CERT-UA Discovers LAMEHUG Malware Linked to APT28, Using LLM for Phishing Campaign

The Computer Emergency Response Team of Ukraine CERT-UA has disclosed details of a phishing campaign that's designed to deliver a malware codenamed LAMEHUG. "An obvious feature of LAMEHUG is the use of LLM large language model, used to generate commands based on their textual representation...

Automated Alert Classification and Triage (AACT): an Intelligent System for the Prioritisation of Cybersecurity Alerts

Enterprise networks are growing ever larger with a rapidly expanding attack surface, increasing the volume of security alerts generated from security controls. Security Operations Centre SOC analysts triage these alerts to identify malicious activity, but they struggle with alert fatigue due to t...

CVE-2025-2185

creationtimestamp| type| source ---|---|--- 2025-04-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-02 2025-04-25 01:30:11+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnm2imk7jwq2 2025-04-25...

CVE-2024-41792

creationtimestamp| type| source ---|---|--- 2025-04-08 08:46:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10884 2025-04-08 11:48:21+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114302183018844167 2025-04-08 12:07:14+00:00| seen|...

BELL-CVE-2025-21963

Bulletin has no description...

CVE-2025-30356

creationtimestamp| type| source ---|---|--- 2025-04-01 22:32:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10022 2025-04-01 22:57:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llrxufeglj2j 2025-04-01 23:40:24+00:00| seen|...

CVE-2024-13790

creationtimestamp| type| source ---|---|--- 2025-03-19 08:49:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8036 2025-03-19 09:40:19+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkpvbnadmm24 2025-03-19 10:43:20+00:00| seen|...

CVE-2025-2200

creationtimestamp| type| source ---|---|--- 2025-03-17 10:54:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7752 2025-03-17 11:40:12+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkl325bka52u 2025-03-17 12:01:12+00:00| seen|...

CVE-2024-48841

creationtimestamp| type| source ---|---|--- 2025-01-27 20:16:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqqzjt74p27 2025-01-27 20:28:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113902206110094531 2025-01-27 21:51:58+00:00| seen|...

CVE-2025-23528

creationtimestamp| type| source ---|---|--- 2025-01-16 20:17:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv3y3mx6y2t 2025-01-16 20:48:55+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113839999140468940 2025-01-16 20:49:17+00:00| seen|...

CVE-2024-35277

creationtimestamp| type| source ---|---|--- 2025-01-14 14:16:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgvfkusj2n 2025-01-14 14:48:25+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113827257038614887 2025-01-14 15:13:22+00:00| seen|...

CVE-2025-0394

creationtimestamp| type| source ---|---|--- 2025-01-14 08:28:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113825764299839192 2025-01-14 09:10:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1468 2025-01-14 09:15:52+00:00| seen|...

CVE-2025-21628

creationtimestamp| type| source ---|---|--- 2025-01-09 17:19:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113799538335498729 2025-01-09 18:15:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdbw3cyen2i 2025-01-09 18:38:42+00:00| seen|...

CVE-2024-11635

creationtimestamp| type| source ---|---|--- 2025-01-07 21:01:36+00:00| seen| https://bsky.app/profile/abrahack.bsky.social/post/3lf6kaflqkk2d 2025-01-08 07:20:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113791523823209673 2025-01-08 07:38:26+00:00| published-proof-of-concept|...

CVE-2024-54767

creationtimestamp| type| source ---|---|--- 2025-01-06 22:37:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/263 2025-01-06 23:15:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4bb4ufpf2o 2025-01-06 23:37:48+00:00| seen|...

CVE-2024-44309

creationtimestamp| type| source ---|---|--- 2024-11-19 18:58:42+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113511151778117019 2024-11-20 02:02:32+00:00| exploited| https://t.me/cvedetector/11554 2024-11-20 04:00:00+00:00| seen|...

CVE-2024-5594

creationtimestamp| type| source ---|---|--- 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-06 2025-01-06 13:54:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113781746778966575 2025-01-06 14:15:27+00:00| seen|...

CVE-2024-51378

creationtimestamp| type| source ---|---|--- 2024-10-30 00:49:07+00:00| exploited| https://t.me/cvedetector/9380 2024-10-30 02:57:23+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8886 2024-11-01 15:52:35+00:00| published-proof-of-concept| https://t.me/TheDarkWebInformer/6249...

CVE-2024-20439

creationtimestamp| type| source ---|---|--- 2024-09-04 20:15:49+00:00| seen| https://t.me/cvedetector/4823 2024-09-05 06:52:28+00:00| seen| https://t.me/thehackernews/5522 2024-09-05 07:07:50+00:00| seen| https://t.me/CyberBulletin/551 2024-09-05 07:50:52+00:00| seen|...

BELL-CVE-2024-41110

Bulletin has no description...