Symantec – Securitydive

Multiple Ransomware Groups may have exploited a Patched Windows Flaw as Zero-Day

admin4 months ago03 mins

The vulnerability in question is tracked as CVE-2025-29824 and it was patched by Microsoft with its April 2025 Patch Tuesday updates. The flaw impacts the Windows Common Log File System (CLFS) and it can be exploited by an attacker to escalate privileges. On the day it released the patches, Microsoft revealed that CVE-2025-29824 had been exploited by…

Shuckworm’s Sophisticated Cyber Campaign Targets Ukraine Military Mission

admin5 months ago06 mins

Shuckworm’s cyber campaign focus on Ukraine has continued into 2025, targeting the military mission of a Western country based in the Eastern European nation. This first activity in this campaign occurred in February 2025, and it continued into March. The initial infection vector used by the attackers appears to have been an infected removable drive….