1st December

Research.Checkpoint •lorenf • December 1, 2025

Share: View original

For the latest discoveries in cyber research for the week of 1st December, please download our Threat Intelligence Bulletin .

TOP ATTACKS AND BREACHES

Check Point IPS, Threat Emulation and Harmony Endpoint provide protection against this threat (Oracle Concurrent Processing Remote Code Execution; Ransomware.Win.Clop; Ransomware.Wins.Clop; Ransomware.Wins.Clop.ta.*)

Check Point Threat Emulation provides protection against this threat (Ransomware.Wins.INC)

VULNERABILITIES AND PATCHES

Check Point IPS provides protection against this threat (D-Link DNS NAS Devices Command Injection (CVE-2024-10914); D-Link DNS Series Command Injection; TP-Link Archer AXE75 Command Injection (CVE-2024-53375))

THREAT INTELLIGENCE REPORTS

Check Point Threat Emulation provides protection against this threat (Trojan.Wins.ShaiHulud.ta.*)

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cyber Threats: Oracle RCE and Ransomware Attacks Identified Recent cybersecurity reports detail multiple threats, including Oracle Concurrent Processing Remote Code Execution and various Clop ransomware variants. Affected systems include those protected by Check Point IPS and Threat Emulation technologies, which are designed to mitigate these vulnerabilities. Key vulnerabilities also include Microsoft Windows Kernel Privilege Escalation (CVE-2025-62215). 2 sources 22

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (2)

CVE-2024-10914 CVE-2024-53375

Platforms (3)

D-Link DNS NAS Devices D-Link DNS Series TP-Link Archer Axe75

Ransomware Groups (3)

Ransomware.Win.Clop Ransomware.Wins.Clop Ransomware.Wins.INC

Vulnerabilities (3)

D-Link DNS NAS Devices Command Injection D-Link DNS Series Command Injection TP-Link Archer Axe75 Command Injection