CVE-2025-29824-Exploit

🚨 CVE-2025-29824 漏洞利用：PipeMagic 勒索软件链 📌 关键漏洞概述 Windows CLFS 中的权限提升漏洞 → SYSTEM 权限劫持 由 Storm-2460 威胁组织 在活跃勒索软件攻击中利用 🖥️ 受影响系统 展开系统列表 🧩 漏洞利用链工作流程 graph LR AInitial Access --|certutil| BMalicious MSBuild Payload B -- CPipeMagic Trojan C --|CVE-2025-29824| DCLFS Kernel Exploit D --|RtlSetAllBits| EToken...

BianLian and RansomExx Exploit SAP NetWeaver Flaw to Deploy PipeMagic Trojan

At least two different cybercrime groups BianLian and RansomExx are said to have exploited a recently disclosed security flaw in SAP NetWeaver tracked as CVE-2025-31324, indicating that multiple threat actors are taking advantage of the bug. Cybersecurity firm ReliaQuest, in a new update publishe...

PipeMagic Trojan Exploits Windows Zero-Day Vulnerability to Deploy Ransomware

Microsoft has revealed that a now-patched security flaw impacting the Windows Common Log File System CLFS was exploited as a zero-day in ransomware attacks aimed at a small number of targets. "The targets include organizations in the information technology IT and real estate sectors of the United...