Tag: 2026-02-09

7 Attack Reports | 163 Vulnerabilities

Attack reports

Cryptocurrency Sector Targeted with New Tooling and AI-Enabled Social Engineering

North Korean threat actor UNC1069 has evolved its tactics to target the cryptocurrency and decentralized finance sectors. In a recent intrusion, they deployed seven unique malware families, including new tools SILENCELIFT, DEEPBREATH, and CHROMEPUSH, designed to capture host and victim data. The at…
malware
social engineering
north korea
cryptocurrency
macos
ai
web3
2026-02-09
chromepush
deepbreath
hiddencall
hypercall
silencelift
sugarloader
waveshaper
Published: February 9, 2026
Downloadable IOCs: 15

UNC1069 Targets Cryptocurrency Sector with New Tooling and AI-Enabled Social Engineering

North Korean threat actor UNC1069 has evolved its tactics to target the cryptocurrency and decentralized finance sectors. In a recent intrusion, they deployed seven unique malware families, including new tools SILENCELIFT, DEEPBREATH, and CHROMEPUSH, designed to capture host and victim data. The at…
malware
social engineering
north korea
cryptocurrency
macos
ai
web3
2026-02-09
chromepush
deepbreath
hiddencall
hypercall
silencelift
sugarloader
waveshaper
Published: February 9, 2026
Downloadable IOCs: 15

Technical Analysis of GuLoader Obfuscation Techniques

GuLoader, a malware downloader active since 2019, primarily delivers RATs and information stealers. It employs sophisticated anti-analysis techniques, including polymorphic code for dynamic constant construction and complex exception-based control flow obfuscation. The malware has evolved to handle…
obfuscation
anti-analysis
guloader
downloader
2026-02-09
cloudeye
exception-handling
payload-decryption
polymorphic-code
string-encryption
Published: February 9, 2026
Downloadable IOCs: 6

Investigation on the EmEditor Supply Chain Cyberattack

A recent supply chain attack targeting EmEditor users has been uncovered, involving watering hole tactics. The investigation reveals multiple domains masquerading as EmEditor-related sites, all registered through NameSilo LLC in December 2025. The domains resolve to various IP addresses, with some …
powershell
command and control
watering hole
supply chain attack
domain masquerading
emeditor
2026-02-09
Published: February 9, 2026
Downloadable IOCs: 4

A security alert regarding APT-C-28 (ScarCruft) using MiradorShell to launch a cyberattack.

A recent investigation reveals that the APT-C-28 (ScarCruft) group has expanded its targets to include the cryptocurrency industry. The group employs sophisticated phishing tactics, using LNK files disguised as PDFs to lure victims with investment proposals ranging from $1-3 million. Upon execution…
backdoor
phishing
scarcruft
2026-02-09
miradorshell
Published: February 9, 2026
Downloadable IOCs: 4

Tenant from Hell: Prometei's Unauthorized Stay in Your Windows Server

eSentire's Threat Response Unit detected Prometei botnet activity on a customer's Windows Server in the Construction industry. Prometei, a Russian-origin botnet active since 2016, features remote control, credential harvesting, crypto-mining, lateral movement, and C2 communication over clearweb and…
botnet
prometei
2026-02-09
crypto-mining
Published: February 9, 2026
Linked vulnerabilities : CVE-2025-40551 (CVSS 9.8), CVE-2026-1281 (CVSS 9.8), CVE-2026-1340 (CVSS 9.8)
Downloadable IOCs: 16

Active Exploitation of SolarWinds Web Help Desk (CVE-2025-26399)

Threat actors are actively exploiting a vulnerability in SolarWinds Web Help Desk, targeting organizations using versions prior to 12.8.7 HF1. The attack chain involves deploying Zoho ManageEngine RMM agents, Velociraptor for command and control, and Cloudflare tunnels for persistence. Attackers us…
cloudflare
CVE-2025-26399
velociraptor
CVE-2025-40536
CVE-2025-40551
2026-02-09
elastic cloud
solarwinds
web help desk
Published: February 9, 2026
Linked vulnerabilities : CVE-2025-26399 (CVSS 9.8), CVE-2025-40536 (CVSS 8.1), CVE-2025-40551 (CVSS 9.8)
Downloadable IOCs: 5
Click here to see more Attack Reports

Vulnerabilities

CVE-2026-25885

10.0
    Polarlearn
  • Polarlearn
Published: February 9, 2026

CVE-2026-25893

10.0
    Fuxa
  • Fuxa
Published: February 9, 2026

CVE-2026-1868

9.9
    Gitlab
  • Gitlab Ai Gateway
Published: February 9, 2026

CVE-2026-22903

9.8
    Lighttpd
  • Lighttpd
Published: February 9, 2026

CVE-2026-22904

9.8
    *
  • *
Published: February 9, 2026

CVE-2026-22906

9.8
    *
  • *
Published: February 9, 2026

CVE-2025-6830

9.8
    Xpoda
  • Xpoda Studio
Published: February 9, 2026

CVE-2026-25894

9.5
    Fuxa
  • Fuxa
Published: February 9, 2026

CVE-2026-25895

9.5
    Fuxa
  • Fuxa
Published: February 9, 2026

CVE-2026-25938

9.5
    Fuxa
  • Fuxa
Published: February 9, 2026

CVE-2026-2234

9.3
    Hgiga
  • C&Cm@Il
Published: February 9, 2026

CVE-2026-25812

9.3
    Placipy
  • Placipy
Published: February 9, 2026

CVE-2026-25814

9.3
    Placipy
  • Placipy
Published: February 9, 2026

CVE-2026-25875

9.3
    *
  • Placipy
Published: February 9, 2026

CVE-2026-25939

9.3
    Fuxa
  • Fuxa
Published: February 9, 2026

CVE-2026-1615

9.2
    Jsonpath
  • Jsonpath
Published: February 9, 2026

CVE-2025-66630

9.2
    Fiber
  • Fiber
Published: February 9, 2026

CVE-2026-25848

9.1
    Jetbrains
  • Hub
Published: February 9, 2026

CVE-2026-25057

9.1
    Markus
  • Markus
Published: February 9, 2026

CVE-2026-25881

9.0
    Github
  • Sandboxjs
Published: February 9, 2026

CVE-2025-66600

8.8
    Yokogawa
  • Fast Tools
Published: February 9, 2026

CVE-2025-66597

8.8
    Yokogawa
  • Fast Tools
Published: February 9, 2026

CVE-2025-10465

8.8
    Birtech
  • Sensaway
Published: February 9, 2026

CVE-2026-1486

8.8
    Redhat
  • Keycloak
Published: February 9, 2026

CVE-2026-25761

8.8
    Github
  • Super-Linter
Published: February 9, 2026

CVE-2026-25807

8.8
    Zai Shell
  • Zai Shell
Published: February 9, 2026

CVE-2025-66608

8.7
    Yokogawa
  • Fast Tools
Published: February 9, 2026

CVE-2026-2236

8.7
    Hgiga
  • C&Cm@Il
Published: February 9, 2026

CVE-2026-24677

8.7
    Freerdp
  • Freerdp
Published: February 9, 2026

CVE-2026-24678

8.7
    Freerdp
  • Freerdp
Published: February 9, 2026

CVE-2026-24679

8.7
    Freerdp
  • Freerdp
Published: February 9, 2026

CVE-2026-24680

8.7
    Freerdp
  • Freerdp
Published: February 9, 2026

CVE-2026-24681

8.7
    Freerdp
  • Freerdp
Published: February 9, 2026

CVE-2026-24682

8.7
    Freerdp
  • Freerdp
Published: February 9, 2026

CVE-2026-24683

8.7
    Freerdp
  • Freerdp
Published: February 9, 2026

CVE-2026-24684

8.7
    Freerdp
  • Freerdp
Published: February 9, 2026

CVE-2026-25495

8.7
    Craftcms
  • Craft
Published: February 9, 2026

CVE-2026-25813

8.7
    Placipy
  • Placipy
Published: February 9, 2026

CVE-2026-25923

8.7
    My Little Forum
  • My Little Forum
    Smarty
    Php
Published: February 9, 2026

CVE-2025-7799

8.6
    Zirve Information Technologies
  • E-Taxpayer Accounting Website
Published: February 9, 2026

CVE-2026-25497

8.6
    Craft
  • Craft
Published: February 9, 2026

CVE-2026-25498

8.6
    Craft
  • Craft Cms
Published: February 9, 2026

CVE-2026-25951

8.6
    Fuxa
  • Fuxa
Published: February 9, 2026

CVE-2026-0870

8.5
    Gigabyte
  • Macrohub
Published: February 9, 2026

CVE-2026-24466

8.4
    Oki Electric Industry
  • Product
    Ricoh
    Murata Machinery
Published: February 9, 2026

CVE-2026-25847

8.2
    Jetbrains
  • Pycharm
Published: February 9, 2026

CVE-2025-59023

8.2
    Open-Xchange
  • Recursor
Published: February 9, 2026

CVE-2026-1529

8.1
    Redhat
  • Keycloak
Published: February 9, 2026

CVE-2026-25890

8.1
    File Browser
  • File Browser
Published: February 9, 2026

CVE-2026-25880

7.8
    Sumatrapdf
  • Sumatrapdf
Published: February 9, 2026

CVE-2026-25925

7.8
    Powerdocu
  • Powerdocu
Published: February 9, 2026

CVE-2025-15319

7.8
    Tanium
  • Endpoint Configuration Toolset Solution
Published: February 9, 2026

CVE-2026-25931

7.8
    Github
  • Vscode Spell Checker
Published: February 9, 2026

CVE-2026-24491

7.7
    Freerdp
  • Freerdp
Published: February 9, 2026

CVE-2026-24675

7.7
    Freerdp
  • Freerdp
Published: February 9, 2026

CVE-2026-24676

7.7
    Freerdp
  • Freerdp
Published: February 9, 2026

CVE-2026-25958

7.7
    Cube
  • Cube
Published: February 9, 2026

CVE-2026-22905

7.5
    *
  • Cgi
Published: February 9, 2026

CVE-2026-25231

7.5
    Filerise
  • Filerise
Published: February 9, 2026

CVE-2026-25639

7.5
    Axios
  • Axios
Published: February 9, 2026

CVE-2026-25791

7.5
    Sliver
  • Sliver
Published: February 9, 2026

CVE-2026-25808

7.5
    Hollo
  • Hollo
Published: February 9, 2026

CVE-2026-25892

7.5
    Adminer
  • Adminer
Published: February 9, 2026

CVE-2026-25961

7.5
    Sumatrapdf
  • Sumatrapdf
Published: February 9, 2026

CVE-2026-2202

7.4
    Tenda
  • Ac8 Firmware
  • Ac8
Published: February 9, 2026

CVE-2026-2203

7.4
    Tenda
  • Ac8 Firmware
  • Ac8
Published: February 9, 2026

CVE-2026-25478

7.4
    Litestar
  • Litestar
Published: February 9, 2026

CVE-2026-2210

7.3
    D-Link
  • Dir-823x
Published: February 9, 2026

CVE-2025-10463

7.3
    Birtech Information Technologies
  • Senseway
Published: February 9, 2026

CVE-2025-66598

7.1
    Yokogawa
  • Fast Tools
Published: February 9, 2026

CVE-2026-2235

7.1
    Hgiga
  • C&Cm@Il
Published: February 9, 2026

CVE-2026-2195

6.9
    Fabian
  • Online Reviewer System
Published: February 9, 2026

CVE-2026-2196

6.9
    Fabian
  • Online Reviewer System
Published: February 9, 2026

CVE-2026-2197

6.9
    Fabian
  • Online Reviewer System
Published: February 9, 2026

CVE-2026-2198

6.9
    Fabian
  • Online Reviewer System
Published: February 9, 2026

CVE-2026-2199

6.9
    Fabian
  • Online Reviewer System
Published: February 9, 2026

CVE-2025-66599

6.9
    Yokogawa
  • Fast Tools
Published: February 9, 2026

CVE-2025-66602

6.9
    Yokogawa
  • Fast Tools
Published: February 9, 2026

CVE-2026-2211

6.9
    Fabian
  • Online Music Site
Published: February 9, 2026

CVE-2026-2212

6.9
    Fabian
  • Online Music Site
Published: February 9, 2026

CVE-2025-66594

6.9
    Yokogawa
  • Fast Tools
Published: February 9, 2026

CVE-2025-66596

6.9
    Yokogawa
  • Fast Tools
Published: February 9, 2026

CVE-2026-2217

6.9
    Admerc
  • Event Management System
Published: February 9, 2026

CVE-2026-2220

6.9
    Fabian
  • Online Reviewer System
Published: February 9, 2026

CVE-2026-2221

6.9
    Fabian
  • Online Reviewer System
Published: February 9, 2026

CVE-2026-2223

6.9
    Fabian
  • Online Reviewer System
Published: February 9, 2026

CVE-2026-2225

6.9
    Itsourcecode
  • News Portal
Published: February 9, 2026

CVE-2026-23948

6.9
    Freerdp
  • Freerdp
Published: February 9, 2026

CVE-2026-25493

6.9
    Craft
  • Craft
Published: February 9, 2026

CVE-2026-25494

6.9
    Craft
  • Craft
Published: February 9, 2026

CVE-2026-25878

6.9
    Shopware
  • Adminer
Published: February 9, 2026

CVE-2025-7708

6.8
    Atlas Educational Software
  • K12net
Published: February 9, 2026

CVE-2026-24777

6.7
    Openproject
  • Openproject
Published: February 9, 2026

CVE-2025-15315

6.7
    Tanium
  • Tanium Module Server
Published: February 9, 2026

CVE-2025-15316

6.7
    Tanium
  • Tanium Server
Published: February 9, 2026

CVE-2026-21419

6.6
    Dell
  • Display And Peripheral Manager
Published: February 9, 2026

CVE-2026-22922

6.5
    Apache
  • Airflow
Published: February 9, 2026

CVE-2026-24098

6.5
    Apache
  • Airflow
Published: February 9, 2026

CVE-2026-25846

6.5
    Jetbrains
  • Youtrack
Published: February 9, 2026

CVE-2025-10464

6.5
    Birtech
  • Senseway
Published: February 9, 2026

CVE-2025-59024

6.5
    Open-Xchange
  • Recursor
Published: February 9, 2026

CVE-2026-24900

6.5
    Markus
  • Markus
Published: February 9, 2026

CVE-2026-25479

6.5
    Litestar
  • Litestar
Published: February 9, 2026

CVE-2026-25480

6.5
    Litestar
  • Litestar
Published: February 9, 2026

CVE-2025-15317

6.5
    Tanium
  • Tanium Server
Published: February 9, 2026

CVE-2026-25957

6.5
    Cube
  • Cube
Published: February 9, 2026

CVE-2025-66601

6.3
    Yokogawa
  • Fast Tools
Published: February 9, 2026

CVE-2025-66607

6.3
    Yokogawa
  • Fast Tools
Published: February 9, 2026

CVE-2025-66595

6.3
    Yokogawa
  • Fast Tools
Published: February 9, 2026

CVE-2026-2215

6.3
    Rachelos
  • We-Mp-Rss
Published: February 9, 2026

CVE-2026-25598

6.3
    Github
  • Harden-Runner
Published: February 9, 2026

CVE-2026-25918

5.9
    Unity
  • Unity-Cli
Published: February 9, 2026

CVE-2026-25904

5.8
    Pydantic
  • Mcp-Run-Python
Published: February 9, 2026

CVE-2026-25905

5.8
    Jfrog
  • Mcp-Run-Python
Published: February 9, 2026

CVE-2026-25528

5.8
    Langsmith
  • Langsmith Python Sdk
  • Langsmith Javascript Sdk
Published: February 9, 2026

CVE-2026-25740

5.8
    Chrome
  • Browser
Published: February 9, 2026

CVE-2026-25765

5.8
    Faraday
  • Faraday
Published: February 9, 2026

CVE-2026-22613

5.7
    Eaton
  • Network M3
Published: February 9, 2026

CVE-2026-25920

5.5
    Sumatrapdf
  • Sumatrapdf
Published: February 9, 2026

CVE-2025-15318

5.5
    Tanium
  • Endpoint Configuration Toolset Solution
Published: February 9, 2026

CVE-2026-0632

5.4
    Fluent
  • Fluent Forms Pro Add On Pack
Published: February 9, 2026

CVE-2025-14778

5.4
    Redhat
  • Keycloak
Published: February 9, 2026

CVE-2026-25889

5.4
    File Browser
  • File Browser
Published: February 9, 2026

CVE-2026-2194

5.3
    D-Link
  • Di-7100g C1
Published: February 9, 2026

CVE-2026-2216

5.3
    Rachelos
  • We Rss
Published: February 9, 2026

CVE-2026-2218

5.3
    D-Link
  • Dcs-933l
Published: February 9, 2026

CVE-2026-23903

5.3
    Apache
  • Shiro
Published: February 9, 2026

CVE-2025-14831

5.3
    Gnu
  • Gnutls
Published: February 9, 2026

CVE-2026-0398

5.3
    Open-Xchange
  • Recursor
Published: February 9, 2026

CVE-2026-24027

5.3
    Open-Xchange
  • Crafted Zones
Published: February 9, 2026

CVE-2026-24095

5.3
    Checkmk
  • Checkmk
Published: February 9, 2026

CVE-2026-25492

5.3
    Craftcms
  • Craft
Published: February 9, 2026

CVE-2026-25806

5.3
    Placipy
  • Placipy
Published: February 9, 2026

CVE-2026-25809

5.3
    Placipy
  • Placipy
Published: February 9, 2026

CVE-2026-25810

5.3
    Placipy
  • Placipy
Published: February 9, 2026

CVE-2026-25876

5.3
    Placipy
  • Placipy
Published: February 9, 2026

CVE-2026-25811

5.3
    Placipy
  • Placipy
Published: February 9, 2026

CVE-2026-2213

5.1
    Fabian
  • Online Music Site
Published: February 9, 2026

CVE-2026-2224

5.1
    Fabian
  • Online Reviewer System
Published: February 9, 2026

CVE-2026-2226

5.1
    Douphp
  • Douphp
Published: February 9, 2026

CVE-2026-2227

5.1
    Dlink
  • Dcs-931l Firmware
  • Dcs-931l
Published: February 9, 2026

CVE-2026-1959

5.1
    Loggro
  • Loggro Pymes
Published: February 9, 2026

CVE-2026-1960

5.1
    Loggro
  • Loggro Pymes
Published: February 9, 2026

CVE-2026-2200

4.8
    Heyewei
  • Jfinalcms
Published: February 9, 2026

CVE-2026-2201

4.8
    Zerowdd
  • Studentmanager
Published: February 9, 2026

CVE-2026-2214

4.8
    Plugin
  • *
Published: February 9, 2026

CVE-2026-2222

4.8
    Fabian
  • Online Reviewer System
Published: February 9, 2026

CVE-2026-2240

4.8
    Janet-Lang
  • Janet
Published: February 9, 2026

CVE-2026-2241

4.8
    Janet-Lang
  • Janet
Published: February 9, 2026

CVE-2026-2242

4.8
    Janet-Lang
  • Janet
Published: February 9, 2026

CVE-2026-25496

4.8
    Craft
  • Craft
Published: February 9, 2026

CVE-2026-2245

4.8
    Ccextractor
  • Ccextractor
Published: February 9, 2026

CVE-2026-2246

4.8
    Aprilrobotics
  • Apriltag
Published: February 9, 2026

CVE-2025-63354

4.6
    Hitron
  • Hi3120
Published: February 9, 2026

CVE-2026-25230

4.6
    Filerise
  • Filerise
Published: February 9, 2026

CVE-2026-25916

4.3
    Roundcube
  • Roundcube
Published: February 9, 2026

CVE-2026-25934

4.3
    Go-Git
  • Go-Git
Published: February 9, 2026

CVE-2025-66603

2.1
    Yokogawa
  • Fast Tools
Published: February 9, 2026

CVE-2025-66604

2.1
    Yokogawa
  • Fast Tools
Published: February 9, 2026

CVE-2025-66605

2.1
    Yokogawa
  • Fast/Tools
Published: February 9, 2026

CVE-2025-66606

2.1
    Yokogawa Electric Corporation
  • Fast Tools
Published: February 9, 2026

CVE-2026-25491

1.9
    Craft
  • Craft
Published: February 9, 2026

CVE-2025-7432

1.0
    Silicon Labs
  • Series 2 Devices
Published: February 9, 2026
Click here to see more Vulnerabilities