Malwarecritical
⚡ Weekly Recap: APT Campaigns, Browser Hijacks, AI Malware, Cloud Breaches and Critical CVEs
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-54780+2 related CVEs | Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are vulnerable to command injection in the OpenVPN widget due to improper… | 8.8 group max | 13% | PoC | |
| CVE-2025-30911 | Improper Control of Generation of Code ('Code Injection') vulnerability in Rometheme RTMKit rometheme-for-elementor allows Command Injection.This issue affects… | 9.9 | 2% | ||
CVE-2025-34027+1 related CVE | Unauthenticated RCE in Versa Concerto via Auth Bypass and TOCTOU Race | 10.0 group max | 46% | PoC | |
| CVE-2025-34026 | Authentication Bypass in Versa Concerto SD-WAN Orchestration Platform (CVE-2025-34026) | 9.2 | 82% | KEVPoC | KEV |
| CVE-2025-41229 | VMware Cloud Foundation contains a directory traversal vulnerability | 8.2 | <1% | ||
CVE-2025-4428+1 related CVE | Authenticated Code Injection RCE in Ivanti Endpoint Manager Mobile (EPMM) API | 8.8 group max | 88% | KEV | KEV |
From the original article
13 min read at thehackernews.com
Ravie Lakshmanan May 26, 2025 Cybersecurity / Hacking News Cyber threats don't show up one at a time anymore. They’re layered, planned, and often stay hidden until it’s too late. For cybersecurity teams, the key isn’t just reacting to alerts—it’s spotting early signs of trouble before they become real threats.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.