Data breachcritical
⚡ Weekly Recap: F5 Breached, Linux Rootkits, Pixnapping Attack, EtherHiding & More
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-40151+1 related CVE | When user authentication is not enabled the shell can execute commands with the highest privileges | 9.8 | 1% | ||
| CVE-2025-10230 | Unauthenticated OS Command Injection RCE in Samba AD DC WINS Hook | 10.0 | 40% | ||
| CVE-2025-11577 | Clevo’s UEFI firmware update packages, including B10717.exe, inadvertently contained private signing keys used for Boot Guard and Boot Policy Manifest… | 7.6 | <1% | ||
CVE-2025-9713+1 related CVE | Path traversal in Ivanti Endpoint Manager before version 2024 SU4 allows a remote unauthenticated attacker to achieve remote code execution | 8.8 group max | 15% | ||
| CVE-2025-11756 | Use after free in Safe Browsing in Google Chrome prior to 141.0.7390.107 allowed a remote attacker who had compromised the renderer process to potentially… | 8.8 | <1% | ||
| CVE-2025-20352 | SNMP Stack Buffer Overflow in Cisco IOS and IOS XE Enables DoS and Root RCE | 7.7 | 42% | KEV | KEV |
CVE-2025-24990+1 related CVE | Untrusted Pointer Dereference in Windows Agere Modem Driver (ltmdm64.sys) | 7.8 | 6% | KEV | KEV |
| CVE-2025-2611 | The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that… | 9.3 | 6% | ||
| CVE-2025-37729 | Improper neutralization of special elements used in a template engine in Elastic Cloud Enterprise (ECE) can lead to a malicious actor with Admin access… | 7.2 | <1% | ||
| CVE-2025-47827 | Secure Boot Bypass via Expired Key in IGEL OS Before 11 (CVE-2025-47827) | 4.6 | 5% | KEVPoC | KEV |
| CVE-2025-48561 | In multiple locations, there is a possible way to access data displayed on the screen due to side channel information disclosure | 5.5 | <1% | PoC | |
CVE-2025-48983+1 related CVE | A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution (RCE) on the Backup infrastructure hosts by an… | 9.9 group max | <1% | ||
| CVE-2025-49201 | A weak authentication vulnerability in Fortinet FortiPAM 1.5.0, FortiPAM 1.4.0 through 1.4.2, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM… | 9.8 | <1% | ||
| CVE-2025-49553 | Adobe Connect versions 12.9 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by an attacker to execute… | 9.3 | <1% | ||
| CVE-2025-55315 | HTTP Request Smuggling in Microsoft ASP.NET Core Enables Security Feature Bypass | 9.9 | 66% | ||
| CVE-2025-58325 | An Incorrect Provision of Specified Functionality vulnerability [CWE-684] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2.5 through 7.2.10, 7.0.0 through 7.0.15… | 6.7 | <1% | ||
| CVE-2025-9217 | The Slider Revolution plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.7.36 via the 'used_svg' and 'used_images'… | 6.5 | <1% |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | ivanti-pulsesecure.com | redirecting them to attacker-controlled lookalike websites (ivanti-pulsesecure[.]com or ivanti-secure-access[.]org). The goal of this attack i |
| domain | ivanti-secure-access.org | -controlled lookalike websites (ivanti-pulsesecure[.]com or ivanti-secure-access[.]org). The goal of this attack is to steal VPN credentials fro |
From the original article
13 min read at thehackernews.com
It’s easy to think your defenses are solid — until you realize attackers have been inside them the whole time. The latest incidents show that long-term, silent breaches are becoming the norm. The best defense now isn’t just patching fast, but watching smarter and staying alert for what you don’t expect.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.