Microsoft Warns of Malvertising Campaign Infecting Over 1 Million Devices Worldwide

Microsoft has disclosed details of a large-scale malvertising campaign that's estimated to have impacted over one million devices globally as part of what it said is an opportunistic attack designed to steal sensitive information. The tech giant, which detected the activity in early December 2024...

Malvertising campaign leads to info stealers hosted on GitHub

In early December 2024, Microsoft Threat Intelligence detected a large-scale malvertising campaign that impacted nearly one million devices globally in an opportunistic attack to steal information. The attack originated from illegal streaming websites embedded with malvertising redirectors, leadi...

CVE-2025-25949

creationtimestamp| type| source ---|---|--- 2025-03-03 01:29:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6126 2025-03-03 02:58:43+00:00| seen| https://t.me/cvedetector/19280 2025-08-19 18:29:28+00:00| seen| MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18...

CVE-2025-1491

creationtimestamp| type| source ---|---|--- 2025-03-01 13:27:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6075 2025-03-01 16:27:04+00:00| seen| https://t.me/cvedetector/19238 2025-03-02 11:46:59+00:00| seen| Telegram/fQwhT3m-JQIcT-R9UMsIx5GWX6a33IPjwKCBE6dg2xBQgVw 2025-08-19...

CVE-2025-1786

creationtimestamp| type| source ---|---|--- 2025-03-01 10:27:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6070 2025-03-01 12:16:03+00:00| seen| https://t.me/cvedetector/19228 2025-03-02 11:46:58+00:00| seen| Telegram/vdRzNlP426m6lJFCKYmqSHAel4wRmXumX0Kn4OWneuONNAR...

CVE-2025-24843

creationtimestamp| type| source ---|---|--- 2025-02-28 19:32:16+00:00| seen| https://t.me/cvedetector/19163 2025-02-28 22:27:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6015 2025-03-02 11:45:38+00:00| seen| Telegram/YhrIuRaaxOvic-tltQtazPDeUyYDoUK7zsc0lz6DbDNlsexr 2025-08-22...

From Vulnerability Scanning to Risk Management: The Complete VMDR Advantage

What if your vulnerability management tool did more than just scan and instead helped you take control of cyber risks across your business? CISA defines “vulnerability management” as the process by which organizations identify, analyze, and manage vulnerabilities in a critical service’s operating...

WordPress Yoast SEO Plugin < 2.1 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:yoast:yoastseo"; if description...

Take Command | Rapid7’s 2025 Cybersecurity Summit: First Look at Our Speaker Lineup

Take Command Summit 2025 is shaping up to be one of the most impactful cybersecurity events of the year, bringing together Rapid7’s own security experts alongside leading industry voices for a full day of insights into today’s evolving attack landscape. This virtual summit will offer actionable...

CVE-2025-23359

creationtimestamp| type| source ---|---|--- 2025-02-11 19:39:29+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113986946256894513 2025-02-12 00:58:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113988200059363819 2025-02-12 01:15:58+00:00| seen|...

Microsoft Identifies 3,000 Leaked ASP.NET Keys Enabling Code Injection Attacks

Microsoft is warning of an insecure practice wherein software developers are incorporating publicly disclosed ASP.NET machine keys from publicly accessible resources, thereby putting their applications in attackers' pathway. The tech giant's threat intelligence team said it observed limited...

Take Command | Rapid7’s 2025 Cybersecurity Summit: Own Your Attack Surface on April 9

Save the date:April 9, 2025 Take Command is back. After a hugely successful event last year, Rapid7’s cybersecurity summit returns with another stellar lineup to equip security teams with the latest threat intelligence, expert insights, and real-world strategies to take control of an evolving...

CVE-2024-26139

OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack of certain security controls on the profile edit functionality, an authenticated attacker with low privileges can gain administrative privileges on the web...

CVE-2025-25064

creationtimestamp| type| source ---|---|--- 2025-02-03 19:23:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113941586596378393 2025-02-03 20:16:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhceddalcz2e 2025-02-03 21:59:56+00:00| seen|...

Defeating Future Threats Starts Today

Welcome to this week's edition of the Threat Source newsletter. You don't need me to tell you that security is constantly changing and that more change is on its way. The enthusiastic adoption of new AI systems will inevitably lead to more demands on cybersecurity teams. Not only will these syste...

Google: Over 57 Nation-State Threat Groups Using AI for Cyber Operations

Over 57 distinct threat actors with ties to China, Iran, North Korea, and Russia have been observed using artificial intelligence AI technology powered by Google to further enable their malicious cyber and information operations. "Threat actors are experimenting with Gemini to enable their...

GamaCopy Mimics Gamaredon Tactics in Cyber Espionage Targeting Russian Entities

A previously unknown threat actor has been observed copying the tradecraft associated with the Kremlin-aligned Gamaredon hacking group in its cyber attacks targeting Russian-speaking entities. The campaign has been attributed to a threat cluster dubbed GamaCopy , which is assessed to share overla...

CVE-2025-23006

creationtimestamp| type| source ---|---|--- 2025-01-23 09:24:00+00:00| seen| https://thehackernews.com/2025/01/sonicwall-urges-immediate-patch-for.html 2025-01-23 09:32:14+00:00| seen| https://infosec.exchange/users/zeljkazorz/statuses/113876974535447292 2025-01-23 09:53:45+00:00| seen|...

CVE-2025-0500

creationtimestamp| type| source ---|---|--- 2025-01-15 19:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsi3evqzb2h 2025-01-15 19:53:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfsk5jn72q2k 2025-01-15 20:59:21+00:00| seen|...

Securing Success: Stories from the SOC Webinar Series

In today’s fast-paced threat landscape, SOC Security Operations Center teams are under relentless pressure. Cyberattacks are evolving, threat volumes are skyrocketing, and attackers are exploiting vulnerabilities faster than ever. To navigate these challenges, Rapid7 has launched the "Securing...