CVE-2020-12812 — FortiOS SSL VPN : Active exploitation in the wild of this older vulnerability Vulnerabilities CyberDefenderDecember 26, 2025December 26, 20253 mins0 CVE-2020-12812 is a critical authentication bypass vulnerability in the SSL VPN component of FortiOS, the operating system…continue reading..
Massive Spotify Music Scrape Exposed: Inside Anna’s Archive’s 300TB Data Release Latest Cyber Attack CyberDefenderDecember 26, 2025December 26, 20255 mins0 A group known as Anna’s Archive—previously recognized for hosting and distributing large-scale “shadow libraries” of books and…continue reading..
CVE-2025-14847: A Critical MongoDB Vulnerability Demanding Immediate Action Vulnerabilities CyberDefenderDecember 26, 2025December 26, 20256 mins0 At its core, CVE-2025-14847 is a memory disclosure vulnerability caused by improper handling of zlib-compressed protocol headers.…continue reading..
Your AI Security Team Is Training on Last Year’s Attack Patterns — While Attackers Are Writing This Year’s Tomorrow CyberSecurity News AegironDecember 26, 2025December 26, 202514 mins0 The Tug of War: Your AI Security Team Trains on Yesterday’s Attacks While Hackers Deploy Tomorrow’s The…continue reading..
The Nosy Neighbor: How China’s LongNosedGoblin APT Uses Your IT Admin Tools Against You Cyber Threat Intelligence AegironDecember 25, 2025December 25, 202510 mins0 A Masterclass in Living-Off-The-Land Attack Infrastructure Through Group Policy Abuse 1. Executive Summary For years, defenders have…continue reading..
CVE-2025-55315: Detection Rules and SIEM Queries for HTTP Request Smuggling Cyber Threat Intelligence AegironDecember 25, 2025December 25, 202510 mins1 Quick Reference Detection Indicators Primary Indicators Secondary Indicators WAF Detection Rules ModSecurity Rules (OWASP CRS Compatible) Nginx…continue reading..
CVE-2025-55315: Critical Request Smuggling Vulnerability Exposes ASP.NET Core and Tenable Identity Systems Threat Advisories AegironDecember 25, 2025December 25, 202516 mins0 Quick Facts CVE ID CVE-2025-55315 CVSS Score 9.9 (Critical) – the most severe ASP.NET vulnerability seen to…continue reading..
Wonderland Android Malware: Inside Central Asia’s Most Advanced SMS-Driven Fraud Platform Cyber Threat Intelligence AegironDecember 25, 2025December 25, 202510 mins0 1. What Is Wonderland Malware? Wonderland (formerly tracked as WretchedCat) is a highly advanced Android malware family…continue reading..
Direwolf Malware: Complete Detection and Threat Hunting Rules Cyber Threat Intelligence AegironDecember 25, 2025December 25, 202563 mins1 YARA Rules Rule 1: Direwolf Core Malware Detection yara Rule 2: Direwolf PowerShell Dropper yara Rule 3:…continue reading..
Direwolf Malware: Inside a Silent Predator Stealing Credentials, Crypto, and Control Cyber Threat Intelligence AegironDecember 25, 2025December 25, 202511 mins0 What Is Direwolf Malware? Direwolf malware is a sophisticated, multi-stage malicious framework that functions as both an…continue reading..
