Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A newly identified APT group, Armored Likho, is conducting a phishing campaign targeting government agencies and electric power sectors in Russia, Brazil, and Kazakhstan. The group employs a sophisticated infostealer known as BusySnake Stealer, which is difficult to detect and recover from. Attack v...
Three critical vulnerabilities in Windows systems have been reported, including CVE-2025-59230, which allows attackers to gain admin rights, and CVE-2025-54100, a PowerShell vulnerability requiring urgent patches. Additionally, CVE-2025-9491 has been exploited by advanced persistent threat (APT) gro...
Microsoft has released an out-of-band security update for a critical vulnerability, CVE-2025-59287, in Windows Server Update Services (WSUS) that allows unauthenticated remote code execution. The vulnerability, stemming from insecure deserialization of untrusted data, is being actively exploited in...
A China-linked hacking group, UNC6384, has exploited a Windows zero-day vulnerability to conduct cyber espionage against European diplomats in Hungary, Belgium, and other nations. The attacks, which occurred in September and October 2025, involved spearphishing emails that delivered malicious LNK fi...
