Threat Attack Daily - 3rd of July 2025
Threat Attack Daily - 3rd of July 2025
Aggregator
Ransomware Attack Update for the 3rd of July 2025
2 months 1 week ago
Ransomware Attack Update for the 3rd of July 2025
Dark Web Informer - Cyber Threat Intelligence
Everest
2 months 1 week ago
You must login to view this content
cohenido
Qilin
2 months 1 week ago
You must login to view this content
cohenido
Protecting Your Business Communications: The Critical Role of Secure Email Gateways
2 months 1 week ago
Email is still the backbone of how businesses communicate, with more than 300 billion messages sent every day.…
Owais Sultan
CVE-2025-52554 | n8n up to 1.99.0 /rest/executions/ authorization (GHSA-gq57-v332-7666 / EUVD-2025-19898)
2 months 1 week ago
A vulnerability classified as problematic has been found in n8n up to 1.99.0. This affects an unknown part of the file /rest/executions/. The manipulation leads to missing authorization.
This vulnerability is uniquely identified as CVE-2025-52554. It is possible to initiate the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-53369 | StarCitizenTools mediawiki-extensions-ShortDescription up to 4.0.0 mw.util.addSubtitle cross site scripting (EUVD-2025-19899)
2 months 1 week ago
A vulnerability was found in StarCitizenTools mediawiki-extensions-ShortDescription up to 4.0.0. It has been rated as problematic. Affected by this issue is the function mw.util.addSubtitle. The manipulation leads to cross site scripting.
This vulnerability is handled as CVE-2025-53369. The attack may be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-53370 | StarCitizenTools mediawiki-skins-Citizen up to 3.3.x cross site scripting (EUVD-2025-19907)
2 months 1 week ago
A vulnerability was found in StarCitizenTools mediawiki-skins-Citizen up to 3.3.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting.
This vulnerability is known as CVE-2025-53370. The attack can be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-34082 | IGEL OS prior 10.06.220/11.04.270 Secure Terminal Services/Secure Shadow Services os command injection (EUVD-2025-19904)
2 months 1 week ago
A vulnerability was found in IGEL OS. It has been classified as critical. Affected is an unknown function of the component Secure Terminal Services/Secure Shadow Services. The manipulation leads to os command injection. This vulnerability only affects products that are no longer supported by the maintainer.
This vulnerability is traded as CVE-2025-34082. It is possible to launch the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-34087 | Pi-hole Web up to 3.3 AdminLTE Interface domain os command injection (EUVD-2025-19902)
2 months 1 week ago
A vulnerability was found in Pi-hole Web up to 3.3 and classified as critical. This issue affects some unknown processing of the component AdminLTE Interface. The manipulation of the argument domain leads to os command injection.
The identification of this vulnerability is CVE-2025-34087. The attack may be initiated remotely. There is no exploit available.
It is recommended to apply a patch to fix this issue.
vuldb.com
CVE-2025-34086 | Bolt CMS up to 3.7.0 .sessions displayname code injection (EUVD-2025-19905)
2 months 1 week ago
A vulnerability has been found in Bolt CMS up to 3.7.0 and classified as critical. This vulnerability affects unknown code of the file /async/browse/cache/.sessions. The manipulation of the argument displayname leads to code injection. This vulnerability only affects products that are no longer supported by the maintainer.
This vulnerability was named CVE-2025-34086. The attack can be initiated remotely. There is no exploit available.
vuldb.com
CVE-2025-34061 | Henan Xiaopi Security PHPStudy 2016/2017/2018 backdoor (EUVD-2025-19906)
2 months 1 week ago
A vulnerability, which was classified as critical, was found in Henan Xiaopi Security PHPStudy 2016/2017/2018. This affects an unknown part. The manipulation leads to backdoor.
This vulnerability is uniquely identified as CVE-2025-34061. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com
CVE-2025-34088 | Artica Pandora FMS up to 7.0NG net_tools.php select_ips os command injection (EUVD-2025-19903)
2 months 1 week ago
A vulnerability, which was classified as critical, has been found in Artica Pandora FMS up to 7.0NG. Affected by this issue is some unknown functionality of the file net_tools.php. The manipulation of the argument select_ips leads to os command injection.
This vulnerability is handled as CVE-2025-34088. The attack may be launched remotely. There is no exploit available.
vuldb.com
CVE-2025-34089 | Aexol Studio Remote for Mac up to 2025.7 /api/executeScript missing authentication (EUVD-2025-19900)
2 months 1 week ago
A vulnerability classified as critical was found in Aexol Studio Remote for Mac up to 2025.7. Affected by this vulnerability is an unknown functionality of the file /api/executeScript. The manipulation leads to missing authentication.
This vulnerability is known as CVE-2025-34089. The attack can be launched remotely. There is no exploit available.
vuldb.com
Security Pros Say Hunters International RaaS Operators are ‘Changing Jerseys’
2 months 1 week ago
The notorious Hunters International RaaS group that racked up hundreds of victims over two years says it's shutting down and offering decryption software to victims, but security pros say this happens regularly in the cybercriminal world and that the threat actors likely will return affiliated with other operations.
The post Security Pros Say Hunters International RaaS Operators are ‘Changing Jerseys’ appeared first on Security Boulevard.
Jeffrey Burt
Grafana security advisory (AV25-394)
2 months 1 week ago
Canadian Centre for Cyber Security
Phishing Scammers Push for Callbacks in Latest Innovation
2 months 1 week ago
Telephone-Oriented Attack Delivery Social Engineering Tactic Thrives
The phishing industry is a never ending source of innovation. Cyber fraudsters are determined to sneak their way into your inbox. Recent attacks involve callback phishing, a social engineering tactic designed to break down victims' defenses by spurring them into calling the scammers themselves.
The phishing industry is a never ending source of innovation. Cyber fraudsters are determined to sneak their way into your inbox. Recent attacks involve callback phishing, a social engineering tactic designed to break down victims' defenses by spurring them into calling the scammers themselves.
Cryptohack Roundup: Inside the $100M Nobitex Breach
2 months 1 week ago
Also: Dismantling a 460 Million Euro Crypto Fraud Network
This week, a peek into Iran's largest crypto exchange blending privacy, scale and sanctions evasion, Europol and Spanish police dismantled a crypto fraud network, $9.5M Resupply hack, sentencing in a $40M ponzi scheme and a North Korean crypto theft and employment fraud ring.
This week, a peek into Iran's largest crypto exchange blending privacy, scale and sanctions evasion, Europol and Spanish police dismantled a crypto fraud network, $9.5M Resupply hack, sentencing in a $40M ponzi scheme and a North Korean crypto theft and employment fraud ring.
Ransomware Group Hunters International Announces Exit
2 months 1 week ago
Cybercrime Experts Greet Announcement With Skepticism
Hunters International said Thursday it closed shop, provoking skepticism among cybercrime experts who said it's more likely the Russian-speaking hackers behind the ransomware group will start up again under a new brand name. "Ransomware groups often rebrand themselves."
Hunters International said Thursday it closed shop, provoking skepticism among cybercrime experts who said it's more likely the Russian-speaking hackers behind the ransomware group will start up again under a new brand name. "Ransomware groups often rebrand themselves."
Medical Device Maker Surmodics Recovering From Attack
2 months 1 week ago
Latest Medical Device Vendor to Disclose a Recent Cyber Incident
A Minnesota maker of catheters notified federal regulators it is recovering from a cyberattack discovered in early June that rendered a portion of its IT systems and data inaccessible. Threat actors gained unauthorized access to some IT systems making certain systems and data unavailable.
A Minnesota maker of catheters notified federal regulators it is recovering from a cyberattack discovered in early June that rendered a portion of its IT systems and data inaccessible. Threat actors gained unauthorized access to some IT systems making certain systems and data unavailable.