Vulnerability (CVE)
A China-affiliated threat actor tracked as UNC6384 exploited an unpatched Windows shortcut vulnerability, ZDI-CAN-25373 (CVE-2025-9491, CVSS 7.0), to target European diplomatic and government entities in Hungary, Belgium, Italy, the Netherlands, and Serbia...
Microsoft quietly fixed CVE-2025-9491, a Windows LNK file UI misinterpretation flaw rated 7.8/7.0, in its November 2025 Patch Tuesday updates, according to ACROS Security's 0patch. The flaw, disclosed by Trend Micro's Zero Day Initiative in March 2025 as...
A critical remote code execution flaw in React Server Components, CVE-2025-55182 (CVSS 10.0) and tracked as React2Shell, came under extensive exploitation within hours of disclosure, with Amazon observing attempts from infrastructure tied to Chinese...
Kaspersky attributed attacks on government agencies and the electric power sector in Russia, Brazil, and Kazakhstan to a previously undocumented actor it calls Armored Likho, which uses obfuscated modular RATs and infostealers built to bypass dynamic...