Tag: 2025-12-08

Attack reports, vulnerabilities, indicators and intrusion sets linked to 2025-12-08.

Vulnerabilities (241)

• CVE-2025-27019
• CVE-2025-27020
• CVE-2025-64081
• CVE-2025-48626
• CVE-2025-65548
• CVE-2025-65849
• CVE-2025-61318
• CVE-2025-65271
• CVE-2025-63721
• CVE-2025-12956
• CVE-2025-26487
• CVE-2025-66324
• CVE-2025-66328
• CVE-2025-66461
• CVE-2025-42620
• CVE-2025-42615
• CVE-2025-48637
• CVE-2025-48596
• CVE-2025-48589
• CVE-2025-48583
• CVE-2025-48580
• CVE-2025-48575
• CVE-2025-48573
• CVE-2025-22420
• CVE-2025-48566

Attack reports (5)

• LummaStealer dropped via fake updates from itch.io and Patreon · Published 08/12/2025 17:25 · Modified 21/12/2025 18:49
• AI-Automated Threat Hunting Brings GhostPenguin Out of the Shadows · Published 08/12/2025 16:35 · Modified 21/12/2025 18:49
• Critical React2Shell Vulnerability Under Active Exploitation by Chinese Threat Actors · Published 08/12/2025 17:25 · Modified 21/12/2025 18:49
• Campaign uses ClickFix page to push NetSupport RAT · Published 08/12/2025 17:41 · Modified 21/12/2025 18:49
• Operation FrostBeacon: Multi-Cluster Cobalt Strike Campaign Targets Russia · Published 08/12/2025 17:25 · Modified 21/12/2025 18:43