Tag: 2025-09-25

Attack reports, vulnerabilities, indicators and intrusion sets linked to 2025-09-25.

Vulnerabilities (107)

• CVE-2025-20333
• CVE-2025-59832
• CVE-2025-59823
• CVE-2025-10542
• CVE-2025-59834
• CVE-2025-59841
• CVE-2020-36851
• CVE-2025-11005
• CVE-2025-20363
• CVE-2025-10467
• CVE-2025-59814
• CVE-2025-40837
• CVE-2025-40836
• CVE-2025-59831
• CVE-2025-27261
• CVE-2025-40698
• CVE-2025-10957
• CVE-2025-10880
• CVE-2025-10879
• CVE-2025-59839
• CVE-2025-10449
• CVE-2025-10438
• CVE-2025-34227
• CVE-2025-27262
• CVE-2025-10941

Attack reports (15)

• From primitive crypto theft to sophisticated AI-based deception · Published 09/11/2025 04:31 · Modified 10/11/2025 12:05
• DeceptiveDevelopment: From primitive crypto theft to sophisticated AI-based deception · Published 25/09/2025 16:29 · Modified 30/09/2025 14:10
• Botnet Loader-as-a-Service Infrastructure Distributing RondoDoX and Mirai Payloads · Published 25/09/2025 23:21 · Modified 26/09/2025 11:56
• Beyond Signatures: Detecting Lumma Stealer with an ML-Powered Sandbox · Published 25/09/2025 23:21 · Modified 26/09/2025 11:41
• How a new PlugX variant abuses DLL search order hijacking · Published 25/09/2025 19:15 · Modified 25/09/2025 19:47
• Inside Salt Typhoon: China's State-Corporate Advanced Persistent Threat · Published 25/09/2025 16:28 · Modified 25/09/2025 19:33
• XCSSET evolves again: Analyzing the latest updates to XCSSET's inventory · Published 25/09/2025 16:27 · Modified 25/09/2025 19:06
• Shai-Hulud worm infects npm packages · Published 25/09/2025 14:10 · Modified 25/09/2025 19:01
• Bookworm to Stately Taurus Using the Attribution Framework · Published 25/09/2025 14:11 · Modified 25/09/2025 19:01
• An emerging DDoS for hire botnet · Published 25/09/2025 09:20 · Modified 25/09/2025 14:58
• Fake Online Speedtest Application · Published 25/09/2025 09:20 · Modified 25/09/2025 14:54
• The Most Powerful Ever? Inside the 11.5Tbps-Scale Mega Botnet AISURU · Published 25/09/2025 09:20 · Modified 25/09/2025 14:48
• Operation Rewrite: Chinese-Speaking Threat Actors Deploy BadIIS in a Wide Scale SEO … · Published 25/09/2025 09:20 · Modified 25/09/2025 14:46
• Prompts as Code & Embedded Keys | The Hunt for LLM-Enabled Malware · Published 25/09/2025 09:20 · Modified 25/09/2025 14:43
• SystemBC – Bringing the Noise · Published 25/09/2025 09:21 · Modified 25/09/2025 14:41