Tag: CVE-2025-53690

2 Attack Reports | 0 Vulnerabilities

Attack reports

Targets critical infrastructure sectors in North America

UAT-8837, assessed as a China-nexus advanced persistent threat actor, has been targeting critical infrastructure sectors in North America since 2025. The group exploits vulnerabilities, including zero-days, to gain initial access and deploys open-source tools for reconnaissance, credential harvesti…
apt
zero-day
credential harvesting
lateral movement
earthworm
impacket
sharphound
rubeus
critical infrastructure
china-nexus
active directory
CVE-2025-53690
dwagent
2026-01-16
certipy
goexec
gotokentheft
Published: January 16, 2026
Linked vulnerabilities : CVE-2025-53690
Downloadable IOCs: 29

ViewState Deserialization Zero-Day Vulnerability in Sitecore Products (CVE-2025-53690)

A critical ViewState deserialization vulnerability (CVE-2025-53690) was discovered in Sitecore products, affecting deployments using an exposed sample machine key. The attacker exploited this to achieve remote code execution, progressing from initial compromise to privilege escalation. Key events i…
viewstate
lateral movement
reconnaissance
privilege escalation
earthworm
remote code execution
sharphound
deserialization
2025-09-04
CVE-2025-53690
sitecore
dwagent
weepsteel
Published: September 4, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports