This list highlights top 10 CVEs of 2025, not as a ranking, but as a curated snapshot of the vulnerabilities that dominated headlines and...
From socradar.io
Huntress reports an uptick in threat actors abusing the Velociraptor open-source DFIR tool, linked to incidents involving WSUS exploitation, VS Code tunnels, and more.
From huntress.com
[Guest Diary] Hunting for SharePoint In-Memory ToolShell Payloads, Author: Jesse La Grew
From isc.sans.edu
Warlock emerged in June–July 2025 after being deployed via exploitation of the ToolShell Microsoft SharePoint zero-day (CVE-2025-53770) by a China-linked actor tracked as Storm-2603, which also used...
From hendryadrian.com
Chinese threat actors exploited a patched SharePoint flaw, CVE-2025-53770, in global espionage attacks.
From thehackernews.com
The China-based actor behind the Warlock ransomware may not be a new player and has links to malicious activity dating as far back as 2019.
From security.comChina-based threat actors also compromised networks of government agencies in countries in Africa and South America.
From security.com