Vulnerabilitycritical
ThreatsDay Bulletin: Rootkit Patch, Federal Breach, OnePlus SMS Leak, TikTok Scandal & More
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-36401 | Unauthenticated RCE in OSGeo GeoServer via GeoTools XPath Injection | 9.8 | 100% | KEVPoC ×3 | KEV |
| CVE-2025-10184 | The vulnerability allows any application installed on the device to read SMS/MMS data and metadata from the system-provided Telephony provider without… | 8.2 | 4% |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | absatz.media | ing for the Russian word for Moldova ('Молдова') on Absatz (absatz[.]media/search), there are dozens of clear disinformation article |
| ipv4 | 91.218.228.51 | ncludes the use of two IP addresses -- 95.181.226[.]135 and 91.218.228[.]51 -- which have been used to host domains in connection wit |
| ipv4 | 95.181.226.135 | his campaign." This includes the use of two IP addresses -- 95.181.226[.]135 and 91.218.228[.]51 -- which have been used to host domai |
From the original article
13 min read at thehackernews.com
Welcome to this week’s Threatsday Bulletin —your Thursday check-in on the latest twists and turns in cybersecurity and hacking. The digital threat landscape never stands still. One week it’s a critical zero-day, the next it’s a wave of phishing lures or a state-backed disinformation push.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.