threatintel

CVE Alert: CVE-2025-0617

January 30, 2025

Vulnerability Summary: CVE-2025-0617 An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the...

CVE Alert: CVE-2025-0353

January 30, 2025

Vulnerability Summary: CVE-2025-0353 The Divi Torque Lite – Best Divi Addon, Extensions, Modules & Social Modules plugin for WordPress is...

[PLAY] – Ransomware Victim: Night Hawk

January 30, 2025

Ransomware Group: PLAY VICTIM NAME: Night Hawk NOTE: No files or stolen information are by RedPacket Security. Any legal issues...

[MONTI] – Ransomware Victim: nenok[.]de

January 30, 2025

Ransomware Group: MONTI VICTIM NAME: nenokde NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...

[CLOAK] – Ransomware Victim: Centromedicoenova

January 30, 2025

Ransomware Group: CLOAK VICTIM NAME: Centromedicoenova NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...

CISA: CISA Releases Eight Industrial Control Systems Advisories

January 30, 2025

CISA Releases Eight Industrial Control Systems Advisories CISA released eight Industrial Control Systems (ICS) advisories on January 30, 2025. These...

CISA: CISA Releases Fact Sheet Detailing Embedded Backdoor Function of Contec CMS8000 Firmware

January 30, 2025

CISA Releases Fact Sheet Detailing Embedded Backdoor Function of Contec CMS8000 Firmware CISA released a fact sheet, , detailing an...

[AKIRA] – Ransomware Victim: Perfect Plastic

January 30, 2025

Ransomware Group: AKIRA VICTIM NAME: Perfect Plastic NOTE: No files or stolen information are by RedPacket Security. Any legal issues...

[MONTI] – Ransomware Victim: FENSTERMAKER

January 30, 2025

Ransomware Group: MONTI VICTIM NAME: FENSTERMAKER NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...

[AKIRA] – Ransomware Victim: Benuta

January 30, 2025

Ransomware Group: AKIRA VICTIM NAME: Benuta NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...

[QILIN] – Ransomware Victim: Ottawa Family Physicians

January 30, 2025

Ransomware Group: QILIN VICTIM NAME: Ottawa Family Physicians NOTE: No files or stolen information are by RedPacket Security. Any legal...

CVE Alert: CVE-2024-57436

January 30, 2025

Vulnerability Summary: CVE-2024-57436 RuoYi v4.8.0 was discovered to allow unauthorized attackers to view the session ID of the admin in...

CVE Alert: CVE-2023-37413

January 30, 2025

Vulnerability Summary: CVE-2023-37413 IBM Aspera Faspex 5.0.0 through 5.0.10 could disclose sensitive username information due to an observable response discrepancy....

CVE Alert: CVE-2024-57439

January 30, 2025

Vulnerability Summary: CVE-2024-57439 An issue in the reset password interface of ruoyi v4.8.0 allows attackers with Admin privileges to cause...

CVE Alert: CVE-2025-24792

January 30, 2025

Vulnerability Summary: CVE-2025-24792 Snowflake PHP PDO Driver is a driver that uses the PHP Data Objects (PDO) extension to connect...

CVE Alert: CVE-2025-24374

January 30, 2025

Vulnerability Summary: CVE-2025-24374 Twig is a template language for PHP. When using the ?? operator, output escaping was missing for...

CVE Alert: CVE-2025-24791

January 30, 2025

Vulnerability Summary: CVE-2025-24791 snowflake-connector-nodejs is a NodeJS driver for Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake NodeJS...

CVE Alert: CVE-2023-37412

January 30, 2025

Vulnerability Summary: CVE-2023-37412 IBM Aspera Faspex 5.0.0 through 5.0.10 could allow a privileged user to make system changes without proper...

CVE Alert: CVE-2023-37398

January 30, 2025

Vulnerability Summary: CVE-2023-37398 IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default,...

CVE Alert: CVE-2023-35907

January 30, 2025

Vulnerability Summary: CVE-2023-35907 IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default,...

CVE Alert: CVE-2025-24527

January 30, 2025

Vulnerability Summary: CVE-2025-24527 An issue was discovered in Akamai Enterprise Application Access (EAA) before 2025-01-17. If an admin knows another...

[LYNX] – Ransomware Victim: Silverado Contractors

January 30, 2025

Ransomware Group: LYNX VICTIM NAME: Silverado Contractors NOTE: No files or stolen information are by RedPacket Security. Any legal issues...

[AKIRA] – Ransomware Victim: Menway

January 30, 2025

Ransomware Group: AKIRA VICTIM NAME: Menway NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...

[APT73] – Ransomware Victim: ome[.]tv

January 30, 2025

Ransomware Group: APT73 VICTIM NAME: ometv NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...

threatintel

CVE Alert: CVE-2025-0617

CVE Alert: CVE-2025-0353

[PLAY] – Ransomware Victim: Night Hawk

[MONTI] – Ransomware Victim: nenok[.]de

[CLOAK] – Ransomware Victim: Centromedicoenova

CISA: CISA Releases Eight Industrial Control Systems Advisories

CISA: CISA Releases Fact Sheet Detailing Embedded Backdoor Function of Contec CMS8000 Firmware

[AKIRA] – Ransomware Victim: Perfect Plastic

[MONTI] – Ransomware Victim: FENSTERMAKER

[AKIRA] – Ransomware Victim: Benuta

[QILIN] – Ransomware Victim: Ottawa Family Physicians

CVE Alert: CVE-2024-57436

CVE Alert: CVE-2023-37413

CVE Alert: CVE-2024-57439

CVE Alert: CVE-2025-24792

CVE Alert: CVE-2025-24374

CVE Alert: CVE-2025-24791

CVE Alert: CVE-2023-37412

CVE Alert: CVE-2023-37398

CVE Alert: CVE-2023-35907

CVE Alert: CVE-2025-24527

[LYNX] – Ransomware Victim: Silverado Contractors

[AKIRA] – Ransomware Victim: Menway

[APT73] – Ransomware Victim: ome[.]tv

[CICADA3301] – Ransomware Victim: Johnson’s Nursery

Unlocking the Power of Virtual Private Networks

CISA: CISA Releases Three Industrial Control Systems Advisories

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: CISA and FBI Release Advisory on How Threat Actors Chained Vulnerabilities in Ivanti Cloud Service Applications

You may have missed