Tag: 2025-12-20

2 Attack Reports | 24 Vulnerabilities

Attack reports

Evasive SideWinder APT Campaign Detected

A sophisticated espionage campaign targeting Indian entities has been identified, masquerading as the Income Tax Department of India. The activity is associated with the SideWinder APT group, which has evolved its toolkit to evade detection by mimicking Chinese enterprise software. The campaign use…
apt
phishing
india
dll side-loading
geofencing
cloud storage
2025-12-20
income tax department
mpgear.dll
mysetup.exe
url shorteners
Published: December 20, 2025
Downloadable IOCs: 5

Cloud Atlas activity in the first half of 2025: what changed

The Cloud Atlas APT group continues to target countries in Eastern Europe and Central Asia using phishing emails with malicious attachments exploiting CVE-2018-0802. The infection chain now includes several implants: VBShower, VBCloud, PowerShower, and CloudAtlas. New and updated components are des…
apt
phishing
CVE-2018-0802
vbcloud
vbshower
central asia
eastern europe
cloud c2
powershower
2025-12-20
cloudatlas
Published: December 20, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-13329

9.8
Published: December 20, 2025

CVE-2025-13619

9.8
Published: December 20, 2025

CVE-2025-14300

8.7
Published: December 20, 2025

CVE-2025-34290

8.5
Published: December 20, 2025

CVE-2025-7782

7.6
Published: December 20, 2025

CVE-2025-14299

7.1
Published: December 20, 2025

CVE-2025-8065

7.1
Published: December 20, 2025

CVE-2025-12581

6.1
Published: December 20, 2025

CVE-2025-13365

6.1
Published: December 20, 2025

CVE-2025-13624

6.1
Published: December 20, 2025

CVE-2025-14721

5.5
Published: December 20, 2025

CVE-2025-14734

5.4
Published: December 20, 2025

CVE-2025-14298

5.4
Published: December 20, 2025

CVE-2025-12898

5.3
Published: December 20, 2025

CVE-2025-14591

5.3
Published: December 20, 2025

CVE-2025-14633

5.3
Published: December 20, 2025

CVE-2025-12820

5.3
Published: December 20, 2025

CVE-2025-12492

5.3
Published: December 20, 2025

CVE-2025-14735

4.4
Published: December 20, 2025

CVE-2025-14164

4.3
Published: December 20, 2025

CVE-2025-14168

4.3
Published: December 20, 2025

CVE-2025-7733

4.3
Published: December 20, 2025

CVE-2025-12700

None
Published: December 20, 2025

CVE-2025-14597

None
Published: December 20, 2025
Click here to see more Vulnerabilities