LR pixel

Oracle Identity Manager Pre-Auth RCE

von | 3. Dez. 2025 | Unkategorisiert

What is the Vulnerability? CVE-2025-61757 is a critical pre-authentication remote code execution vulnerability in Oracle Identity Manager’s REST WebServices. This vulnerability allows an unauthenticated attacker to exploit URI and matrix parameter parsing weaknesses...

EDR-Freeze Bypass Technique

von | 3. Dez. 2025 | Unkategorisiert

What is the EDR‑Freeze? EDR‑Freeze is a proof‑of‑concept technique that leverages legitimate Windows Error Reporting (WER) components to suspend (place into a ‘frozen’ state) endpoint protection processes from user mode. Instead of exploiting drivers or kernel...

UNC1549 Critical Infrastructure Espionage Attack

von | 3. Dez. 2025 | Unkategorisiert

What is the Attack? A suspected Iran-linked espionage group tracked as UNC1549 is actively targeting aerospace, defense, and telecommunications organizations across Europe and other regions. The threat actor employs a combination of highly tailored spear-phishing,...

runC Container Escape Vulnerabilities

von | 7. Nov. 2025 | Unkategorisiert

What is the Vulnerability? High-severity vulnerabilities in runc (CVE-2025-31133, CVE-2025-52565, CVE-2025-52881) were disclosed in early November 2025. A malicious or compromised container image can abuse how runc handles masked paths, bind-mounts, and special files...