WebRAT via GitHub: Proof-of-Concepts as a Malware Delivery Channel Cyber Threat Intelligence AegironDecember 24, 2025December 24, 202521 mins0 Fake Exploit Code as an Active Malware Distribution Channel (Dec 23) The security research ecosystem is increasingly…continue reading..
Shai-Hulud: When npm Installs Became a Worm Cyber Threat Intelligence AegironDecember 24, 2025December 24, 202514 mins0 Shai-Hulud Campaign: Why This Attack Is Different The Shai-Hulud campaign marks a turning point in how supply…continue reading..
CVE-2025-11419: Red Hat Keycloak TLS Client-Initiated Renegotiation DoS Threat Advisories AegironDecember 24, 2025December 24, 202510 mins0 Vulnerability Header Attribute Details CVE ID CVE-2025-11419 CVSS Score 7.5 (High) Severity High / Important Published December…continue reading..
CVE-2025-61882: Critical Oracle E-Business Suite Vulnerability Being Actively Exploited by Cl0p Ransomware Group Threat Advisories AegironDecember 24, 2025December 24, 20258 mins0 What’s Going On Right Now On December 23, 2024, Oracle issued a critical security advisory for a…continue reading..
Stealka Infostealer: The Windows Malware Stealing Your Cryptocurrency and Passwords Right Now Cyber Threat Intelligence AegironDecember 24, 2025December 24, 202516 mins0 What’s Actually Going On There’s a piece of malware called Stealka that’s been actively spreading since December…continue reading..
Malicious npm Package “lotusbail” Discovered: WhatsApp Credential Theft and Backdoor Installation Cyber Threat Intelligence AegironDecember 24, 2025December 24, 20259 mins0 Package Overview Aspect Details Package Name lotusbail Package Registry npm Package Type Malicious Library Masquerade Target WhatsApp…continue reading..
CVE-2025-68561: AutomatorWP SQL Injection — Database Breach in 60 Seconds Threat Advisories AegironDecember 24, 2025December 24, 202513 mins0 Vulnerability Summary Aspect Details CVE ID CVE-2025-68561 Vulnerability Type SQL Injection (CWE-89) Affected Software AutomatorWP WordPress Plugin…continue reading..
CVE-2025-13183: Persistent Stored XSS Flaw in Otello Enables Silent User Session Compromise Threat Advisories AegironDecember 24, 2025December 24, 202527 mins0 Vulnerability Summary Detail Information CVE ID CVE-2025-13183 What is it? Stored Cross-Site Scripting (XSS) Where? Otello by…continue reading..
XRed Malware: A Silent Backdoor Exploiting Tax Compliance Urgency Latest Cyber Attack AegironDecember 24, 2025December 24, 202511 mins0 Executive Summary Between October and December 2025, a targeted malware campaign using the XRed backdoor compromised multiple…continue reading..
Tycoon Phishing Kit : How Phishing-as-a-Service Defeats Modern MFA Initial Access CyberDefenderDecember 24, 2025December 24, 20254 mins0 The Tycoon phishing kit is a commercial phishing-as-a-service (PhaaS) framework widely used to steal cloud identity credentials,…continue reading..
