The Bitter End: Unraveling Eight Years of Espionage Antics—Part One

June 4, 2025

The Bitter End: Unraveling Eight Years of Espionage Antics—Part One

June 04, 2025
Nick Attfield and Konstantin Klinger in collaboration with Threatray’s Abdallah Elshinbary and Jonas Wagner
This is a two-part blog series, detailing research undertaken in collaboration …

Published Date:
Jun 04, 2025 (12 hours, 54 minutes ago)

Vulnerabilities has been mentioned in this article.

CVE-2024-43572

Source: Read More

Previous ArticlePlay ransomware crims exploit SimpleHelp flaw in double-extortion schemes

Next Article FOSS Weekly #25.23: Helwan Linux, Quarkdown, Konsole Tweaks, Keyboard Shortcuts and More Linux Stuff

Highlights

CVE-2025-40664 – TCMAN GIM Authentication Bypass

May 26, 2025

CVE ID : CVE-2025-40664

Published : May 26, 2025, 1:15 p.m. | 3 hours, 42 minutes ago

Description : Missing authentication vulnerability in TCMAN GIM v11. This allows an unauthenticated attacker to access the resources /frmGestionUser.aspx/GetData, /frmGestionUser.aspx/updateUser and /frmGestionUser.aspx/DeleteUser.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Spectral – flexible JSON/YAML linter

August 8, 2025

CVE-2025-47671 – LETSCMS SQL Injection

May 23, 2025

CVE-2025-7157 – Code-projects Online Note Sharing SQL Injection

July 8, 2025

Top 10 Use Cases of Vibe Coding in Large-Scale Node.js Applications

Cloudsmith launches ML Model Registry to provide a single source of truth for AI models and datasets

Kong Acquires OpenMeter to Unlock AI and API Monetization for the Agentic Era

Microsoft Graph CLI to be retired

‘Cronos: The New Dawn’ was by far my favorite experience at Gamescom 2025 — Bloober might have cooked an Xbox / PC horror masterpiece

ASUS built a desktop gaming PC around a mobile CPU — it’s an interesting, if flawed, idea

Hollow Knight: Silksong arrives on Xbox Game Pass this week — and Xbox’s September 1–7 lineup also packs in the horror. Here’s every new game.

The Xbox remaster that brought Gears to PlayStation just passed a huge milestone — “ending the console war” and proving the series still has serious pulling power

Magento (Adobe Commerce) or Optimizely Configured Commerce: Which One to Choose

Magento (Adobe Commerce) or Optimizely Configured Commerce: Which One to Choose

Updates from N|Solid Runtime: The Best Open-Source Node.js RT Just Got Better

Scale Your Business with AI-Powered Solutions Built for Singapore’s Digital Economy

‘Cronos: The New Dawn’ was by far my favorite experience at Gamescom 2025 — Bloober might have cooked an Xbox / PC horror masterpiece

‘Cronos: The New Dawn’ was by far my favorite experience at Gamescom 2025 — Bloober might have cooked an Xbox / PC horror masterpiece

ASUS built a desktop gaming PC around a mobile CPU — it’s an interesting, if flawed, idea

Hollow Knight: Silksong arrives on Xbox Game Pass this week — and Xbox’s September 1–7 lineup also packs in the horror. Here’s every new game.

The Bitter End: Unraveling Eight Years of Espionage Antics—Part One

The Bitter End: Unraveling Eight Years of Espionage Antics—Part One

CISA Adds TP-Link and WhatsApp Flaws to KEV Catalog Amid Active Exploitation

Pennsylvania Attorney General’s Office Recovers from Ransomware Attack

Improve HTTP Error Testing with Laravel’s requestException() Method

Windows 11 should Sherlock this audio app — but I hope it doesn’t

laravel-lang/http-statuses

CVE-2022-31807 – SiPass Firmware Update Integrity Bypass

CVE-2025-40664 – TCMAN GIM Authentication Bypass

Spectral – flexible JSON/YAML linter

CVE-2025-47671 – LETSCMS SQL Injection

CVE-2025-7157 – Code-projects Online Note Sharing SQL Injection

The Bitter End: Unraveling Eight Years of Espionage Antics—Part One

The Bitter End: Unraveling Eight Years of Espionage Antics—Part One

Related Posts