Tag: 2025-12-08

Attack reports, vulnerabilities, indicators and intrusion sets linked to 2025-12-08.

Vulnerabilities (241)

• CVE-2025-48572
• CVE-2025-32328
• CVE-2025-32329
• CVE-2025-48525
• CVE-2025-48536
• CVE-2025-48555
• CVE-2025-48565
• CVE-2025-48586
• CVE-2025-48588
• CVE-2025-48629
• CVE-2025-48628
• CVE-2025-48627
• CVE-2025-48620
• CVE-2025-48606
• CVE-2025-48599
• CVE-2025-48638
• CVE-2025-48632
• CVE-2025-48624
• CVE-2025-48623
• CVE-2025-48615
• CVE-2025-48597
• CVE-2025-48612
• CVE-2025-26488
• CVE-2025-65795
• CVE-2025-48631

Attack reports (5)

• LummaStealer dropped via fake updates from itch.io and Patreon · Published 08/12/2025 17:25 · Modified 21/12/2025 18:49
• AI-Automated Threat Hunting Brings GhostPenguin Out of the Shadows · Published 08/12/2025 16:35 · Modified 21/12/2025 18:49
• Critical React2Shell Vulnerability Under Active Exploitation by Chinese Threat Actors · Published 08/12/2025 17:25 · Modified 21/12/2025 18:49
• Campaign uses ClickFix page to push NetSupport RAT · Published 08/12/2025 17:41 · Modified 21/12/2025 18:49
• Operation FrostBeacon: Multi-Cluster Cobalt Strike Campaign Targets Russia · Published 08/12/2025 17:25 · Modified 21/12/2025 18:43