Hackers Exploit Paragon Partition Manager Driver Vulnerability in Ransomware Attacks

Threat actors have been exploiting a security vulnerability in Paragon Partition Manager's BioNTdrv.sys driver in ransomware attacks to escalate privileges and execute arbitrary code. The zero-day flaw CVE-2025-0289 is part of a set of five vulnerabilities that was discovered by Microsoft,...

⚡ THN Weekly Recap: Alerts on Zero-Day Exploits, AI Breaches, and Crypto Heists

This week, a 23-year-old Serbian activist found themselves at the crossroads of digital danger when a sneaky zero-day exploit turned their Android device into a target. Meanwhile, Microsoft pulled back the curtain on a scheme where cybercriminals used AI tools for harmful pranks, and a massive...

CVE-2025-23118

creationtimestamp| type| source ---|---|--- 2025-03-01 02:27:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6035 2025-03-01 06:24:44+00:00| seen| https://t.me/cvedetector/19205 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-376/ 2025-08-19 18:29:29+00:0...

CVE-2025-23119

creationtimestamp| type| source ---|---|--- 2025-03-01 02:27:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6031 2025-03-01 06:24:44+00:00| seen| https://t.me/cvedetector/19206 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-377/ 2025-08-19 18:29:29+00:0...

Amnesty Finds Cellebrite's Zero-Day Used to Unlock Serbian Activist's Android Phone

A 23-year-old Serbian youth activist had their Android phone targeted by a zero-day exploit developed by Cellebrite to unlock the device, according to a new report from Amnesty International. "The Android phone of one student protester was exploited and unlocked by a sophisticated zero-day exploi...

CVE-2025-26595

creationtimestamp| type| source ---|---|--- 2025-02-25 17:35:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114065731196406120 2025-02-25 19:03:31+00:00| seen| https://t.me/cvedetector/18895 2025-02-26 07:27:09+00:00| seen| https://bsky.app/profile/bsd.cafe/post/3lj2tzliwsqw2...

CVE-2025-26594

creationtimestamp| type| source ---|---|--- 2025-02-25 17:35:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114065731196406120 2025-02-25 19:03:30+00:00| seen| https://t.me/cvedetector/18894 2025-02-26 07:27:09+00:00| seen| https://bsky.app/profile/bsd.cafe/post/3lj2tzliwsqw2...

CVE-2025-26597

creationtimestamp| type| source ---|---|--- 2025-02-25 16:23:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5329 2025-02-25 17:35:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114065731196406120 2025-02-25 19:03:36+00:00| seen| https://t.me/cvedetector/18897 2025-02-26...

CVE-2025-26599

creationtimestamp| type| source ---|---|--- 2025-02-25 16:23:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5325 2025-02-25 17:35:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114065731196406120 2025-02-25 19:03:24+00:00| seen| https://t.me/cvedetector/18890 2025-02-26...

CVE-2025-26600

creationtimestamp| type| source ---|---|--- 2025-02-25 16:22:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5313 2025-02-25 17:32:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114065717510498810 2025-02-25 17:35:32+00:00| seen|...

CVE-2025-1520

creationtimestamp| type| source ---|---|--- 2025-02-25 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-099/...

CVE-2025-1521

creationtimestamp| type| source ---|---|--- 2025-02-25 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-096/...

CVE-2024-27834

creationtimestamp| type| source ---|---|--- 2025-02-24 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-093/ 2025-10-01 17:45:01+00:00| seen| Telegram/NsEmTFCOjSJbTHlnR1YZZFRmKmacy2al4F27E4YEx6XJl7yQ 2026-02-12 03:20:05+00:00| seen|...

CVE-2024-27833

creationtimestamp| type| source ---|---|--- 2025-02-24 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-092/...

SLiMS 安全漏洞

SLiMS Senayan Library Management System is a free library management system from SLiMS open source. A security vulnerability exists in SLiMS version 9.6.1, which stems from the month parameter of monitorreportday.php not being handled correctly, allowing remote attackers to elevate privileges...

CVE-2025-25505

creationtimestamp| type| source ---|---|--- 2025-02-21 17:18:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4922 2025-02-21 19:46:48+00:00| seen| https://t.me/cvedetector/18675 2025-08-12 16:01:32+00:00| seen|...

A week in security (February 10 – February 16)

Last week on Malwarebytes Labs: A suicide reveals the lonely side of AI chatbots, with Courtney Brown Lock and Code S06E03 Apple ordered to grant access to users’ encrypted data Phishing evolves beyond email to become latest Android app threat Apple fixes zero-day vulnerability used in "extremely...

Monero 18.3.4 Denial of Service

Monero version 18.3.4 suffers from a memory exhaustion vulnerability. Hello, About an hour ago, a group appearing to be named WyRCV2 posted a note on the nostr social network, which can be found at the following link:...

CVE-2024-11347

creationtimestamp| type| source ---|---|--- 2025-02-13 18:58:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113998108985571018 2025-02-13 19:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3flxeq5x2z 2025-02-13 20:34:56+00:00| seen|...

CVE-2024-11346

creationtimestamp| type| source ---|---|--- 2025-02-13 18:58:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113998108970991505 2025-02-13 19:16:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3flvan2a2a 2025-02-13 20:35:03+00:00| seen|...