CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
Unending ransomware attacks are a symptom, not the sickness
Source: TheRegister
May 12th, 2025 (about 2 months ago)
Fake AI Tools Used to Spread Noodlophile Malware, Targeting 62,000+ via Facebook Lures
Description: Threat actors have been observed leveraging fake artificial intelligence (AI)-powered tools as a lure to entice users into downloading an information stealer malware dubbed Noodlophile. "Instead of relying on traditional phishing or cracked software sites, they build convincing AI-themed platforms – often advertised via legitimate-looking Facebook groups and viral social media campaigns,"
Source: TheHackerNews
May 12th, 2025 (about 2 months ago)

CVE-2025-3597
Firelight Lightbox < 2.3.15 - Contributor+ Stored XSS
Description: The Firelight Lightbox WordPress plugin before 2.3.15 does not prevent users with post writing capabilities from executing arbitrary Javascript when the jQuery Metadata library is enabled. While this feature is meant to only be available to Pro version users, it can be activated in the free version too, making it theoretically exploitable there as well.

EPSS Score: 0.03%

Source: CVE
May 12th, 2025 (about 2 months ago)
DOGE worker's old creds found exposed in infostealer malware dumps
Source: TheRegister
May 12th, 2025 (about 2 months ago)
Reflected cross-site scripting vulnerability in Ricoh laser printers and MFPs which implement Web Image Monitor
Description: Ricoh laser printers and MFPs (multifunction printers) which implement Web Image Monitor contain a reflected cross-site scripting vulnerability.
Source: Japan Vulnerability Notes (JVN)
May 12th, 2025 (about 2 months ago)
🏴‍☠️ Safepay has just published a new victim : morricetransportation.com
Description: [AI generated] Morrice Transportation is a well-established logistics and transportation company based in Windsor, Ontario, Canada. The company provides ground freight transportation services across North America. They offer a range of services including cross-border shipping, expedited service, and hazardous materials hauling. Morrice Transport utilizes a fleet of over 300 pieces of equipment to deliver solutions for transport challenges.
Source: Ransomware.live
May 11th, 2025 (about 2 months ago)
🏴‍☠️ Safepay has just published a new victim : gewandhaus.bayern
Description: [AI generated] "Gewandhaus.bayern" is a company based in Munich, Germany, specializing in the provision of high-end designer fashion and accessories. They offer a wide range of products from renowned luxury designers globally. Aside from physical shopping, the company also offers online services. The company promises authenticity in all its products while providing exclusive shopping experience to customers.
Source: Ransomware.live
May 11th, 2025 (about 2 months ago)
🏴‍☠️ Safepay has just published a new victim : scheuerle-stuttgart.de
Description: [AI generated] Scheuerle Stuttgart is a leading company in the heavy transport industry. Based in Stuttgart, Germany, it specializes in producing vehicles for the transportation of heavy and special loads. Their portfolio includes modular transporters, self-propelled modular transporters (SPMTs), and industrial and shipyard transporters. Scheuerle Stuttgart is globally recognized for its innovative solutions, advanced design, and robust machinery, serving various industries including construction and logistics.
Source: Ransomware.live
May 11th, 2025 (about 2 months ago)
🏴‍☠️ Safepay has just published a new victim : metten-maas.de
Description: [AI generated] N/A
Source: Ransomware.live
May 11th, 2025 (about 2 months ago)
🏴‍☠️ Safepay has just published a new victim : hagemann-h.de
Description: [AI generated] N/A
Source: Ransomware.live
May 11th, 2025 (about 2 months ago)