BIT-POWERSHELL-2025-25004 PowerShell Elevation of Privilege Vulnerability

Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...

Google Identifies Three New Russian Malware Families Created by COLDRIVER Hackers

A new malware attributed to the Russia-linked hacking group known as COLDRIVER has undergone numerous developmental iterations since May 2025, suggesting an increased "operations tempo" from the threat actor. The findings come from Google Threat Intelligence Group GTIG, which said the...

CVE-2025-61303

Hatching Triage Sandbox Windows 10 build 2004 2025-08-14 and Windows 10 LTSC 20212025-08-14 contains a vulnerability in its Windows behavioral analysis engine that allows a submitted malware sample to evade detection and cause denial-of-analysis. The vulnerability is triggered when a sample...

EUVD-2025-35102

Hatching Triage Sandbox Windows 10 build 2004 2025-08-14 and Windows 10 LTSC 20212025-08-14 contains a vulnerability in its Windows behavioral analysis engine that allows a submitted malware sample to evade detection and cause denial-of-analysis. The vulnerability is triggered when a sample...

CVE-2025-61303

Hatching Triage Sandbox Windows 10 build 2004 2025-08-14 and Windows 10 LTSC 20212025-08-14 contains a vulnerability in its Windows behavioral analysis engine that allows a submitted malware sample to evade detection and cause denial-of-analysis. The vulnerability is triggered when a sample...

CVE-2025-61303

The RecordedFuture Triage cloud sandboxing service (specifically the Windows behavioral analysis engine ) is vulnerable to uncontrolled resource consumption in Windows 10 build 2004 (2025-08-14) and Windows 10 LTSC 2021 (2025-08-14) . A malicious sample can recursively spawn a large number of chi...

CVE-2025-61303

Hatching Triage Sandbox Windows 10 build 2004 2025-08-14 and Windows 10 LTSC 20212025-08-14 contains a vulnerability in its Windows behavioral analysis engine that allows a submitted malware sample to evade detection and cause denial-of-analysis. The vulnerability is triggered when a sample...

Microsoft PowerShell Elevation of Privilege Vulnerability (Oct 2025) - Windows

This host is missing an important security update for PowerShell Core according to Microsoft security advisory CVE-2025-25004. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft PowerShell Elevation of Privilege Vulnerability (Oct 2025) - Linux

This host is missing an important security update for PowerShell Core according to Microsoft security advisory CVE-2025-25004. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft PowerShell Elevation of Privilege Vulnerability (Oct 2025) - Mac OS X

This host is missing an important security update for PowerShell Core according to Microsoft security advisory CVE-2025-25004. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2025-25004

Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...

CVE-2025-25004

Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...

CVE-2025-25004

Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...

CVE-2025-25004

Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...

CVE-2025-25004 PowerShell Elevation of Privilege Vulnerability

...

CVE-2025-25004

CVE-2025-25004 affects Microsoft PowerShell. The connected documents corroborate a local privilege escalation vulnerability due to improper access control, enabling an authorized attacker to obtain elevated privileges on the host. The advisory entries (including NCSC-2025-0313) assign CVSS v3.1/3...

CVE-2025-25004 PowerShell Elevation of Privilege Vulnerability

...

EUVD-2025-34354

Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...

PowerShell Elevation of Privilege Vulnerability

Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...

Researchers Expose TA585’s MonsterV2 Malware Capabilities and Attack Chain

Cybersecurity researchers have shed light on a previously undocumented threat actor called TA585 that has been observed delivering an off-the-shelf malware called MonsterV2 via phishing campaigns. The Proofpoint Threat Research Team described the threat activity cluster as sophisticated, leveragi...