Rewterz Alert

Crimson Collective claims breach of Red Hat’s private GitHub repos, stealing 570GB+ of source code, & 800+ client reports tied to major orgs (finance, defense, healthcare, gov). Details: rewterz.com/threat-advisor… #RedHat #CybersecurityNews #DataBreach #infosec #ThreatIntel #CTI

VMware has patched 3 critical flaws (CVE-2025-41250/51/52) in vCenter & NSX. Bugs allow SMTP injection & username leaks, enabling credential theft and access risks. NSA flagged 2 issues. Patch now to secure infra: rewterz.com/threat-advisor… #infosec #CybersecurityNews #vulnerable

Critical VMware Tools/Aria zero-day (CVE-2025-41244) lets a local user escalate to root via a simple file trick and has seen in-the-wild use since 2024. Patch and hunt now. Read the advisory: rewterz.com/threat-advisor… #vmware #infosec #CyberSecurity #VulnerabilityReport #CTI

Zero-click RCE in WhatsApp via malicious DNG (CVE-2025-55177,CVE-2025-43300) can compromise iOS/macOS with no action. Patch WhatsApp & Apple OS now: rewterz.com/threat-advisor… #WhatsApp #zerodayattack #infosecurity #CyberSecurity #vulnerability #threatreport #CTI #networksecurity

Apache Airflow 3.0.3 flaw (CVE-2025-54831) exposes DB creds, API keys & tokens to READ-only users, bypassing security controls. Patch to 3.0.4+ now to protect sensitive data. Full details: rewterz.com/threat-advisor… #zeroday #cloudsecurity #CybersecurityNews #Apache #VulnResearch

Cisco zero-day CVE-2025-20352 is actively exploited. An SNMP stack overflow can lead to root RCE or DoS on ~2M devices, and default community strings make it worse. Patch immediately. Read details: rewterz.com/threat-advisor… #zerodayexploit #infosec #CybersecurityNews #threatactor

SolarWinds Web Help Desk hit by CVE-2025-26399 — a critical RCE flaw bypassing past patches. Unauthenticated attackers can fully compromise systems. Patch with Hotfix 12.8.7 HF1 now: rewterz.com/threat-advisor… #CybersecurityNews #infosecurity #Vulnerability #CTI #solarwinds #SOC

SonicWall SMA 100 devices under attack: OVERSTEP rootkit steals creds, OTP seeds & persists even after upgrades. Urgent firmware 10.2.2.2-92sv released — patch now or risk long-term compromise. Full details: rewterz.com/threat-advisor… #Cybersecurity #ransomwareattack #CTI #Infosec

A flaw in Linux KSMBD (CVE-2025-38501) lets attackers exhaust SMB sessions using the simple KSMBDrain exploit, halting file access & shares. Is your kernel patched? Full details: rewterz.com/threat-advisor… #CyberSecurity #Linux #VulnerabilityReport #CTI #ThreatDetection #DDoS #SOC

A threat actor claims to have breached American Income Life, leaking data of 150,000+ policyholders with PII & financial details. Identity theft risk looms. Full advisory: rewterz.com/threat-advisor… #CyberSecurity #Infosec #CTI #ThreatDetection #ThreatIntel #DataProtection #USA

CISA warns of two critical flaws in Delta Electronics’ DIALink that let attackers bypass auth & tamper with OT systems. Could this open the door to full ICS takeover? Read the advisory: rewterz.com/threat-advisor… #ICS #CyberSecurity #CISA #infosecurity #ThreatIntel #vulnerability

Critical flaw in Microsoft Entra ID (CVE-2025-55241) could let attackers impersonate Global Admins and seize full control of tenants. How close did we come to a cloud-wide takeover? Read now: rewterz.com/threat-advisor… #cloudsecurity #infosec #Microsoft #ZeroTrust #CyberSecurity

Samsung Galaxy phones ship with AppCloud by Israeli firm IronSource, a preinstalled app accused of covert data collection and reappearing after updates. Should users be worried? Full story: rewterz.com/threat-advisor… #privacy #DataSecurity #infosec #CyberSecurity #ksa #MENA #CTI

Chrome hit with its 6th zero-day of 2025 (CVE-2025-10585) in the V8 engine, already exploited in the wild. Update now or risk full system compromise. Details here: rewterz.com/threat-advisor… #Google #zeroday #CyberSecurityNews #exploited #Security #vulnerable #ThreatResearch #CTI

TP-Link routers have a zero-day RCE in TR-069 with a PoC that even bypasses ASLR. Could your home network be hijacked? Patch immediately. Read the advisory: rewterz.com/threat-advisor… #cybersecuritytips #infosecuritymagazine #networksecurity #vulnerable #CTI #securityupdates

A zero-day in Apple’s ImageIO (CVE-2025-43300) is under active attack, letting crafted images trigger code execution on older iPhones & iPads. Patch iOS/iPadOS 16.7.12 now to stay secure. Full details: rewterz.com/threat-advisor… #Apple #iOS #zerodayattack #CyberSecurity #CTI #IOC

Could attackers pull BitLocker keys from memory and unlock your drives? BitPixie enables exactly that — TPM+PIN and all. Read the full advisory now: rewterz.com/threat-advisor… #securitybreach #infosec #CyberSecurityNews #ThreatIntel #IOC #CyberCrime #NetworkSecurity

npm “Shai-Hulud” attack compromised 40+ packages, stealing GitHub/NPM/AWS keys. Even CrowdStrike repos were hit before removal. How deep does this supply chain breach go? Read the full advisory: rewterz.com/threat-advisor… #CybersecurityNews #infosec #DevSecOps #Crowdstrike #CTI

A new ransomware crew is rewriting the playbook. Warlock, a LockBit 3.0 spin-off, is hitting enterprises worldwide with advanced tactics & .x2anylock payloads. Are your defenses ready? Read the full breakdown: rewterz.com/threat-advisor… #CybersecurityNews #IOC #CTI #infosecurity

Multiple Adobe Substance 3D flaws (CVSS 7.8) let attackers hijack systems via crafted files. Code execution risks are real. Are your design tools secure? Full details: rewterz.com/threat-advisor… #CyberSecurityAwareness #infosec #Adobe #vulnerability #Threat #CTI #Pentesting #SOC