LR pixel

EDR-Freeze Bypass Technique

von | 3. Dez. 2025 | Unkategorisiert

What is the EDR‑Freeze? EDR‑Freeze is a proof‑of‑concept technique that leverages legitimate Windows Error Reporting (WER) components to suspend (place into a ‘frozen’ state) endpoint protection processes from user mode. Instead of exploiting drivers or kernel...

Oracle Identity Manager Pre-Auth RCE

von | 3. Dez. 2025 | Unkategorisiert

What is the Vulnerability? CVE-2025-61757 is a critical pre-authentication remote code execution vulnerability in Oracle Identity Manager’s REST WebServices. This vulnerability allows an unauthenticated attacker to exploit URI and matrix parameter parsing weaknesses...

UNC1549 Critical Infrastructure Espionage Attack

von | 3. Dez. 2025 | Unkategorisiert

What is the Attack? A suspected Iran-linked espionage group tracked as UNC1549 is actively targeting aerospace, defense, and telecommunications organizations across Europe and other regions. The threat actor employs a combination of highly tailored spear-phishing,...

runC Container Escape Vulnerabilities

von | 7. Nov. 2025 | Unkategorisiert

What is the Vulnerability? High-severity vulnerabilities in runc (CVE-2025-31133, CVE-2025-52565, CVE-2025-52881) were disclosed in early November 2025. A malicious or compromised container image can abuse how runc handles masked paths, bind-mounts, and special files...

F5 Data Breach Attack

von | 18. Okt. 2025 | Unkategorisiert

What is the Attack? A sophisticated nation-state actor gained long-term access to F5’s corporate networks and exfiltrated files from BIG-IP product development and engineering knowledge-management systems, including portions of BIG-IP source code and information about...

RediShell RCE Vulnerability

von | 15. Okt. 2025 | Unkategorisiert

What is the Vulnerability? A Use-After-Free (UAF) bug in Redis’s Lua scripting subsystem (tracked as CVE-2025-49844, “RediShell”) allows an authenticated attacker who can run Lua scripts to escape the Lua sandbox and achieve arbitrary native code execution on the...

Oracle E-Business Suite RCE Vulnerability

von | 7. Okt. 2025 | Unkategorisiert

What is the Vulnerability? CVE-2025-61882 is a critical (CVSS 9.8) unauthenticated remote code execution vulnerability in the BI Publisher integration of Oracle E-Business Suite’s Concurrent Processing component. The flaw is remotely exploitable over HTTP without...