UNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology Sectors

Companies in the legal services, software-as-a-service SaaS providers, Business Process Outsourcers BPOs, and technology sectors in the U.S. have been targeted by a suspected China-nexus cyber espionage group to deliver a known backdoor referred to as BRICKSTORM. The activity, attributed to UNC52...

UNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology Sectors

Companies in the legal services, software-as-a-service SaaS providers, Business Process Outsourcers BPOs, and technology sectors in the U.S. have been targeted by a suspected China-nexus cyber espionage group to deliver a known backdoor referred to as BRICKSTORM. The activity, attributed to UNC52...

Security Bulletin: Multiple vulnerabilities in IBM® SDK, Java™ Technology Edition affect IBM Tivoli Network Manager (CVE-2025-50106, CVE-2025-30749, CVE-2025-30761, CVE-2025-30754).

Summary Multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 17, used by IBM Tivoli Network Manager IP Edition v4.2 core components. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products|...

Design and Development of an Intelligent LLM-Based LDAP Honeypot

Cybersecurity threats continue to increase, with a growing number of previously unknown attacks each year targeting both large corporations and smaller entities. This scenario demands the implementation of advanced security measures, not only to mitigate damage but also to anticipate emerging...

CVE-2025-9971

Certain models of Industrial Cellular Gateway developed by Planet Technology have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to manipulate the device via a specific functionality...

The vulnerabilities of Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM), related to reading beyond the buffer in memory, allow attackers to disclose protected information.

The vulnerabilities of Intel Active Management Technology AMT and Intel Standard Manageability ISM are related to reading beyond the buffer in memory. Exploiting these vulnerabilities can allow a remote attacker to disclose sensitive information that is protected by these technologies...

Vane Viper Malvertising Network Posed as Legit Adtech in Global Scams

Infoblox links Vane Viper to PropellerAds, exposing a global malvertising network posing as adtech while spreading malware and running online scams...

CVE-2025-8411

CVE-2025-8411 describes an XSS vulnerability in Dokuzsoft Technology’s E-Commerce Web Design Product due to improper neutralization of input during web page generation, enabling XSS through HTTP headers. Affected versions are before 11.08.2025. The impact is web-based cross-site scripting with lo...

Security Bulletin: Multiple vulnerabilities in IBM SDK, Java technology affect IBM Tivoli Composite Application Manager for Transactions (Response Time)

Summary IBM SDK, Java Technology Edition is used by IBM Tivoli Composite Application Manager for Transactions Response Time CVE-2025-50106, CVE-2025-30749, CVE-2025-30761, CVE-2025-30754 Vulnerability Details CVEID:CVE-2025-50106 DESCRIPTION: Vulnerability in the Oracle Java SE, Oracle GraalVM fo...

CVE-2025-9971

Certain models of Industrial Cellular Gateway developed by Planet Technology have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to manipulate the device via a specific functionality...

CVE-2025-9972

Certain models of Industrial Cellular Gateway developed by Planet Technology have an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the device...

CVE-2025-9972 Planet Technology｜Industrial Cellular Gateway - OS Command Injection

Certain models of Industrial Cellular Gateway developed by Planet Technology have an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the device...

CVE-2025-9972

Planet Technology’s Industrial Cellular Gateway models are affected by an OS Command Injection vulnerability (CVE-2025-9972). The CVSS reports a critical impact (NETWORK, NO privileges, no user interaction required) with high impact to confidentiality, integrity, and availability. The vulnerabili...

CVE-2025-9972 Planet Technology｜Industrial Cellular Gateway - OS Command Injection

Certain models of Industrial Cellular Gateway developed by Planet Technology have an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the device...

CVE-2025-9971 Planet Technology｜Industrial Cellular Gateway - Missing Authentication

Certain models of Industrial Cellular Gateway developed by Planet Technology have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to manipulate the device via a specific functionality...

CVE-2025-9971

CVE-2025-9971 concerns Planet Technology’s Industrial Cellular Gateway, where a missing authentication vulnerability allows unauthenticated remote manipulation via a specific functionality. The connected sources describe the root cause as lack of authentication and indicate high impact on confide...

CVE-2025-9971 Planet Technology｜Industrial Cellular Gateway - Missing Authentication

Certain models of Industrial Cellular Gateway developed by Planet Technology have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to manipulate the device via a specific functionality...

PT-2025-38125

Name of the Vulnerable Software and Affected Versions: Planet Technology Industrial Cellular Gateway affected versions not specified Description: Certain models of Industrial Cellular Gateway developed by Planet Technology are susceptible to a missing authentication issue. This allows...

CVE-2025-9971: Missing Authentication for Critical Function

Certain models of Industrial Cellular Gateway developed by Planet Technology have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to manipulate the device via a specific functionality...

CVE-2025-9972: Improper Neutralization of Special Elements used in an OS Command

Certain models of Industrial Cellular Gateway developed by Planet Technology have an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the device...