⚡ THN Weekly Recap: Google Secrets Stolen, Windows Hack, New Crypto Scams and More

Welcome to this week's Cybersecurity News Recap. Discover how cyber attackers are using clever tricks like fake codes and sneaky emails to gain access to sensitive data. We cover everything from device code phishing to cloud exploits, breaking down the technical details into simple, easy-to-follo...

CVE-2025-1389

creationtimestamp| type| source ---|---|--- 2025-02-17 04:18:15+00:00| seen| https://infosec.exchange/users/cve/statuses/114017297678557169 2025-02-17 05:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lidyjfng3u2o 2025-02-17 05:31:16+00:00| seen|...

Automated Logic WebCTRL Premium Server Unrestricted Upload of File with Dangerous Type (CVE-2024-8525)

CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists which could allow an unauthenticated user to upload files of dangerous types without restrictions, leading to remote command execution. This plugin only works with Tenable.ot. Please visit...

Automated Logic WebCTRL Premium Server Unrestricted Upload of File with Dangerous Type (CVE-2024-8525)

CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists which could allow an unauthenticated user to upload files of dangerous types without restrictions, leading to remote command execution. This plugin only works with Tenable.ot. Please visit...

Top US Election Security Watchdog Forced to Stop Election Security Work

The US Cybersecurity and Infrastructure Security Agency has frozen efforts to aid states in securing elections, according to an internal memo viewed by WIRED...

N. Korean Hackers Suspected in DEEP#DRIVE Attacks Against S. Korea

A phishing attack dubbed DEEPDRIVE is targeting South Korean entities, with thousands already affected. North Korean hackers from…...

New mandatory USCG cyber regulations. What you need to know

TL;DR US Coast Guard introduces mandatory new Marine Transportation System cybersecurity requirements They take effect on July 16, 2025, and training must begin by July 17, 2025 US flagged large commercial vessels affected Cybersecurity Officers CySO need to be appointed Penetration testing of...

Microsoft Uncovers ‘BadPilot’ Campaign as Seashell Blizzard Targets US and UK

Russian GRU-linked hackers exploit known software flaws to breach critical networks worldwide, targeting the United States and the…...

CVE-2025-25898

creationtimestamp| type| source ---|---|--- 2025-02-13 16:17:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li33mfp3iq2a 2025-02-13 17:12:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4281 2025-02-13 18:50:37+00:00| seen|...

CVE-2024-13639

creationtimestamp| type| source ---|---|--- 2025-02-13 08:30:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113995641624064014 2025-02-13 09:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li2e2anebm2g 2025-02-13 10:09:02+00:00| seen|...

Qardio Heart Health IOS and Android Application and QardioARM A100

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to obtain sensitive information, cause a denial-of-service condition, and obtain firmware files. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment...

Dingtian DT-R0 Series

RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated attacker to modify the device settings and gain administrator access. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability,...

Outback Power Mojave Inverter

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to access sensitive data or inject commands. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Disable un-used...

mySCADA myPRO Manager

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary OS commands, upload files, and obtain sensitive information without providing associated credentials. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize...

CVE-2025-1058

creationtimestamp| type| source ---|---|--- 2025-02-13 05:47:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113994999696344838 2025-02-13 06:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhzzyyg2wb2z 2025-02-13 06:48:58+00:00| seen|...

Online Threats Are Rising -Here’s Why Companies Must Improve Their Cybersecurity

Cybersecurity is a must as online threats rise. Businesses must train employees, back up data, and adopt strong…...

A Hacker Group Within Russia’s Notorious Sandworm Unit Is Breaching Western Networks

A team Microsoft calls BadPilot is acting as Sandworm's “initial access operation,” the company says. And over the last year it's trained its sights on the US, the UK, Canada, and Australia...

CVE-2025-21698

creationtimestamp| type| source ---|---|--- 2025-02-12 14:16:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyefkir4t2g 2025-02-13 17:15:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4291...

Cisco and Wiz Help Customers Modernize Cybersecurity

Enhanced collaboration deepens cloud security capabilities, democratizes security across cloud businesses...

PT-2025-6777 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Broker Vm

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR Broker VM affected versions not specified Description: A problem with the network isolation mechanism of the Palo Alto Networks Cortex XDR Broker VM allows attackers unauthorized access to Docker containers from...