Threats Day Bulletin: AI Tools in Malware, Botnets, GDI Flaws, Election Attacks & More
Summary: Check Point detailed three now-patched Windows GDI vulnerabilities - CVE-2025-30388, CVE-2025-53766, and CVE-2025-47984 - involving out-of-bounds memory access triggered by malformed EMF and EMF+ records in gdiplus.dll and gdi32full.dll, patched by Microsoft in May, July, and August 2025. Cloudflare reported it mitigated over 898 million malicious requests aimed at Moldova's Central Election Commission during a 12-hour window on the September 28 Parliament election day, part of attacks that also hit other election-related, civil society, and news websites.
What you should know: Check Point noted one information disclosure flaw stayed active for years because the original patch was only partial - a reminder that a shipped fix is not the same as a verified one. And 898 million requests in 12 hours against a single election authority shows the volume a coordinated disruption campaign can bring.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2025-30388CVE-2025-47984CVE-2025-53766
- Related
- Microsoft Patch Tuesday, August 2025 Edition Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026