Malware: Agent Tesla — Phishing-Driven Credential Theft Campaigns Targeting the Travel Sector Malware AegironDecember 18, 2025December 19, 20259 mins0 Executive overview Agent Tesla is a well-known information-stealing malware that has been active for years and continues…continue reading..
Malware: ShadyPanda — Large-Scale Browser Extension Hijacking Operation Malware AegironDecember 18, 2025December 19, 20258 mins0 Threat classification Overview ShadyPanda refers to a coordinated, large-scale malicious operation focused on hijacking legitimate browser extensions…continue reading..
Malware: EtherRAT — React Server Components–Based Remote Access Trojan Malware AegironDecember 18, 2025December 19, 202510 mins0 Threat classification Executive summary Security researchers have confirmed that a North Korea–associated threat actor is actively exploiting…continue reading..
CVE-2025-55681: Local Privilege Escalation in Windows Desktop Window Manager (DWM) Vulnerabilities AegironDecember 18, 2025December 19, 20259 mins0 Key Details (Technical Snapshot) Technical Summary (What This Vulnerability Is) CVE-2025-55681 is a memory safety vulnerability in…continue reading..
BugTrace-AI: Using Generative AI to Rethink Vulnerability Detection Vulnerabilities CyberDefenderDecember 18, 2025December 18, 20254 mins0 BugTrace-AI is an open-source security testing framework that leverages generative artificial intelligence to assist in identifying vulnerabilities…continue reading..
CVE-2025-32210: Critical Deserialization Flaw in NVIDIA Isaac Lab Enabling Remote Code Execution Threat Advisories AegironDecember 18, 2025December 18, 20259 mins0 Vulnerability overview CVSS Vector Breakdown This score reflects how easily the issue can be exploited and how…continue reading..
Udados Botnet: Anatomy of a Financial Cybercrime Engine Malware CyberDefenderDecember 18, 2025December 18, 20258 mins0 Udados is a malware-based botnet primarily designed for credential harvesting, fraud, and distributed malicious activities. It is…continue reading..
Kimwolf: Technical Analysis of a Large-Scale Android Botnet Targeting Consumer Devices Latest Cyber Attack AegironDecember 18, 2025December 18, 20256 mins0 Executive Overview Kimwolf is a large Android-based botnet that compromised over 1.8 million devices worldwide, primarily Android…continue reading..
CVE-2025-59374: When a Trusted ASUS Update Turned Into a Silent Backdoor Threat Advisories AegironDecember 18, 2025December 22, 202510 mins0 Vulnerability Name: Embedded Malicious Code in ASUS Live UpdateCVE ID: CVE-2025-59374CVSS v4.0 Score: 9.3 – CriticalCWE: CWE-506…continue reading..
CVE-2025-12885: Stored Script Injection Risk in WordPress Document Embedding Threat Advisories AegironDecember 18, 2025December 19, 202510 mins0 Vulnerability Overview CVE ID: CVE-2025-12885Vulnerability Type: Stored Cross-Site Scripting (XSS)Severity: MediumCVSS v3.1 Score: 6.4Attack Complexity: LowPrivileges Required:…continue reading..
