UAT-7237 targets Taiwanese web hosting infrastructure

Cisco Talos discovered UAT-7237, a Chinese-speaking advanced persistent threat APT group active since at least 2022, which has significant overlaps with UAT-5918. UAT-7237 conducted a recent intrusion targeting web infrastructure entities within Taiwan and relies heavily on the use of open-source...

CVE-2025-49755

User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-53156

Exposure of sensitive information to an unauthorized actor in Storage Port Driver allows an authorized attacker to disclose information locally...

CVE-2025-53728

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to disclose information over a network...

CVE-2025-50154

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-53781

Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network...

CVE-2025-53781

Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network...

CVE-2025-53783

Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network...

CVE-2025-53765

Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information locally...

CVE-2025-53765

Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information locally...

CVE-2025-53136

Exposure of sensitive information to an unauthorized actor in Windows NT OS Kernel allows an authorized attacker to disclose information locally...

CVE-2025-50154

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-27707

Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software before version 24.11.1 for IntelR TiberTM Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2025-53765

CVE-2025-53765 (Azure Stack Hub Information Disclosure Vulnerability) affects Azure Stack Hub deployments, enabling a local attacker to disclose private personal information due to improper access control. The issue concerns local access to data on Azure Stack Hub and is characterized by informat...

CVE-2025-53156

CVE-2025-53156 is a Windows Storage Port Driver information disclosure vulnerability. The affected component is the Windows Storage Port Driver, with an impact of exposing sensitive data to a local, authorized attacker. The CVSS 3.1 base metrics indicate a Local attack with Low attack complexity ...

CVE-2025-53136

CVE-2025-53136 is listed under Windows NT OS Kernel with a Medium CVSS v3.1 (5.5) and impact described as Access to sensitive data . The connected documents provide the affected product (Windows NT OS Kernel) and impact, but do not disclose root cause details or a specific fix. Public references ...

CVE-2025-50154

CVE-2025-50154 is a Windows File Explorer spoofing vulnerability where Explorer may disclose NTLMv2-SSP hashes by rendering a remote icon for a .LNK or Library-MS that's hosted on SMB, triggering authentication. Multiple connected documents describe attacker-controlled .LNK/.library-ms payloads a...

PT-2025-34059

Name of the Vulnerable Software and Affected Versions: SMB affected versions not specified Description: A vulnerability exists that could cause unauthorized access to sensitive credential data when an attacker is able to capture local SMB traffic between a valid user within the BMS network and th...

CVE-2025-54888

Fedify vulnerability CVE-2025-54888 is an authentication bypass in handleInboxInternal that lets an attacker impersonate any ActivityPub actor by sending forged activities signed with their own keys. The flaw processes an activity before verifying the signer’s ownership of the actor, enabling imp...

CVE-2025-54888: Improper Authentication

Fedify is a TypeScript library for building federated server apps powered by ActivityPub. In versions below 1.3.20, 1.4.0-dev.585 through 1.4.12, 1.5.0-dev.636 through 1.5.4, 1.6.0-dev.754 through 1.6.7, 1.7.0-pr.251.885 through 1.7.8 and 1.8.0-dev.909 through 1.8.4, an authentication bypass...