Operation ForumTroll: APT attack with Google Chrome zero-day exploit chain

In mid-March 2025, Kaspersky technologies detected a wave of infections by previously unknown and highly sophisticated malware. In all cases, infection occurred immediately after the victim clicked on a link in a phishing email, and the attackers' website was opened using the Google Chrome web...

CVE-2025-2763

creationtimestamp| type| source ---|---|--- 2025-03-25 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-179/ 2025-04-23 21:10:27+00:00| seen| https://t.me/cvedetector/23606...

CVE-2025-2762

creationtimestamp| type| source ---|---|--- 2025-03-25 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-176/ 2025-04-23 21:10:28+00:00| seen| https://t.me/cvedetector/23607...

CVE-2025-2768

creationtimestamp| type| source ---|---|--- 2025-03-25 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-182/ 2025-04-23 20:32:34+00:00| published-proof-of-concept| Telegram/tGlnxgJ45kvnhr-0GuZEauiX58JIxKMY4hRnREk7fiyk0 2025-04-23 21:10:34+00:00| seen|...

CVE-2025-2766

creationtimestamp| type| source ---|---|--- 2025-03-25 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-180/ 2025-06-06 21:23:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqxrf2ujit2s...

CVE-2025-26633: How Water Gamayun Weaponizes MUIPath using MSC EvilTwin

Trend Research identified Russian threat actor Water Gamayun exploiting CVE-2025-26633, a zero-day vulnerability in the Microsoft Management Console that attackers exploit to execute malicious code and exfiltrate data...

PT-2025-12845 · Bdrive · Bdrive Netdrive

Name of the Vulnerable Software and Affected Versions: Bdrive NetDrive affected versions not specified Description: The issue is related to an uncontrolled search path element, which can lead to local privilege escalation. This is a 0-day vulnerability, meaning it is being exploited before a fix ...

PT-2025-12847 · Bec Technologies · Bec Technologies Multiple Routers

Name of the Vulnerable Software and Affected Versions: BEC Technologies Multiple Routers affected versions not specified Description: The issue concerns an authentication bypass vulnerability. It is reported to be a 0-day vulnerability, meaning it is being exploited in the wild before a fix is...

Oracle Denies Breach Amid Hacker’s Claim of Access to 6 Million Records

Oracle denies breach claims as hacker alleges access to 6 million cloud records. CloudSEK reports a potential zero-day exploit affecting 140,000 tenants...

CVE-2024-50629

creationtimestamp| type| source ---|---|--- 2025-03-19 06:52:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8030 2025-03-19 07:57:35+00:00| seen| https://t.me/cvedetector/20620 2025-03-27 09:26:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9037 2025-04-09 03:00:00+00:00| seen|...

CVE-2024-50631

creationtimestamp| type| source ---|---|--- 2025-03-19 06:52:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8028 2025-03-19 07:57:40+00:00| seen| https://t.me/cvedetector/20622 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-213/...

CVE-2024-10444

creationtimestamp| type| source ---|---|--- 2025-03-19 02:49:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8013 2025-03-19 04:36:54+00:00| seen| https://t.me/cvedetector/20612 2025-03-24 01:44:06+00:00| seen| https://bsky.app/profile/redteamnews.bsky.social/post/3ll3mypef772r 2025-04-09...

CVE-2025-1428

creationtimestamp| type| source ---|---|--- 2025-03-18 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-161/ 2025-04-04 14:35:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10450...

CVE-2025-1427

creationtimestamp| type| source ---|---|--- 2025-03-18 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-162/ 2025-04-04 14:35:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10452...

CVE-2025-1432

creationtimestamp| type| source ---|---|--- 2025-03-18 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-154/ 2025-04-24 21:07:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13341 2026-01-23 07:13:13+00:00| seen|...

CVE-2025-1433

creationtimestamp| type| source ---|---|--- 2025-03-18 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-155/ 2025-04-24 21:07:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13340...

ZDI-CAN-25373: Windows Shortcut Exploit Abused as Zero-Day in Widespread APT Campaigns

Trend Zero Day Initiative™ ZDI uncovered both state-sponsored and cybercriminal groups extensively exploiting ZDI-CAN-25373 aka ZDI-25-148, a Windows .lnk file vulnerability that enables hidden command execution...

CVE-2025-2450

creationtimestamp| type| source ---|---|--- 2025-03-17 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-147/ 2025-08-12 13:33:28+00:00| seen| MISP/02fb130c-7874-4693-9b66-81ed91a2e996 2025-08-21 03:19:28+00:00| seen| MISP/02fb130c-7874-4693-9b66-81ed91a2e996...

CVE-2025-2449

creationtimestamp| type| source ---|---|--- 2025-03-17 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-146/...

CVE-2025-1431

creationtimestamp| type| source ---|---|--- 2025-03-13 19:48:29+00:00| seen| https://t.me/cvedetector/20249 2025-03-18 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-153/ 2025-04-04 14:35:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10447...