Exploit / PoCcritical
Microsoft spots zero-day use in spy campaign against Kurdish military in Iraq
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2025-27920+1 related CVE | Directory Traversal in Srimax Output Messenger Before 2.0.63 | 8.8 group max | 2% | KEV | KEV |
From the original article
2 min read at therecord.media
A cyber-espionage group aligned with the Turkish government appears to have exploited a zero-day vulnerability in a messaging app to spy on Kurdish military operations in Iraq, researchers said Monday. The hackers, tracked as Marbled Dust, have been breaking into accounts of Output Messenger — an app commonly used for workplace and organizational chats — since April 2024, according to Microsoft Threat Intelligence .
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.