China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial Access

The China-linked threat actor behind the zero-day exploitation of security flaws in Microsoft Exchange servers in January 2021 has shifted its tactics to target the information technology IT supply chain as a means to obtain initial access to corporate networks. That's according to new findings...

Android zero-day vulnerabilities actively abused. Update as soon as you can

Google has issued updates to fix 43 vulnerabilities in Android, including two zero-days that are being actively exploited in targeted attacks. The updates are available for Android 12, 12L, 13, 14, and 15. Android vendors are notified of all issues at least a month before publication, however, th...

CVE-2025-1918

creationtimestamp| type| source ---|---|--- 2025-03-05 04:32:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6481 2025-03-05 06:04:08+00:00| seen| https://t.me/cvedetector/19580 2025-03-05 07:19:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljmgv67ghe2o 2025-03-06...

Linux Distros Unpatched Vulnerability : CVE-2024-36886

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in error path Sam Page sam4k working with Trend Micro Zero Day Initiative...

Multiple Zero-Day Vulnerabilities in Broadcom VMware ESXi and Other Products

On Tuesday, March 4, 2025, Broadcom published a critical security advisory VMSA-2025-0004 on 3 new zero-day vulnerabilities affecting multiple VMware products, including ESXi, Workstation, and Fusion. The most severe of the vulnerabilities is CVE-2025-22224, a critical vulnerability in ESXi and...

Multiple Zero-Day Vulnerabilities in Broadcom VMware ESXi and Other Products

On Tuesday, March 4, 2025, Broadcom published a critical security advisory VMSA-2025-0004 on 3 new zero-day vulnerabilities affecting multiple VMware products, including ESXi, Workstation, and Fusion. The most severe of the vulnerabilities is CVE-2025-22224, a critical vulnerability in ESXi and...

Vulnerabilities fixed in Google Android and Samsung Mobile

Google has fixed several vulnerabilities in Android and Samsung Mobile, including two zero-day vulnerabilities that were actively exploited in targeted attacks. The vulnerabilities are in the Android kernel and the ExternalStorageProvider.java, which can lead to local privilege escalation and...

Hackers Exploit Paragon Partition Manager Driver Vulnerability in Ransomware Attacks

Threat actors have been exploiting a security vulnerability in Paragon Partition Manager's BioNTdrv.sys driver in ransomware attacks to escalate privileges and execute arbitrary code. The zero-day flaw CVE-2025-0289 is part of a set of five vulnerabilities that was discovered by Microsoft,...

⚡ THN Weekly Recap: Alerts on Zero-Day Exploits, AI Breaches, and Crypto Heists

This week, a 23-year-old Serbian activist found themselves at the crossroads of digital danger when a sneaky zero-day exploit turned their Android device into a target. Meanwhile, Microsoft pulled back the curtain on a scheme where cybercriminals used AI tools for harmful pranks, and a massive...

CVE-2025-23118

creationtimestamp| type| source ---|---|--- 2025-03-01 02:27:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6035 2025-03-01 06:24:44+00:00| seen| https://t.me/cvedetector/19205 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-376/ 2025-08-19 18:29:29+00:0...

CVE-2025-23119

creationtimestamp| type| source ---|---|--- 2025-03-01 02:27:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6031 2025-03-01 06:24:44+00:00| seen| https://t.me/cvedetector/19206 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-377/ 2025-08-19 18:29:29+00:0...

Amnesty Finds Cellebrite's Zero-Day Used to Unlock Serbian Activist's Android Phone

A 23-year-old Serbian youth activist had their Android phone targeted by a zero-day exploit developed by Cellebrite to unlock the device, according to a new report from Amnesty International. "The Android phone of one student protester was exploited and unlocked by a sophisticated zero-day exploi...

CVE-2025-26594

creationtimestamp| type| source ---|---|--- 2025-02-25 17:35:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114065731196406120 2025-02-25 19:03:30+00:00| seen| https://t.me/cvedetector/18894 2025-02-26 07:27:09+00:00| seen| https://bsky.app/profile/bsd.cafe/post/3lj2tzliwsqw2...

CVE-2025-26595

creationtimestamp| type| source ---|---|--- 2025-02-25 17:35:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114065731196406120 2025-02-25 19:03:31+00:00| seen| https://t.me/cvedetector/18895 2025-02-26 07:27:09+00:00| seen| https://bsky.app/profile/bsd.cafe/post/3lj2tzliwsqw2...

CVE-2025-26597

creationtimestamp| type| source ---|---|--- 2025-02-25 16:23:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5329 2025-02-25 17:35:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114065731196406120 2025-02-25 19:03:36+00:00| seen| https://t.me/cvedetector/18897 2025-02-26...

CVE-2025-26599

creationtimestamp| type| source ---|---|--- 2025-02-25 16:23:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5325 2025-02-25 17:35:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114065731196406120 2025-02-25 19:03:24+00:00| seen| https://t.me/cvedetector/18890 2025-02-26...

CVE-2025-26600

creationtimestamp| type| source ---|---|--- 2025-02-25 16:22:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5313 2025-02-25 17:32:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114065717510498810 2025-02-25 17:35:32+00:00| seen|...

CVE-2025-1521

creationtimestamp| type| source ---|---|--- 2025-02-25 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-096/...

CVE-2025-1520

creationtimestamp| type| source ---|---|--- 2025-02-25 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-099/...

CVE-2024-27834

creationtimestamp| type| source ---|---|--- 2025-02-24 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-093/ 2025-10-01 17:45:01+00:00| seen| Telegram/NsEmTFCOjSJbTHlnR1YZZFRmKmacy2al4F27E4YEx6XJl7yQ 2026-02-12 03:20:05+00:00| seen|...