LR pixel

runC Container Escape Vulnerabilities

von | 7. Nov. 2025 | Unkategorisiert

What is the Vulnerability? High-severity vulnerabilities in runc (CVE-2025-31133, CVE-2025-52565, CVE-2025-52881) were disclosed in early November 2025. A malicious or compromised container image can abuse how runc handles masked paths, bind-mounts, and special files...

F5 Data Breach Attack

von | 18. Okt. 2025 | Unkategorisiert

What is the Attack? A sophisticated nation-state actor gained long-term access to F5’s corporate networks and exfiltrated files from BIG-IP product development and engineering knowledge-management systems, including portions of BIG-IP source code and information about...

RediShell RCE Vulnerability

von | 15. Okt. 2025 | Unkategorisiert

What is the Vulnerability? A Use-After-Free (UAF) bug in Redis’s Lua scripting subsystem (tracked as CVE-2025-49844, “RediShell”) allows an authenticated attacker who can run Lua scripts to escape the Lua sandbox and achieve arbitrary native code execution on the...

Oracle E-Business Suite RCE Vulnerability

von | 7. Okt. 2025 | Unkategorisiert

What is the Vulnerability? CVE-2025-61882 is a critical (CVSS 9.8) unauthenticated remote code execution vulnerability in the BI Publisher integration of Oracle E-Business Suite’s Concurrent Processing component. The flaw is remotely exploitable over HTTP without...

BRICKSTORM Espionage Campaign

von | 2. Okt. 2025 | Unkategorisiert

What is the Attack? BRICKSTORM is a stealthy, Go-based backdoor deployed by the China-nexus actor UNC5221, enabling long-term persistence and espionage via compromised network appliances in US organizations. Since March 2025, GTIG (Google Threat Intelligence Group)...

AndroxGh0st Malware Actively Used in the Wild

von | 2. Okt. 2025 | Unkategorisiert

FortiGuard Labs is aware that AndroxGh0st malware is actively used in the field to primarily target .env files that contain confidential information such as credentials for various high profile applications such as – AWS, O365, SendGrid, and Twilio from the...

npm Supply Chain Attack

von | 24. Sep. 2025 | Unkategorisiert

What is the Attack? On September 8, 2025, attackers phished the npm maintainer “qix” and stole their two-factor authentication (2FA) credentials. With that access, they published malicious versions of some very popular npm packages (including debug, chalk, and...