domain parking
fast flux
parked domains
tedy
Published: December 17, 2025
Downloadable IOCs: 4

From Linear to Complex: An Upgrade in RansomHouse Encryption

RansomHouse, a ransomware-as-a-service operation run by Jolly Scorpius, has undergone a significant upgrade in encryption methods. The attack chain involves operators developing tools, attackers deploying ransomware, and victims being targeted. Two key components, MrAgent and Mario, are used to com…
encryption
ransomware-as-a-service
esxi
ransomhouse
virtualization
2025-12-17
mario
mragent
Published: December 17, 2025
Downloadable IOCs: 4

A new campaign by the ForumTroll APT group

The ForumTroll APT group has launched a new targeted phishing campaign against Russian political scientists, exploiting plagiarism reports as bait. The attackers used sophisticated techniques, including a well-prepared domain and personalized emails, to deliver the Tuoni framework malware. This cam…
apt
social engineering
powershell
com hijacking
dante
russian targets
leetagent
tuoni
2025-12-17
plagiarism bait
targeted phishing
tuoni framework
Published: December 17, 2025
Downloadable IOCs: 1

BlindEagle Targets Colombian Government Agency with Caminho and DCRAT

A spear phishing campaign targeting a Colombian government agency under the Ministry of Commerce, Industry and Tourism was discovered in September 2025. The attack, attributed to BlindEagle, utilized a compromised email account within the organization to bypass security controls. The campaign emplo…
powershell
dcrat
discord
spear phishing
2025-12-17
Published: December 17, 2025
Downloadable IOCs: 24
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-44005

10.0
Published: December 17, 2025

CVE-2025-20393

10.0
    Cisco
  • Asyncos
  • Secure Email And Web Manager Virtual Appliance M100v
  • Secure Email And Web Manager Virtual Appliance M300v
  • Secure Email And Web Manager Virtual Appliance M600v
  • Secure Email Gateway Virtual Appliance C100v
  • Secure Email Gateway Virtual Appliance C300v
  • Secure Email Gateway Virtual Appliance C600v
  • Secure Email And Web Manager M170
  • Secure Email And Web Manager M190
  • Secure Email And Web Manager M195
  • Secure Email And Web Manager M380
  • Secure Email And Web Manager M390
  • Secure Email And Web Manager M390x
  • Secure Email And Web Manager M395
  • Secure Email And Web Manager M680
  • Secure Email And Web Manager M690
  • Secure Email And Web Manager M690x
  • Secure Email And Web Manager M695
  • Secure Email Gateway C195
  • Secure Email Gateway C395
  • Secure Email Gateway C695
Published: December 17, 2025

CVE-2025-62521

10.0
    Churchcrm
  • Churchcrm
Published: December 17, 2025

CVE-2025-14700

9.9
    Craftycontrol
  • Crafty Controller
Published: December 17, 2025

CVE-2025-67164

9.9
Published: December 17, 2025

CVE-2025-67781

9.9
Published: December 17, 2025

CVE-2025-68110

9.9
    Churchcrm
  • Churchcrm
Published: December 17, 2025

CVE-2025-67895

9.8
    Apache
  • Apache-Airflow-Providers-Edge3
Published: December 17, 2025

CVE-2022-23851

9.8
Published: December 17, 2025

CVE-2025-67165

9.8
Published: December 17, 2025

CVE-2025-67073

9.8
Published: December 17, 2025

CVE-2025-43428

9.8
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Visionos
Published: December 17, 2025

CVE-2025-43526

9.8
    Apple
  • Safari
  • Macos
Published: December 17, 2025

CVE-2025-67793

9.8
Published: December 17, 2025

CVE-2025-67791

9.8
    Drivelock
  • Drivelock
Published: December 17, 2025

CVE-2025-67787

9.6
Published: December 17, 2025

CVE-2025-68112

9.6
    Churchcrm
  • Churchcrm
Published: December 17, 2025

CVE-2025-59374

9.3
    Asus
  • Live Update
Published: December 17, 2025

CVE-2025-34434

9.3
    Wwbn
  • Avideo
Published: December 17, 2025

CVE-2025-67876

9.3
    Churchcrm
  • Churchcrm
Published: December 17, 2025

CVE-2025-68400

9.3
    Churchcrm
  • Churchcrm
Published: December 17, 2025

CVE-2023-53914

9.3
Published: December 17, 2025

CVE-2023-53922

9.3
Published: December 17, 2025

CVE-2023-53923

9.3
    Ulicms
  • Ulicms
Published: December 17, 2025

CVE-2025-68275

9.2
    Churchcrm
  • Churchcrm
Published: December 17, 2025

CVE-2025-68109

9.1
    Churchcrm
  • Churchcrm
Published: December 17, 2025

CVE-2025-68435

9.1
Published: December 17, 2025

CVE-2025-66395

8.8
    Churchcrm
  • Churchcrm
Published: December 17, 2025

CVE-2025-66953

8.8
Published: December 17, 2025

CVE-2025-43529

8.8
    Apple
  • Safari
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: December 17, 2025

CVE-2025-46281

8.8
    Apple
  • Macos
Published: December 17, 2025

CVE-2025-68434

8.8
    Opensourcepos
  • Open Source Point Of Sale
Published: December 17, 2025

CVE-2025-14727

8.7
Published: December 17, 2025

CVE-2025-43873

8.7
Published: December 17, 2025

CVE-2025-34435

8.7
    Wwbn
  • Avideo
Published: December 17, 2025

CVE-2025-34436

8.7
    Wwbn
  • Avideo
Published: December 17, 2025

CVE-2025-34437

8.7
    Wwbn
  • Avideo
Published: December 17, 2025

CVE-2023-53908

8.7
Published: December 17, 2025

CVE-2023-53917

8.7
Published: December 17, 2025

CVE-2023-53921

8.7
Published: December 17, 2025

CVE-2023-53924

8.7
    Ulicms
  • Ulicms
Published: December 17, 2025

CVE-2023-53926

8.7
Published: December 17, 2025

CVE-2023-53933

8.7
Published: December 17, 2025

CVE-2025-14305

8.5
Published: December 17, 2025

CVE-2025-53000

8.5
Published: December 17, 2025

CVE-2025-67875

8.5
    Churchcrm
  • Churchcrm
Published: December 17, 2025

CVE-2023-53912

8.5
Published: December 17, 2025

CVE-2025-53524

8.4
Published: December 17, 2025

CVE-2025-14096

8.4
Published: December 17, 2025

CVE-2025-66397

8.3
    Churchcrm
  • Churchcrm
Published: December 17, 2025

CVE-2025-68147

8.1
    Opensourcepos
  • Open Source Point Of Sale
Published: December 17, 2025

CVE-2025-53398

7.8
Published: December 17, 2025

CVE-2025-53919

7.8
Published: December 17, 2025

CVE-2024-46060

7.8
Published: December 17, 2025

CVE-2024-46062

7.8
Published: December 17, 2025

CVE-2025-46291

7.8
    Apple
  • Macos
Published: December 17, 2025

CVE-2025-67792

7.8
    Drivelock
  • Drivelock
Published: December 17, 2025

CVE-2025-68432

7.7
Published: December 17, 2025

CVE-2025-68433

7.7
Published: December 17, 2025

CVE-2025-66029

7.6
Published: December 17, 2025

CVE-2025-11924

7.5
Published: December 17, 2025

CVE-2024-29371

7.5
Published: December 17, 2025

CVE-2025-67171

7.5
    Ritecms
  • Ritecms
Published: December 17, 2025

CVE-2025-67174

7.5
    Ritecms
  • Ritecms
Published: December 17, 2025

CVE-2025-67493

7.5
Published: December 17, 2025

CVE-2025-67790

7.5
    Drivelock
  • Drivelock
Published: December 17, 2025

CVE-2025-67877

7.4
    Churchcrm
  • Churchcrm
Published: December 17, 2025

CVE-2025-67285

7.3
Published: December 17, 2025

CVE-2025-68429

7.3
Published: December 17, 2025

CVE-2025-14097

7.2
Published: December 17, 2025

CVE-2025-66921

7.2
    Opensourcepos
  • Open Source Point Of Sale
Published: December 17, 2025

CVE-2025-66923

7.2
    Opensourcepos
  • Open Source Point Of Sale
Published: December 17, 2025

CVE-2025-67172

7.2
    Ritecms
  • Ritecms
Published: December 17, 2025

CVE-2025-66396

7.2
    Churchcrm
  • Churchcrm
Published: December 17, 2025

CVE-2025-68111

7.2
    Churchcrm
  • Churchcrm
Published: December 17, 2025

CVE-2025-14701

7.1
    Craftycontrol
  • Crafty Controller
Published: December 17, 2025

CVE-2025-14101

7.1
Published: December 17, 2025

CVE-2025-61736

7.1
Published: December 17, 2025

CVE-2025-65203

7.1
Published: December 17, 2025

CVE-2023-53907

7.1
Published: December 17, 2025

CVE-2023-53930

7.1
Published: December 17, 2025

CVE-2025-14302

7.0
Published: December 17, 2025

CVE-2025-14303

7.0
Published: December 17, 2025

CVE-2025-14304

7.0
Published: December 17, 2025

CVE-2025-11901

7.0
Published: December 17, 2025

CVE-2025-34441

6.9
    Wwbn
  • Avideo
Published: December 17, 2025

CVE-2025-34442

6.9
    Wwbn
  • Avideo
Published: December 17, 2025

CVE-2025-14832

6.9
    Facebook-Adrianmercurio
  • Online Cake Ordering System
Published: December 17, 2025

CVE-2025-14833

6.9
    Anisha
  • Online Appointment Booking System
Published: December 17, 2025

CVE-2025-14095

6.8
Published: December 17, 2025

CVE-2025-67173

6.8
    Ritecms
  • Ritecms
Published: December 17, 2025

CVE-2025-68129

6.8
Published: December 17, 2025

CVE-2025-65855

6.6
Published: December 17, 2025

CVE-2025-68118

6.6
Published: December 17, 2025

CVE-2025-13880

6.5
Published: December 17, 2025

CVE-2025-14817

6.5
Published: December 17, 2025

CVE-2025-26381

6.5
Published: December 17, 2025

CVE-2025-12689

6.5
Published: December 17, 2025

CVE-2025-67074

6.5
Published: December 17, 2025

CVE-2025-68143

6.5
Published: December 17, 2025

CVE-2025-13977

6.4
Published: December 17, 2025

CVE-2025-14385

6.4
Published: December 17, 2025

CVE-2025-13217

6.4
Published: December 17, 2025

CVE-2025-13537

6.4
Published: December 17, 2025

CVE-2025-68145

6.4
Published: December 17, 2025

CVE-2025-14347

6.3
Published: December 17, 2025

CVE-2025-68144

6.3
Published: December 17, 2025

CVE-2025-68401

6.2
    Churchcrm
  • Churchcrm
Published: December 17, 2025

CVE-2023-53905

6.2
Published: December 17, 2025

CVE-2023-53913

6.2
Published: December 17, 2025

CVE-2023-53929

6.2
Published: December 17, 2025

CVE-2025-13861

6.1
Published: December 17, 2025

CVE-2025-14154

6.1
Published: December 17, 2025

CVE-2025-66924

6.1
    Opensourcepos
  • Open Source Point Of Sale
Published: December 17, 2025

CVE-2025-67170

6.1
    Ritecms
  • Ritecms
Published: December 17, 2025

CVE-2025-65233

6.1
Published: December 17, 2025

CVE-2025-67794

6.1
    Drivelock
  • Drivelock
Published: December 17, 2025

CVE-2025-14759

6.0
Published: December 17, 2025

CVE-2025-14760

6.0
Published: December 17, 2025

CVE-2025-14761

6.0
Published: December 17, 2025

CVE-2025-14762

6.0
Published: December 17, 2025

CVE-2025-14763

6.0
Published: December 17, 2025

CVE-2025-14764

6.0
Published: December 17, 2025

CVE-2025-43475

5.5
    Apple
  • Ipados
  • Iphone Os
Published: December 17, 2025

CVE-2025-43514

5.5
    Apple
  • Macos
Published: December 17, 2025

CVE-2025-46278

5.5
    Apple
  • Macos
Published: December 17, 2025

CVE-2025-46282

5.5
    Apple
  • Safari
  • Macos
Published: December 17, 2025

CVE-2025-46283

5.5
    Apple
  • Macos
Published: December 17, 2025

CVE-2025-46288

5.5
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Visionos
  • Watchos
Published: December 17, 2025

CVE-2025-46292

5.5
    Apple
  • Ipados
  • Iphone Os
Published: December 17, 2025

CVE-2025-14061

5.3
Published: December 17, 2025

CVE-2024-29370

5.3
Published: December 17, 2025

CVE-2025-67168

5.3
    Ritecms
  • Ritecms
Published: December 17, 2025

CVE-2025-34438

5.3
    Wwbn
  • Avideo
Published: December 17, 2025

CVE-2025-67789

5.3
    Drivelock
  • Drivelock
Published: December 17, 2025

CVE-2025-14834

5.3
Published: December 17, 2025

CVE-2025-11009

5.1
Published: December 17, 2025

CVE-2025-64700

5.1
Published: December 17, 2025

CVE-2023-53904

5.1
Published: December 17, 2025

CVE-2023-53906

5.1
Published: December 17, 2025

CVE-2023-53909

5.1
Published: December 17, 2025

CVE-2023-53910

5.1
Published: December 17, 2025

CVE-2023-53911

5.1
Published: December 17, 2025

CVE-2023-53915

5.1
Published: December 17, 2025

CVE-2023-53916

5.1
Published: December 17, 2025

CVE-2023-53918

5.1
Published: December 17, 2025

CVE-2023-53919

5.1
Published: December 17, 2025

CVE-2023-53920

5.1
Published: December 17, 2025

CVE-2023-53925

5.1
    Ulicms
  • Ulicms
Published: December 17, 2025

CVE-2023-53927

5.1
Published: December 17, 2025

CVE-2023-53928

5.1
Published: December 17, 2025

CVE-2023-53931

5.1
Published: December 17, 2025

CVE-2023-53932

5.1
Published: December 17, 2025

CVE-2025-14836

5.1
Published: December 17, 2025

CVE-2025-12496

4.9
Published: December 17, 2025

CVE-2025-14801

4.8
Published: December 17, 2025

CVE-2025-11775

4.8
Published: December 17, 2025

CVE-2025-34439

4.8
    Wwbn
  • Avideo
Published: December 17, 2025

CVE-2025-34440

4.8
    Wwbn
  • Avideo
Published: December 17, 2025

CVE-2025-67873

4.8
Published: December 17, 2025

CVE-2025-68114

4.8
Published: December 17, 2025

CVE-2025-59849

4.7
Published: December 17, 2025

CVE-2025-11369

4.3
Published: December 17, 2025

CVE-2025-13750

4.3
Published: December 17, 2025

CVE-2025-14399

4.3
Published: December 17, 2025

CVE-2025-62190

4.3
Published: December 17, 2025

CVE-2025-13324

4.3
Published: December 17, 2025

CVE-2025-14081

4.3
Published: December 17, 2025

CVE-2025-43501

4.3
    Apple
  • Safari
  • Ipados
  • Iphone Os
  • Macos
  • Visionos
Published: December 17, 2025

CVE-2025-43535

4.3
    Apple
  • Safari
  • Ipados
  • Iphone Os
  • Macos
  • Visionos
Published: December 17, 2025

CVE-2025-43536

4.3
    Apple
  • Safari
  • Ipados
  • Iphone Os
  • Macos
Published: December 17, 2025

CVE-2025-43541

4.3
    Apple
  • Safari
  • Ipados
  • Iphone Os
  • Macos
  • Visionos
Published: December 17, 2025

CVE-2025-13326

3.9
    Mattermost
  • Mattermost Desktop
Published: December 17, 2025

CVE-2025-55254

3.7
Published: December 17, 2025

CVE-2025-43533

3.5
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: December 17, 2025

CVE-2025-13321

3.3
    Mattermost
  • Mattermost Desktop
Published: December 17, 2025

CVE-2025-46277

3.3
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Watchos
Published: December 17, 2025

CVE-2025-46279

3.3
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: December 17, 2025

CVE-2025-62690

3.1
Published: December 17, 2025

CVE-2025-43531

3.1
    Apple
  • Safari
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: December 17, 2025

CVE-2025-13352

3.0
Published: December 17, 2025

CVE-2025-65185

2.8
Published: December 17, 2025

CVE-2025-68399

2.0
    Churchcrm
  • Churchcrm
Published: December 17, 2025

CVE-2025-66646

1.7
Published: December 17, 2025

CVE-2025-66647

1.7
Published: December 17, 2025

CVE-2025-14266

0.6
Published: December 17, 2025

CVE-2025-14828

None
Published: December 17, 2025

CVE-2025-14268

None
Published: December 17, 2025

CVE-2025-14319

None
Published: December 17, 2025
Click here to see more Vulnerabilities