⚡ Weekly Recap: APT Intrusions, AI Malware, Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-0072 | Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user… | 7.8 | <1% | ||
| CVE-2025-1907 | Instantel Micromate lacks authentication on a configuration port which could allow an attacker to execute commands if connected | 9.3 | <1% | ||
CVE-2025-27462+2 related CVEs | [This CNA information record relates to multiple CVEs | 9.4 | <1% | ||
CVE-2025-2760+1 related CVE | GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability | 7.8 | 13% | ||
| CVE-2025-3935 | ViewState Code Injection in ConnectWise ScreenConnect May Lead to RCE | 7.2 | 4% | KEV | KEV |
CVE-2025-41438+1 related CVE | The CS5000 Fire Panel is vulnerable due to a default account that exists on the panel | 9.3 | <1% | ||
| CVE-2025-46701 | Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the… | 7.3 | 3% | ||
| CVE-2025-47577 | Unrestricted Upload of File with Dangerous Type vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Upload a Web Shell to… | 10.0 | 5% | ||
| CVE-2025-4793 | A vulnerability was found in PHPGurukul Online Course Registration 3.1 | 6.9 | <1% | PoC | |
| CVE-2025-47933 | Argo CD: 2.14.13, and 3.0.4, an attacker can perform arbitrary actions on behalf of the victim via the API. Due to the improper filtering… | 5.4 | <1% | ||
| CVE-2025-48057 | Icinga 2: 2.13.12, and 2.14.6, the VerifyCertificate() function can be tricked into incorrectly treating certificates as valid. This allows… | 9.3 | <1% | ||
CVE-2025-48827+1 related CVE | Unauthenticated API access-control bypass in vBulletin (pre-auth RCE chain) | 9.8 group max | 76% | PoC |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | avcheck.net | d out. 🔔 Top News New Law Enforcement Operation Takes down AvCheck[.]net — Authorities in the United States, in partnership with F |
| domain | crypt.guru | e include AvCheck[.]net, Cryptor[.]biz, Cryptor[.]live, and Crypt[.]guru. "The seized domains offered services to cybercriminals, |
| domain | cryptor.biz | tected from security software. These include AvCheck[.]net, Cryptor[.]biz, Cryptor[.]live, and Crypt[.]guru. "The seized domains of |
| domain | cryptor.live | urity software. These include AvCheck[.]net, Cryptor[.]biz, Cryptor[.]live, and Crypt[.]guru. "The seized domains offered services t |
From the original article
13 min read at thehackernews.com
Ravie Lakshmanan Jun 02, 2025 Cybersecurity / Hacking News If this had been a security drill, someone would’ve said it went too far. But it wasn’t a drill—it was real. The access?
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.