CVE-2025-0282

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

December 10, 2025

Last Seen

October 14, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Operation Escaneo Targets Latin American Critical Infrastructure78.7

Operation Escaneo is a coordinated cyberattack attributed to the MexicanMafia group, targeting critical infrastructure across Latin America, primarily Mexico. The campaign, which spanned from 2025 to 2026, utilized sophisticated tools including a proprietary reconnaissance engine named Kimera and ex...

Ivanti Connect Secure Zero-Day CVE-2026-104935 Exploited in the Wild72.9

On October 13, 2026, Ivanti disclosed a high-severity zero-day vulnerability tracked as CVE-2026-104935, affecting its Connect Secure (ICS) VPN appliances. This authentication bypass flaw allows unauthenticated attackers to execute arbitrary commands, with exploitation confirmed since at least Octob...

Google Reports 90 Exploited Zero-Day Vulnerabilities in 202571.8

Google's Threat Intelligence Group tracked 90 zero-day vulnerabilities exploited in 2025, a rise from 78 in 2024. Less than half of these vulnerabilities were attributed to specific threat actors, with spyware vendors and China being the most prominent. This increase highlights ongoing cybersecurity...

Critical Vulnerability in Ivanti Endpoint Manager Requires Immediate Patching45.3

Ivanti has issued security updates for a critical vulnerability (CVE-2025-10573) in its Endpoint Manager (EPM) product. This flaw could allow remote, unauthenticated attackers to execute arbitrary JavaScript code, affecting users and administrators of the impacted versions. Immediate updates are adv...