CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

	'Lemon Sandstorm' Underscores Risks to Middle East Infrastructure Description: The Iranian state-backed group targeted the operational technology of a critical national infrastructure (CNI) network and persisted in its network for years, but ultimately failed. Source: Dark Reading May 8th, 2025 (about 2 months ago)
	PowerSchool paid thieves to delete stolen student, teacher data. Crooks may have lied Source: TheRegister May 8th, 2025 (about 2 months ago)
	LockBit ransomware gang hacked, victim negotiations exposed Description: The LockBit ransomware gang has suffered a data breach after its dark web affiliate panels were defaced and replaced with a message linking to a MySQL database dump. [...] Source: BleepingComputer May 8th, 2025 (about 2 months ago)
	'CoGUI' Phishing Kit Helps Chinese Hackers Target Japan Description: Japan is being peppered with an overwhelming volume of spam, thanks to a new platform popular across the East China Sea. Source: Dark Reading May 8th, 2025 (about 2 months ago)
	After that 2024 Windows fiasco, CrowdStrike has a plan – jobs cuts, leaning on AI Source: TheRegister May 7th, 2025 (about 2 months ago)
	Threat Attack Daily - 7th of May 2025 Description: Threat Attack Daily - 7th of May 2025 Source: DarkWebInformer May 7th, 2025 (about 2 months ago)
	🏴‍☠️ Devman has just published a new victim : gmanetwork.com Description: 2.5 million USD Source: Ransomware.live May 7th, 2025 (about 2 months ago)
	Ransomware Attack Update for the 7th of May 2025 Description: Ransomware Attack Update for the 7th of May 2025 Source: DarkWebInformer May 7th, 2025 (about 2 months ago)
CVE-2024-25744	In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point. This is related to... Description: In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point. This is related to arch/x86/coco/tdx/tdx.c and arch/x86/mm/mem_encrypt_amd.c. EPSS Score: 0.05% SSVC Exploitation: none Source: CVE May 7th, 2025 (about 2 months ago)
CVE-2024-23759	Deserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary code via "search" parameter of the... Description: Deserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary code via "search" parameter of the Parcelshopfinder/AddAddressBookEntry" function. EPSS Score: 64.42% SSVC Exploitation: none Source: CVE May 7th, 2025 (about 2 months ago)