{"vulnerability": "CVE-2025-8088", "sightings": [{"uuid": "34a664b2-1a3b-4507-bfca-064ccbd1f239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/zpeppem.bsky.social/post/3lzv2454fuk2q", "content": "", "creation_timestamp": "2025-09-28T08:07:57.913757Z"}, {"uuid": "b0296659-56cc-4612-a02e-8a0d220d365e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://gist.github.com/Darkcrai86/45d8d26e94a127cb7821df60518684d7", "content": "", "creation_timestamp": "2025-10-02T18:15:11.000000Z"}, {"uuid": "3bb18ec8-7917-437c-bb9d-c09ecdc627d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3ly7xhwa6s22k", "content": "", "creation_timestamp": "2025-09-07T05:29:51.964520Z"}, {"uuid": "e53dc696-1c8e-4d76-b944-e189e8cc9517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/115605271381311264", "content": "", "creation_timestamp": "2025-11-24T15:00:52.030552Z"}, {"uuid": "2c4a1567-19e7-4ae5-bc3e-5a906230fedb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3m6f3rqzrm526", "content": "", "creation_timestamp": "2025-11-24T15:01:18.669273Z"}, {"uuid": "d004765e-8940-41dd-9b89-3e08ab9579de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-28T08:23:31.000000Z"}, {"uuid": "bab2fb38-49e3-42fe-bb04-f6f5cb096a6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lvvbkbr7ur23", "content": "", "creation_timestamp": "2025-08-08T12:40:21.378997Z"}, {"uuid": "d0fe4c15-3a7d-4359-9d90-c5d68d87e61c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvvg36hllc2s", "content": "", "creation_timestamp": "2025-08-08T14:01:23.173657Z"}, {"uuid": "ad6541f0-2cb6-476c-9653-8c2f37eb21f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lvw5fr73sh2a", "content": "", "creation_timestamp": "2025-08-08T20:58:55.078703Z"}, {"uuid": "bd960a12-9ebc-467b-b225-8c0c3ce1b7ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/114995151190677752", "content": "", "creation_timestamp": "2025-08-08T20:59:15.614916Z"}, {"uuid": "c6e81d64-bfc2-47ac-98f8-5322d27b4148", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3lvxdig2d3pu2", "content": "", "creation_timestamp": "2025-08-09T08:21:08.352784Z"}, {"uuid": "10e08e85-f444-4a60-bbd3-a4bd8f00e629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lvxe3teg2b2v", "content": "", "creation_timestamp": "2025-08-09T08:31:17.978029Z"}, {"uuid": "bc1991f3-c945-4f64-bdc6-95ae510d6405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/phishingnews.bsky.social/post/3lvxfai27r52c", "content": "", "creation_timestamp": "2025-08-09T08:51:47.840476Z"}, {"uuid": "f3e13feb-8c8c-4f42-b521-62673944ebd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lvxfy7jvch2c", "content": "", "creation_timestamp": "2025-08-09T09:05:03.140597Z"}, {"uuid": "73339a24-952a-43fc-998b-c232c32a469e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/114998472640425726", "content": "", "creation_timestamp": "2025-08-09T11:03:57.995635Z"}, {"uuid": "060d9c65-5a2c-48e0-9653-e27315029d98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lvxskvowbe2a", "content": "", "creation_timestamp": "2025-08-09T12:50:15.547953Z"}, {"uuid": "e53819fd-d186-4b7b-935c-ecff8ee66861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-20e54cf4-073bc1cf0c797c2d", "content": "", "creation_timestamp": "2025-08-09T13:19:19.809638Z"}, {"uuid": "6a9f1d11-1d11-49ab-aff8-398136c04038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lvxx26d2z7u2", "content": "", "creation_timestamp": "2025-08-09T14:10:28.073323Z"}, {"uuid": "5f3c304b-623a-4545-86b6-9b91fdf03056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/hackread.bsky.social/post/3lvxzavosys2z", "content": "", "creation_timestamp": "2025-08-09T14:49:57.463792Z"}, {"uuid": "1a05725d-196f-42b0-a6f7-9c6941b6e515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lvy25wdymk2u", "content": "", "creation_timestamp": "2025-08-09T15:06:10.416444Z"}, {"uuid": "5f75b99a-376d-44e1-809d-71ccc7fe3879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/valentin.cocaud.dev/post/3lyspiu7inc2k", "content": "", "creation_timestamp": "2025-09-14T16:27:41.892354Z"}, {"uuid": "3e2673bf-cffd-4382-98f2-fa2a4341891f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/365tipu.cz/post/3lvy3iksfic2y", "content": "", "creation_timestamp": "2025-08-09T15:30:02.351576Z"}, {"uuid": "343e1f3c-588a-49bf-a6ad-0752b5a9206e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-29T03:12:20.000000Z"}, {"uuid": "9ce5edc5-e4df-4ebd-a0d7-838095ce8321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvyo2vffyz2p", "content": "", "creation_timestamp": "2025-08-09T21:02:24.601136Z"}, {"uuid": "e89280c6-e025-4aca-939d-16d7d0e828e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lvyqhea6pb52", "content": "", "creation_timestamp": "2025-08-09T21:45:18.580222Z"}, {"uuid": "0c248679-d8c2-4519-9d19-a91778bbccd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lvz2j6nllx52", "content": "", "creation_timestamp": "2025-08-10T00:45:22.168527Z"}, {"uuid": "a92c9dde-02bf-4ee7-b313-8710cf6ecf92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lvzaaose322r", "content": "", "creation_timestamp": "2025-08-10T02:27:44.795944Z"}, {"uuid": "e6732c9c-878e-4523-b072-5d9bdbbcd3b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://infosec.exchange/users/defendopsdiaries/statuses/115002209662085548", "content": "", "creation_timestamp": "2025-08-10T02:54:19.379371Z"}, {"uuid": "89c6fa30-ebcf-40fc-bce1-6267c8b43534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/defendopsdiaries.bsky.social/post/3lvzbq6wvz32q", "content": "", "creation_timestamp": "2025-08-10T02:54:20.240487Z"}, {"uuid": "144e7af0-90d3-4208-b79b-14a12254e089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lvzimoyfr22d", "content": "", "creation_timestamp": "2025-08-10T04:57:37.799088Z"}, {"uuid": "694d17ad-0b3d-4e67-9313-4fef7abcfc6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lvzwkeoosm2v", "content": "", "creation_timestamp": "2025-08-10T09:06:51.771565Z"}, {"uuid": "429f1d5e-9386-461f-ab08-9db61be48260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-80880", "type": "seen", "source": "https://bsky.app/profile/campuscodi.risky.biz/post/3m6zbpwv3722y", "content": "", "creation_timestamp": "2025-12-02T15:40:54.719006Z"}, {"uuid": "4b0643a9-be89-45b7-ad30-cc080f73e525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3lvzzsza7fs26", "content": "", "creation_timestamp": "2025-08-10T10:05:27.618669Z"}, {"uuid": "499ce1b2-b586-4536-a535-1b5cf8d7ca23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/adnanguney55.bsky.social/post/3lw2etqrfha2s", "content": "", "creation_timestamp": "2025-08-10T13:22:39.297564Z"}, {"uuid": "27c453bb-2cae-4561-a1c6-e9a68ab10e04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/ssuitesoftware.bsky.social/post/3lw2gizd6q22u", "content": "", "creation_timestamp": "2025-08-10T13:52:32.681415Z"}, {"uuid": "b4409867-d02b-4880-a7d1-086e519f6c83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lw2o6f7oo22d", "content": "", "creation_timestamp": "2025-08-10T16:09:40.046215Z"}, {"uuid": "57fb2a16-6119-4422-896c-a07886de6f1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lw3cqtcm422d", "content": "", "creation_timestamp": "2025-08-10T22:17:53.392850Z"}, {"uuid": "7a741421-38a2-48b2-a190-5e8c0669c457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/hotnewspt.bsky.social/post/3lw3ey5wbv22l", "content": "", "creation_timestamp": "2025-08-10T22:57:46.540805Z"}, {"uuid": "94b4ebcd-1e39-4424-a145-38b9dfc032c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/buhane.com.tr/post/3lw3itrwnvq27", "content": "", "creation_timestamp": "2025-08-11T00:06:54.643857Z"}, {"uuid": "32d6d0b7-bab0-4e94-b492-47405a44cafd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cosmicmeta.bsky.social/post/3lw3jech3hv2v", "content": "", "creation_timestamp": "2025-08-11T00:16:08.979505Z"}, {"uuid": "d7971931-5807-4182-83f3-d3c165797fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/ahmetbutun.bsky.social/post/3lw3jlqmnkp2e", "content": "", "creation_timestamp": "2025-08-11T00:20:18.925133Z"}, {"uuid": "99a69b49-ef21-4800-88cb-1853546ce818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/buhane.com.tr/post/3lw3jtnberm27", "content": "", "creation_timestamp": "2025-08-11T00:24:43.903501Z"}, {"uuid": "d4445a53-a7a5-458d-a789-a5c863df4c75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cosmicmeta.bsky.social/post/3lw3kiayor42t", "content": "", "creation_timestamp": "2025-08-11T00:36:15.578884Z"}, {"uuid": "fa587e5d-0bb6-4a36-aa0d-7ff171e924cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cosmicmeta.bsky.social/post/3lw3kqypnno2t", "content": "", "creation_timestamp": "2025-08-11T00:41:08.761251Z"}, {"uuid": "6bcc8dfa-4477-405f-a2f9-5bff81768d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cosmicmeta.ai/post/3lw3l4u3upn2a", "content": "", "creation_timestamp": "2025-08-11T00:47:46.683663Z"}, {"uuid": "64c894df-0a7d-44bb-b7fe-dbd7d29c3c3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cosmicmetanft.bsky.social/post/3lw3lgtpx6v2z", "content": "", "creation_timestamp": "2025-08-11T00:53:21.593129Z"}, {"uuid": "e7a9af71-93f4-4d5f-a453-e0b46318bd7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cosmicmeta.io/post/3lw3ltylf762z", "content": "", "creation_timestamp": "2025-08-11T01:00:43.221075Z"}, {"uuid": "d9801414-8af6-4a7a-bd53-cfc205f7659b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/buhane.com.tr/post/3lw3mfuf3zp26", "content": "", "creation_timestamp": "2025-08-11T01:10:42.463421Z"}, {"uuid": "6bdb6f7b-ef68-4d94-9380-8df5b456bc92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/harpcoin.co/post/3lw3mphylvp2g", "content": "", "creation_timestamp": "2025-08-11T01:16:05.030663Z"}, {"uuid": "ad0f5462-c7c4-4cfd-b68b-e7d231d1bcaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cosmicmeta.io/post/3lw3n5tj2ik2p", "content": "", "creation_timestamp": "2025-08-11T01:24:07.672905Z"}, {"uuid": "034f0e34-36c0-4f95-a79b-8dc2f4ea54ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cosmicmeta.ai/post/3lw3nffo6qx2p", "content": "", "creation_timestamp": "2025-08-11T01:28:21.218118Z"}, {"uuid": "b57c0f55-c277-4534-b597-248b27204316", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/ahmetbutun.bsky.social/post/3lw3noo64562f", "content": "", "creation_timestamp": "2025-08-11T01:33:32.061495Z"}, {"uuid": "f23206fc-68d2-46d0-ab1d-a1c8c36dd8f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cosmicmeta.ai/post/3lw3o6p34n72l", "content": "", "creation_timestamp": "2025-08-11T01:42:29.874051Z"}, {"uuid": "b907d4a7-bfbf-410e-9504-7d00d414747c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115007612250867530", "content": "", "creation_timestamp": "2025-08-11T01:48:16.296806Z"}, {"uuid": "f1e1f211-175a-4406-882d-191dc4b8ebac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cosmicmeta.ai/post/3lw3ojgwy7d2w", "content": "", "creation_timestamp": "2025-08-11T01:48:30.201599Z"}, {"uuid": "613ddd7d-5005-411b-996d-bb706705388b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cosmicmeta.bsky.social/post/3lw3p6uf7w525", "content": "", "creation_timestamp": "2025-08-11T02:00:29.223903Z"}, {"uuid": "826146b5-5b33-493d-8bf8-8574d9e2dc58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cosmicmeta.ai/post/3lw3pjp74ya2l", "content": "", "creation_timestamp": "2025-08-11T02:06:32.475540Z"}, {"uuid": "05535927-c119-47ba-84da-b4faa6e4c107", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/ahmetbutun.bsky.social/post/3lw3q5kz5lc2r", "content": "", "creation_timestamp": "2025-08-11T02:17:39.354407Z"}, {"uuid": "a6ece35c-3531-45c0-8a41-787f5e798d3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cosmicmeta.io/post/3lw3qfjkkb62s", "content": "", "creation_timestamp": "2025-08-11T02:22:06.610034Z"}, {"uuid": "ca9f0cf4-3b44-4f08-8246-d2e80206b41d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lw3qp5boej2t", "content": "", "creation_timestamp": "2025-08-11T02:27:28.976723Z"}, {"uuid": "751984dd-6c7c-49ab-a581-860771bdbaef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/buhane.com.tr/post/3lw3qpgptcd2l", "content": "", "creation_timestamp": "2025-08-11T02:27:38.759327Z"}, {"uuid": "3c77abfa-28f0-4d73-98d0-f2ca25f9c2a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/ahmetbutun.bsky.social/post/3lw3r5nvy3524", "content": "", "creation_timestamp": "2025-08-11T02:35:36.156718Z"}, {"uuid": "5e14b05f-bda3-42dd-a73b-5113d607aaa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cosmicmeta.bsky.social/post/3lw3rdndica2l", "content": "", "creation_timestamp": "2025-08-11T02:38:56.727977Z"}, {"uuid": "c0106cc0-369e-4b3e-b74e-346ae6a0c3a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cosmicmetanft.bsky.social/post/3lw3rron4bt2l", "content": "", "creation_timestamp": "2025-08-11T02:46:47.931240Z"}, {"uuid": "7f64d53a-3886-4c64-9d25-eb512ce08e02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/harpcoin.co/post/3lw3rzkpoj42q", "content": "", "creation_timestamp": "2025-08-11T02:51:12.536304Z"}, {"uuid": "962a3983-bb11-4fe8-87c4-4a5d46163b20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/buhane.com.tr/post/3lw3srjyojo2s", "content": "", "creation_timestamp": "2025-08-11T03:04:36.745938Z"}, {"uuid": "a71a7a13-97e2-4f15-a6f4-319080f38ad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/katchwreck.mastodon.social.ap.brid.gy/post/3lw3tdfinb5r2", "content": "", "creation_timestamp": "2025-08-11T03:15:47.707902Z"}, {"uuid": "57b8f4a5-fe6a-473f-bd8d-2841c728b901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lw3vboj7pg2p", "content": "", "creation_timestamp": "2025-08-11T03:49:25.765920Z"}, {"uuid": "9e03d8cf-d3f1-45be-8886-ce510f0e27db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lw42pfvwxs22", "content": "", "creation_timestamp": "2025-08-11T05:26:36.140900Z"}, {"uuid": "1379da23-d2c2-4339-9e68-dad48262a453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lw4535bc5x2l", "content": "", "creation_timestamp": "2025-08-11T06:08:56.478434Z"}, {"uuid": "85840836-c803-4f49-8d6c-50b832eed3c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/115008723720771598", "content": "", "creation_timestamp": "2025-08-11T06:30:55.905388Z"}, {"uuid": "a058f9b4-6771-45ab-8b8b-2898694afa6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/danistoffers.bsky.social/post/3lw47aqbes225", "content": "", "creation_timestamp": "2025-08-11T06:47:54.426363Z"}, {"uuid": "83cb7873-248a-41dc-b171-59eaff929ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lw47jbypus2l", "content": "", "creation_timestamp": "2025-08-11T06:52:39.459714Z"}, {"uuid": "af2204f0-bba8-4931-add4-8033ab309969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://threatintel.cc/2025/08/10/winrar-zeroday-exploited-to-plant.html", "content": "", "creation_timestamp": "2025-08-10T23:48:08.000000Z"}, {"uuid": "1867e634-9f03-4b12-9fce-e487b63ec03d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lw4a2j6j2n2j", "content": "", "creation_timestamp": "2025-08-11T07:02:16.511394Z"}, {"uuid": "99c49f70-537e-4dbb-9fee-a53b474ab59e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/softfantw.bsky.social/post/3lw4av4bt3227", "content": "", "creation_timestamp": "2025-08-11T07:17:11.203479Z"}, {"uuid": "9317dcb1-2ee8-487c-af11-8926fd690138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/hackmanac.com/post/3lw4cgn2odp2o", "content": "", "creation_timestamp": "2025-08-11T07:44:51.460531Z"}, {"uuid": "75acf721-2c85-44c9-8602-1b88e867f31d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/esetresearch.bsky.social/post/3lw4h4pb4p22e", "content": "", "creation_timestamp": "2025-08-11T09:09:01.015373Z"}, {"uuid": "01c98136-a650-4f52-af66-f8bae6a0e8e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/esetresearch.bsky.social/post/3lw4h4pbu522e", "content": "", "creation_timestamp": "2025-08-11T09:09:02.125837Z"}, {"uuid": "84687f6a-cb67-4aab-8beb-78025092302c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/esetresearch.bsky.social/post/3lw4h4rinr22e", "content": "", "creation_timestamp": "2025-08-11T09:09:03.188957Z"}, {"uuid": "f1a8c9e9-365c-49f9-b041-f1bbb66e431f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/esetresearch.bsky.social/post/3lw4h4rx7lc2e", "content": "", "creation_timestamp": "2025-08-11T09:09:04.239281Z"}, {"uuid": "24da14da-4c54-43f9-96f3-15297ab8e432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/esetresearch.bsky.social/post/3lw4h4rxkd22e", "content": "", "creation_timestamp": "2025-08-11T09:09:05.264981Z"}, {"uuid": "b6f855e7-7fa2-4b78-864c-2b51d7bce27d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/esetresearch.bsky.social/post/3lw4h4sud7s2e", "content": "", "creation_timestamp": "2025-08-11T09:09:06.341785Z"}, {"uuid": "f16cd5fc-e707-4dde-bc6c-c6d2dd862874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/esetresearch.bsky.social/post/3lw4h4wu52s2e", "content": "", "creation_timestamp": "2025-08-11T09:09:07.363938Z"}, {"uuid": "e0b709b8-773f-40ea-9a77-aaf8b5644bbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/CakesTwix.shkey.cakestwix.com.ap.brid.gy/post/3lw4htgmqdfp2", "content": "", "creation_timestamp": "2025-08-11T09:21:56.596564Z"}, {"uuid": "e5a76a0b-39a7-464e-b4ce-f7395bb38c0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/technadu.com/post/3lw4hy2pkmc2j", "content": "", "creation_timestamp": "2025-08-11T09:24:15.556077Z"}, {"uuid": "a54608d1-4e26-401b-a14c-dcd61034a09b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://threatintel.cc/2025/08/10/winrar-zeroday-exploited-to-plant.html", "content": "", "creation_timestamp": "2025-08-10T23:48:08.000000Z"}, {"uuid": "c162b1b3-b6dd-46a1-b54a-198a2b0ca44c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://thehackernews.com/2025/08/winrar-zero-day-under-active.html", "content": "", "creation_timestamp": "2025-08-11T03:54:00.000000Z"}, {"uuid": "e48ec99a-8963-4fbb-a259-4252bb62b5cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3lw4k7iuhid2t", "content": "", "creation_timestamp": "2025-08-11T10:04:04.135774Z"}, {"uuid": "791e3731-eacc-46df-8ebe-6884399ff772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lw4lnc2xog2l", "content": "", "creation_timestamp": "2025-08-11T10:29:38.423949Z"}, {"uuid": "badfa362-9330-46b4-85e7-77736121dac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw4maahiwcg2", "content": "", "creation_timestamp": "2025-08-11T10:42:01.708240Z"}, {"uuid": "ec532d4f-3c15-4679-abcf-408db729f298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lw4mcc6xnnm2", "content": "", "creation_timestamp": "2025-08-11T10:42:25.797099Z"}, {"uuid": "2a304dea-0b94-434f-9da8-2cdd662f29eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/teknoblog.com/post/3lw4qrenhyk2s", "content": "", "creation_timestamp": "2025-08-11T12:01:24.093832Z"}, {"uuid": "72919727-2b43-4e9b-ac6d-0a0ff92a2268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://threatintel.cc/2025/08/10/winrar-zeroday-exploited-to-plant.html", "content": "", "creation_timestamp": "2025-08-10T23:48:08.000000Z"}, {"uuid": "86745075-3bda-4015-85eb-ab1764b00f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lw4xg2r2zi2k", "content": "", "creation_timestamp": "2025-08-11T14:00:20.948620Z"}, {"uuid": "809efe63-8163-476b-a685-c3885e299f53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3lw4xpfqxewr2", "content": "", "creation_timestamp": "2025-08-11T14:05:41.560051Z"}, {"uuid": "45242e23-4d3b-4ccd-a411-27a846350856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lw4xpnnutk2d", "content": "", "creation_timestamp": "2025-08-11T14:05:42.283287Z"}, {"uuid": "754191ee-679e-4942-adc1-0ac7c2c1aca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3lw4ycbv4aa2d", "content": "", "creation_timestamp": "2025-08-11T14:16:07.749768Z"}, {"uuid": "9fbf6430-10cb-4995-bbef-b30b65d19432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw4yddk72ar2", "content": "", "creation_timestamp": "2025-08-11T14:17:00.992066Z"}, {"uuid": "9b75396b-3be1-4c4f-8010-282606ca88e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/buzzleaktv.bsky.social/post/3lw4yzbprqp23", "content": "", "creation_timestamp": "2025-08-11T14:28:59.835143Z"}, {"uuid": "b2f320ee-182e-4ea5-bb71-36f9bc00971d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lw4zic6ewa2l", "content": "", "creation_timestamp": "2025-08-11T14:37:23.462915Z"}, {"uuid": "d822f872-d462-49e9-8d03-44999acb6889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/buzzleaktv.bsky.social/post/3lw5247e7po2l", "content": "", "creation_timestamp": "2025-08-11T14:48:30.948347Z"}, {"uuid": "3c49cd91-5f49-42b5-b68f-17ae0ab6e18d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/socprime.com/post/3lw54ava3ih2c", "content": "", "creation_timestamp": "2025-08-11T15:26:56.265196Z"}, {"uuid": "1987733c-9ed4-4021-a743-f54181d22999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3lw54q7viftr2", "content": "", "creation_timestamp": "2025-08-11T15:35:40.114251Z"}, {"uuid": "46969297-34b9-43e6-8006-9942e0360127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lw55yhjtvx2e", "content": "", "creation_timestamp": "2025-08-11T15:58:00.588389Z"}, {"uuid": "25574c4c-9c50-450f-a503-5cc750e61731", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://threatintel.cc/2025/08/10/winrar-zeroday-exploited-to-plant.html", "content": "", "creation_timestamp": "2025-08-10T23:48:08.000000Z"}, {"uuid": "f6279f94-e7ae-4e89-b500-3643efcd3b02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lw57d24pf22w", "content": "", "creation_timestamp": "2025-08-11T16:21:53.206776Z"}, {"uuid": "b2c71229-acef-49a4-921f-9034f4cb10d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/insightsintothings.com/post/3lw57k53z622d", "content": "", "creation_timestamp": "2025-08-11T16:23:45.437928Z"}, {"uuid": "a620d401-f2c1-41d6-ab4c-6a5dd4fe6fc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/sininsanity.bsky.social/post/3lw5a7hoqws2p", "content": "", "creation_timestamp": "2025-08-11T16:37:44.181922Z"}, {"uuid": "43dbbd42-297b-4405-98d9-3bab5e47be05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3lw5f5ixaqb2g", "content": "", "creation_timestamp": "2025-08-11T18:06:05.408351Z"}, {"uuid": "cab96343-089d-4c2d-bbe5-142b880e7846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3lw5fllkklj2b", "content": "", "creation_timestamp": "2025-08-11T18:13:57.850437Z"}, {"uuid": "5eea674c-b1b5-4390-81e6-8e8bb95677eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lw5gejkfcf2u", "content": "", "creation_timestamp": "2025-08-11T18:27:55.474850Z"}, {"uuid": "7117345e-58d8-44ff-b065-71cfe1c8fdf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://infosec.exchange/users/defendopsdiaries/statuses/115011619619154217", "content": "", "creation_timestamp": "2025-08-11T18:47:23.911919Z"}, {"uuid": "363f2937-5d83-4ca5-8565-ddff5c21ec22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://threatintel.cc/2025/08/10/winrar-zeroday-exploited-to-plant.html", "content": "", "creation_timestamp": "2025-08-10T23:48:08.000000Z"}, {"uuid": "1b97fd42-5b5f-4c6f-8589-229d80567818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lw5jqemqh42a", "content": "", "creation_timestamp": "2025-08-11T19:28:14.050830Z"}, {"uuid": "db79c405-ae94-4042-ad1e-ee199d6e8082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3lw5k2qalvyf2", "content": "", "creation_timestamp": "2025-08-11T19:34:10.573665Z"}, {"uuid": "0ce17dc6-c088-4b7a-91e9-abada4f67cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lw5laz3vy426", "content": "", "creation_timestamp": "2025-08-11T19:55:26.316896Z"}, {"uuid": "343f4e56-4ec8-4b94-a221-88b0049cc8c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://threatintel.cc/2025/08/10/winrar-zeroday-exploited-to-plant.html", "content": "", "creation_timestamp": "2025-08-10T23:48:08.000000Z"}, {"uuid": "9f12ef52-2f97-42a1-98a4-c5371908db46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lw636tzrqk2d", "content": "", "creation_timestamp": "2025-08-12T00:40:33.726544Z"}, {"uuid": "b1b81cbb-6fe7-4257-9a03-68cd0a416927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://threatintel.cc/2025/08/10/winrar-zeroday-exploited-to-plant.html", "content": "", "creation_timestamp": "2025-08-10T23:48:08.000000Z"}, {"uuid": "646893d8-fc46-485c-9914-2f11104d560e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lw6as72ooc2i", "content": "", "creation_timestamp": "2025-08-12T02:20:50.897940Z"}, {"uuid": "677286bb-4d4c-4d7d-a64f-4ee3568aa689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lw6cgtfl3oc2", "content": "", "creation_timestamp": "2025-08-12T02:51:45.628528Z"}, {"uuid": "a8e4be97-8b2e-412c-b44c-c5c319a1c703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/technofeed.bsky.social/post/3lw6cr5jptk2k", "content": "", "creation_timestamp": "2025-08-12T02:56:03.425217Z"}, {"uuid": "ce598adc-775d-4e22-932c-fcb371e91db4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://threatintel.cc/2025/08/10/winrar-zeroday-exploited-to-plant.html", "content": "", "creation_timestamp": "2025-08-10T23:48:08.000000Z"}, {"uuid": "f7350bff-d026-43cb-b50a-74d53882a65e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3lw6ly2ge67c2", "content": "", "creation_timestamp": "2025-08-12T05:41:07.752372Z"}, {"uuid": "84683e40-a28c-4d70-ad8b-e03cb4eae378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/utkablooger.bsky.social/post/3lw6nbs2ifa2p", "content": "", "creation_timestamp": "2025-08-12T06:04:18.892439Z"}, {"uuid": "c1eeaf3c-0785-4f74-94f8-2f8ed25c3957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lw6oykcmt22l", "content": "", "creation_timestamp": "2025-08-12T06:34:56.727242Z"}, {"uuid": "a9e16a6a-bca1-4b8d-9f0e-7696b6d25d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-1668-9ae2-4a2b-b71812026448", "content": "", "creation_timestamp": "2025-08-12T06:42:42.490017Z"}, {"uuid": "0bd45076-225c-419b-b5f3-72cef107afd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://threatintel.cc/2025/08/10/winrar-zeroday-exploited-to-plant.html", "content": "", "creation_timestamp": "2025-08-10T23:48:08.000000Z"}, {"uuid": "a869f4ca-6d09-4d61-991f-e710deefc480", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/ssuitesoftware.bsky.social/post/3lw6tubhnqs2z", "content": "", "creation_timestamp": "2025-08-12T08:02:06.113881Z"}, {"uuid": "ba8a2570-9688-4887-ae4c-d294ec8d2ce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "MISP/3e66d93f-68cb-53bd-8f0d-1360bbbdeec5", "content": "", "creation_timestamp": "2025-08-11T15:11:42.000000Z"}, {"uuid": "0f4e5bb2-87a1-4629-9278-022c21c69431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "MISP/3e66d93f-68cb-53bd-8f0d-1360bbbdeec5", "content": "", "creation_timestamp": "2025-08-12T08:11:48.000000Z"}, {"uuid": "2a2ca27f-ed85-4767-926f-7d67a8a26979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://threatintel.cc/2025/08/10/winrar-zeroday-exploited-to-plant.html", "content": "", "creation_timestamp": "2025-08-10T23:48:08.000000Z"}, {"uuid": "b3b984ec-256a-41fc-8a57-3c4134c34145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw75zctdq7o2", "content": "", "creation_timestamp": "2025-08-12T11:06:30.738662Z"}, {"uuid": "9f160b64-eafb-4a77-9f62-501472fd2b90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/115015496535837667", "content": "", "creation_timestamp": "2025-08-12T11:13:22.316049Z"}, {"uuid": "491ce4af-4401-47d4-98d1-1c23742c9b3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3lw7dwaqv6s2t", "content": "", "creation_timestamp": "2025-08-12T12:49:30.915535Z"}, {"uuid": "0b10800c-4a71-4e2a-b311-d85cab637214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/ripleyguru.bsky.social/post/3lw7e2f4ejr22", "content": "", "creation_timestamp": "2025-08-12T12:51:47.087810Z"}, {"uuid": "e11ff959-921e-4a1f-9b7a-4d37c8a2ce95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://threatintel.cc/2025/08/10/winrar-zeroday-exploited-to-plant.html", "content": "", "creation_timestamp": "2025-08-10T23:48:08.000000Z"}, {"uuid": "e02a53c1-61b4-4e24-b724-776e35947c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/maik.norden.social.ap.brid.gy/post/3lw7mjrv4toh2", "content": "", "creation_timestamp": "2025-08-12T15:23:38.175979Z"}, {"uuid": "6dad8a3e-c9f3-4a91-b776-b940866101d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/maik.io/post/3lw7muatsow2s", "content": "", "creation_timestamp": "2025-08-12T15:29:24.219508Z"}, {"uuid": "11594620-21c4-4880-b587-538a98378949", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://threatintel.cc/2025/08/10/winrar-zeroday-exploited-to-plant.html", "content": "", "creation_timestamp": "2025-08-10T23:48:08.000000Z"}, {"uuid": "aebbea91-466d-458c-929b-a0f4d99ca7ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lw7ph7munb2g", "content": "", "creation_timestamp": "2025-08-12T16:15:48.159177Z"}, {"uuid": "42326862-0ffb-411e-beeb-8a87e71dbeb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/bizbln.bsky.social/post/3lw7qo46am625", "content": "", "creation_timestamp": "2025-08-12T16:37:33.039074Z"}, {"uuid": "d75e3a25-d71c-490c-a617-c61ca4a5595b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lw7qyozjuo2q", "content": "", "creation_timestamp": "2025-08-12T16:43:28.438541Z"}, {"uuid": "d18855ef-ca66-4993-a164-6cecb059b5ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lw7uh34nod2c", "content": "", "creation_timestamp": "2025-08-12T17:45:12.037763Z"}, {"uuid": "37bb61f7-617e-42e4-9c59-1acd4e66695b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lw7v6bkab22d", "content": "", "creation_timestamp": "2025-08-12T17:58:11.314338Z"}, {"uuid": "6deb79cf-72be-4720-ac36-8e6324a0efd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/psa.ngo/post/3lw7vuz6bh22f", "content": "", "creation_timestamp": "2025-08-12T18:10:54.366788Z"}, {"uuid": "2670c14c-e6e0-499f-ad82-4fd6003838c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw7x54kmmh62", "content": "", "creation_timestamp": "2025-08-12T18:34:31.882359Z"}, {"uuid": "a835fbc3-f144-40df-b206-2f0cf329be45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw7yc7qtm472", "content": "", "creation_timestamp": "2025-08-12T18:56:08.570412Z"}, {"uuid": "90c83b27-4882-45a7-a59a-7b1d88755d6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/windowscentral.com/post/3lw7yn5v6mu26", "content": "", "creation_timestamp": "2025-08-12T19:00:11.141892Z"}, {"uuid": "b68cbd7a-4034-4f21-b4f8-3ba8d47e1012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://threatintel.cc/2025/08/10/winrar-zeroday-exploited-to-plant.html", "content": "", "creation_timestamp": "2025-08-10T23:48:08.000000Z"}, {"uuid": "7d16a344-b120-499b-a83a-15c9bb56f6f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lwa4cim76o2h", "content": "", "creation_timestamp": "2025-08-12T20:05:48.433237Z"}, {"uuid": "f45725bf-a1b0-42bc-b3a8-14e4be4d9d9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwa4peanb7j2", "content": "", "creation_timestamp": "2025-08-12T20:13:39.334291Z"}, {"uuid": "1e6cbf59-5e81-4cdc-bdbb-e896a16f0915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwa7r5jxtx62", "content": "", "creation_timestamp": "2025-08-12T21:08:47.852037Z"}, {"uuid": "df318dd9-6056-4ce5-8e42-39e0b7594e2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3lwabcjocoak2", "content": "", "creation_timestamp": "2025-08-12T21:42:11.160550Z"}, {"uuid": "a9c6cfa5-06c9-47e7-85d3-8e3867bf8b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/teknofixitsolutions.com/post/3lwacpyvics2k", "content": "", "creation_timestamp": "2025-08-12T22:00:50.108754Z"}, {"uuid": "2a1ffb33-58b7-4147-bc88-f6080df17c7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lwardjrznv2v", "content": "", "creation_timestamp": "2025-08-13T02:22:11.629762Z"}, {"uuid": "1204ef2a-aee5-4e0a-9cd7-76a61cd6c937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwavc32cts2b", "content": "", "creation_timestamp": "2025-08-13T03:33:01.970378Z"}, {"uuid": "47813391-3889-440a-9549-ebfa8dbb3605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cve-vulns.bsky.social/post/3lwb5oxp5nd24", "content": "", "creation_timestamp": "2025-08-13T06:03:51.509211Z"}, {"uuid": "d83134cb-6be2-41f0-b4c6-f8a91a0aa490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cve-vulns.bsky.social/post/3lwb5vj4lvp2b", "content": "", "creation_timestamp": "2025-08-13T06:06:59.959371Z"}, {"uuid": "097046ad-f920-49b0-ad3a-f75aa4171050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3lwb7ry34urr2", "content": "", "creation_timestamp": "2025-08-13T06:40:57.992728Z"}, {"uuid": "e256bad6-e143-46f8-b17d-f779bdd9c3d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lwbfolosjk2m", "content": "", "creation_timestamp": "2025-08-13T08:26:20.384083Z"}, {"uuid": "816f7bfc-1675-4060-ba93-ee0995d554ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwbh56l6ik2b", "content": "", "creation_timestamp": "2025-08-13T08:52:22.403657Z"}, {"uuid": "232f7609-468e-4486-955a-7c4c1ff78d91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwbirvpunkf2", "content": "", "creation_timestamp": "2025-08-13T09:23:51.653395Z"}, {"uuid": "7d8f4633-b90d-4fa9-8b93-e36f8aa500f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lwbklully22d", "content": "", "creation_timestamp": "2025-08-13T09:54:14.945023Z"}, {"uuid": "3af2fd61-4649-4970-ac74-2a4ba24b43f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/sakaijjang.bsky.social/post/3lwbnger5mk2t", "content": "", "creation_timestamp": "2025-08-13T10:44:53.358589Z"}, {"uuid": "389adbaa-38a3-4f0a-8820-55493aa4492d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/technadu.com/post/3lwbqrz4k4s2z", "content": "", "creation_timestamp": "2025-08-13T11:45:13.205889Z"}, {"uuid": "9e8402a6-16b5-49fa-8faa-4a075bfd9a4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3lwbubcconao2", "content": "", "creation_timestamp": "2025-08-13T12:48:21.503947Z"}, {"uuid": "7c0a5864-cacb-44a3-a206-1570a3465f67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4555471", "content": "", "creation_timestamp": "2025-08-13T16:19:15.169973Z"}, {"uuid": "55494442-a7bb-4f3a-b289-a0e2b3e54d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3lwcjft6vspt2", "content": "", "creation_timestamp": "2025-08-13T19:09:29.789250Z"}, {"uuid": "39e286f1-5e80-4e19-b3fd-cc97f7ccf399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwcmzov24k2m", "content": "", "creation_timestamp": "2025-08-13T20:10:28.170190Z"}, {"uuid": "8f85ee70-2305-419f-99aa-57fc68d4a040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lwcorja36g2i", "content": "", "creation_timestamp": "2025-08-13T20:41:39.722996Z"}, {"uuid": "c7982694-35af-4808-9689-dd8607df6da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lwcplewsefj2", "content": "", "creation_timestamp": "2025-08-13T20:58:44.636185Z"}, {"uuid": "377de39c-fc2e-471d-995e-22894d82fe93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwcpwzlc4a2k", "content": "", "creation_timestamp": "2025-08-13T21:02:42.407014Z"}, {"uuid": "17ab6838-f344-4588-8a5b-09f83c3081b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lwcvgi47gs2v", "content": "", "creation_timestamp": "2025-08-13T22:40:49.256517Z"}, {"uuid": "6ad64776-6215-4928-8349-5a2b5f5ae19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lwdbt25ny524", "content": "", "creation_timestamp": "2025-08-14T02:22:31.844303Z"}, {"uuid": "3eacd4a3-9503-4ce5-8553-59ba5f8341c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3lwdpq6szdlf2", "content": "", "creation_timestamp": "2025-08-14T06:32:09.246356Z"}, {"uuid": "afde488c-7990-42fe-820a-5a51e495ede8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lwdwwedwsg23", "content": "", "creation_timestamp": "2025-08-14T08:40:11.473141Z"}, {"uuid": "b09e3224-c0fb-4b22-8885-fc02bcfbc25f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lweqfqongqk2", "content": "", "creation_timestamp": "2025-08-14T16:16:23.392904Z"}, {"uuid": "f8fbb1d2-749b-44a5-90e2-0939b09f87bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwf4li2j3c2t", "content": "", "creation_timestamp": "2025-08-14T19:54:13.238494Z"}, {"uuid": "8b4845d8-b127-47b6-affb-c8684c405455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/lucioborges.bsky.social/post/3lwfirq7iev2n", "content": "", "creation_timestamp": "2025-08-14T23:32:23.179948Z"}, {"uuid": "380f210e-0e18-4008-9d45-d09a4e42e3c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lwfscvrt7h2d", "content": "", "creation_timestamp": "2025-08-15T02:23:07.497220Z"}, {"uuid": "2367c7a7-8621-4139-8fd4-1162fd13b81b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lwgdl4ckor2o", "content": "", "creation_timestamp": "2025-08-15T07:31:52.524821Z"}, {"uuid": "7b00ac7c-151c-4c55-bd0b-d965553cec2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwgeerxmond2", "content": "", "creation_timestamp": "2025-08-15T07:46:27.747711Z"}, {"uuid": "941da1b8-eb53-478b-a66b-f54e7fe6adb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lwggkkmungd2", "content": "", "creation_timestamp": "2025-08-15T08:28:50.696611Z"}, {"uuid": "8932a25d-184d-4971-a481-d3484ed82acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/malwhere.bsky.social/post/3lwgjgmahc22p", "content": "", "creation_timestamp": "2025-08-15T09:16:44.890391Z"}, {"uuid": "5e704c4a-036e-4d12-a6e3-5f6e8946aeaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/avoidancepolicy.bsky.social/post/3lwgm6lmud22l", "content": "", "creation_timestamp": "2025-08-15T10:05:55.804547Z"}, {"uuid": "e32d0afc-7295-482b-a2b0-10ddef88acb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/paxioncyber.bsky.social/post/3lwgmy6kck22z", "content": "", "creation_timestamp": "2025-08-15T10:20:44.387067Z"}, {"uuid": "aac204b9-fd8d-4f30-9dde-0520f5b00276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://gist.github.com/BladeWDR/8e40e8207c2ef331c1763a599c201891", "content": "", "creation_timestamp": "2025-08-15T14:48:55.000000Z"}, {"uuid": "7cb60c78-e7bc-4677-a920-dedbedda3011", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/scootersoftware.bsky.social/post/3lwhbeqnmxc2v", "content": "", "creation_timestamp": "2025-08-15T16:25:11.295778Z"}, {"uuid": "13ce996a-1137-45ec-b53e-bd1ef1029adb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/115033836390248704", "content": "", "creation_timestamp": "2025-08-15T16:57:24.905703Z"}, {"uuid": "4d90e6d4-9fab-45d4-8975-487a91bec429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lwickvomwz2d", "content": "", "creation_timestamp": "2025-08-16T02:19:10.754398Z"}, {"uuid": "1e2a1064-a56a-48cb-a1d1-bda8f4081748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lwktgjpcyt2x", "content": "", "creation_timestamp": "2025-08-17T02:26:17.299667Z"}, {"uuid": "d49c1920-fcc2-466b-854c-f5ad45005ebc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lwndvvkc6g2y", "content": "", "creation_timestamp": "2025-08-18T02:26:32.615485Z"}, {"uuid": "4353205d-1267-4b16-ae3d-68c5aeaedf88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lwol6hbqzs2d", "content": "", "creation_timestamp": "2025-08-18T14:09:15.720445Z"}, {"uuid": "e68cb078-f5fb-4fcd-9730-41966efedbd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lwptuewahf2u", "content": "", "creation_timestamp": "2025-08-19T02:17:20.863178Z"}, {"uuid": "2b3586f6-dfc6-46b7-8bae-1a6596b6bd76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cysecuritynews.bsky.social/post/3lwrgybihwf2q", "content": "", "creation_timestamp": "2025-08-19T17:32:12.053955Z"}, {"uuid": "072e6c80-e163-41d3-9ae1-0a96f0332d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "MISP/3e66d93f-68cb-53bd-8f0d-1360bbbdeec5", "content": "", "creation_timestamp": "2025-08-21T01:38:29.000000Z"}, {"uuid": "935feb8e-5cee-40de-a35f-c0d3bb3fa7cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/redhotcyber.bsky.social/post/3lyf2ew3ijf2a", "content": "", "creation_timestamp": "2025-09-09T06:05:04.929719Z"}, {"uuid": "34d85cba-28f4-4bc8-b80f-127ff4e411c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m4dq3h5dyd2m", "content": "", "creation_timestamp": "2025-10-29T15:08:56.766423Z"}, {"uuid": "17f9ec9d-db0b-4fed-8e38-e5ceccd1a8bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/buzzleaktv.bsky.social/post/3lxa2oiiyup2v", "content": "", "creation_timestamp": "2025-08-25T13:01:55.865436Z"}, {"uuid": "36824e3f-b488-4e6e-ae38-9799091a4b52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lxa62d42oca2", "content": "", "creation_timestamp": "2025-08-25T14:05:04.698524Z"}, {"uuid": "74c5d7a6-b675-4207-959a-651af686871f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "MISP/c8967c13-af70-4675-8f8f-15e8332a6f75", "content": "", "creation_timestamp": "2025-11-24T13:54:20.000000Z"}, {"uuid": "fb196682-945a-494f-be88-962484e24ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://gist.github.com/brandonwmichael/b516e7d2660c0f21b0603fa83862ddfa", "content": "", "creation_timestamp": "2025-08-27T12:53:34.000000Z"}, {"uuid": "00be2032-1025-4693-9a99-b63f51832ea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3lxkyntlfg22d", "content": "", "creation_timestamp": "2025-08-29T21:25:02.896972Z"}, {"uuid": "15540b83-234e-4418-bdb0-2748620dc6f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/maitremalterre.bsky.social/post/3lxu3okl6ec2l", "content": "", "creation_timestamp": "2025-09-02T12:13:12.454316Z"}, {"uuid": "88dfbbac-af1e-486d-8538-4652cd38a0df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3m6mufjcq7s2v", "content": "", "creation_timestamp": "2025-11-27T17:10:32.734112Z"}, {"uuid": "fc2bc2c0-b409-4641-81ea-c7c02bf01793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m4ahocah5b2u", "content": "", "creation_timestamp": "2025-10-28T08:00:25.712466Z"}, {"uuid": "58296f15-d7d4-4259-a481-573e31474f0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3m6muflorss2v", "content": "", "creation_timestamp": "2025-11-27T17:10:33.299995Z"}, {"uuid": "bdf05976-6a90-4e04-9dbe-f24a77995033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3m6mufloss22v", "content": "", "creation_timestamp": "2025-11-27T17:10:33.844445Z"}, {"uuid": "3105634a-9d42-4d54-b97b-3e783bbb832c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://gist.github.com/Darkcrai86/0d0a4c09252702ac5a82fd306980ad01", "content": "", "creation_timestamp": "2025-09-04T11:25:43.000000Z"}, {"uuid": "0c26ea1e-c393-4d53-a1a4-e14c2f9264af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/115974196601895163", "content": "", "creation_timestamp": "2026-01-28T18:43:23.127665Z"}, {"uuid": "37cbbb75-29b6-4422-91ed-f49f5af7d9c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mdn675cber2h", "content": "", "creation_timestamp": "2026-01-30T11:11:51.928959Z"}, {"uuid": "372fbcf8-7c98-4870-b7ae-4a6ef7508030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-80880", "type": "seen", "source": "MISP/32103726-2648-4772-9c02-11f8d24671fe", "content": "", "creation_timestamp": "2025-12-02T14:57:05.000000Z"}, {"uuid": "485c569b-f017-4fc5-88ab-868eee15bed7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "MISP/2c0b5fd3-8cab-40fb-9262-b2fd07021c74", "content": "", "creation_timestamp": "2026-01-29T14:49:27.000000Z"}, {"uuid": "3a61557f-8474-4868-b250-b1c9727e96d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3me2h2rqjhc2x", "content": "", "creation_timestamp": "2026-02-04T18:01:31.707292Z"}, {"uuid": "d6c7a642-0495-44cb-8945-648fffdca826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mdiy54w2oc2z", "content": "", "creation_timestamp": "2026-01-28T19:12:42.470899Z"}, {"uuid": "4e731b8e-7f74-481f-a50f-4375f91b06a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/kooteksec.bsky.social/post/3mdndaak3oc2m", "content": "", "creation_timestamp": "2026-01-30T12:42:08.511963Z"}, {"uuid": "9ece79f2-1888-4879-ac96-247c87e77d46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-c39acbe0-91886c343547fcce", "content": "", "creation_timestamp": "2025-12-05T12:35:58.261377Z"}, {"uuid": "e419bee9-b40c-48a8-bf46-f08d9ee0fda7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mdizqzrmk42i", "content": "", "creation_timestamp": "2026-01-28T19:41:44.291812Z"}, {"uuid": "575270cd-579d-4dda-8064-74bea1cee9a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cdsoft.bsky.social/post/3mdlduzfchw2q", "content": "", "creation_timestamp": "2026-01-29T17:48:14.536754Z"}, {"uuid": "5bae439e-6d59-4c97-b156-3b76cb76e3ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3me7k4v7erx2e", "content": "", "creation_timestamp": "2026-02-06T18:33:16.729765Z"}, {"uuid": "e36df94e-50d3-4348-8b19-fb088596a836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-1fdfda19-2805a58255f192e9", "content": "", "creation_timestamp": "2026-03-06T10:29:26.146463Z"}, {"uuid": "0a323acf-f419-4e9d-a88a-86e1e6e2e90c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/campuscodi.risky.biz/post/3memnmp7t3k26", "content": "", "creation_timestamp": "2026-02-11T23:40:26.244602Z"}, {"uuid": "d10e7361-4efa-4a29-a396-a200bdf322dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3m7d4t7dnps2b", "content": "", "creation_timestamp": "2025-12-06T13:39:52.863129Z"}, {"uuid": "4d96f49d-a014-4750-a8cb-89087926cb04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mdlfkczdao22", "content": "", "creation_timestamp": "2026-01-29T18:18:03.372833Z"}, {"uuid": "bb8fe0e4-fe14-4e06-b79d-dfbb2fa2e01a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3me5j66zh2s2y", "content": "", "creation_timestamp": "2026-02-05T23:10:48.742208Z"}, {"uuid": "fa636081-4be8-4db8-8be0-40402ff46121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/threatinsight.proofpoint.com/post/3mdja2p46b227", "content": "", "creation_timestamp": "2026-01-28T21:34:34.526877Z"}, {"uuid": "98fc6975-2e6d-4ed4-b9c2-01a5d388d863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/threatinsight.proofpoint.com/post/3mdja2p4ouc27", "content": "", "creation_timestamp": "2026-01-28T21:34:35.510295Z"}, {"uuid": "f2b62b08-116b-4a7d-9f84-bbfc548df8a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mdlkk4pvdu2e", "content": "", "creation_timestamp": "2026-01-29T19:47:24.852732Z"}, {"uuid": "5ab4bc60-1c32-4268-8093-262cf06beefa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/threatinsight.proofpoint.com/post/3mdja2qqj2s27", "content": "", "creation_timestamp": "2026-01-28T21:34:36.474261Z"}, {"uuid": "154a8b7c-03e0-49de-8ba7-5c1bf42c4dba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/threatinsight.proofpoint.com/post/3mdja2rfzk227", "content": "", "creation_timestamp": "2026-01-28T21:34:37.457968Z"}, {"uuid": "ebf2fe51-f2d8-4ca4-beff-01bcb7e04204", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/threatinsight.proofpoint.com/post/3mdja2rg2jc27", "content": "", "creation_timestamp": "2026-01-28T21:34:38.769344Z"}, {"uuid": "fdd15ba5-74cf-47a8-b08a-be6973f34c32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/threatinsight.proofpoint.com/post/3mdja2rg3ik27", "content": "", "creation_timestamp": "2026-01-28T21:34:40.114530Z"}, {"uuid": "5fac7b47-1395-4f51-8b3c-d771bf810048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/threatinsight.proofpoint.com/post/3mdja2s633227", "content": "", "creation_timestamp": "2026-01-28T21:34:41.042878Z"}, {"uuid": "882f7ea6-b0ae-4753-8e87-51dfabb1064b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/threatinsight.proofpoint.com/post/3mdja2s642c27", "content": "", "creation_timestamp": "2026-01-28T21:34:41.976059Z"}, {"uuid": "f63e4fe1-a49f-421a-8764-1440799905ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/threatinsight.proofpoint.com/post/3mdja2s65ys27", "content": "", "creation_timestamp": "2026-01-28T21:34:42.936529Z"}, {"uuid": "5d6f1961-63fb-47fc-ab79-81966cefa7e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/threatinsight.proofpoint.com/post/3mdjafyts6k2b", "content": "", "creation_timestamp": "2026-01-28T21:40:50.761068Z"}, {"uuid": "5f10dd36-3580-4668-a28d-8715b0e0dcc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/threatinsight.proofpoint.com/post/3mdjafyu2xs2b", "content": "", "creation_timestamp": "2026-01-28T21:40:51.816236Z"}, {"uuid": "181e9f53-1e78-45fb-adf6-ed469ae0935f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3memx22zzpe2s", "content": "", "creation_timestamp": "2026-02-12T02:28:56.987916Z"}, {"uuid": "73c59f67-c8d2-4f5f-b92d-4cb02e248c2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/threatinsight.proofpoint.com/post/3mdjafyu2xt2b", "content": "", "creation_timestamp": "2026-01-28T21:40:53.737301Z"}, {"uuid": "94651dcb-0b08-4afe-8f72-8477bf45b5c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/threatinsight.proofpoint.com/post/3mdjafyu3x32b", "content": "", "creation_timestamp": "2026-01-28T21:40:54.731783Z"}, {"uuid": "b3ccda80-89b1-45cd-bd12-93eedfa78d31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/threatinsight.proofpoint.com/post/3mdjafyu4wd2b", "content": "", "creation_timestamp": "2026-01-28T21:40:55.692137Z"}, {"uuid": "4997415c-3ef1-4256-bbb7-8807cf7bd191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3mdjajzf73k2d", "content": "", "creation_timestamp": "2026-01-28T21:43:07.396691Z"}, {"uuid": "4a47326b-b440-4cb5-a23b-1e87f9b71b92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mdjczxfmly2e", "content": "", "creation_timestamp": "2026-01-28T22:27:47.353053Z"}, {"uuid": "8d2d8b8b-5310-4f09-ac41-d4df9097010e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mdjd5ajql324", "content": "", "creation_timestamp": "2026-01-28T22:29:37.360273Z"}, {"uuid": "12ea9fe7-02c5-42ce-a937-0e072daf8b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pcmag.com/post/3mdjdfxenja2s", "content": "", "creation_timestamp": "2026-01-28T22:34:29.770764Z"}, {"uuid": "527389ab-f5f6-4bda-a5b8-e6a19e188aee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mdjevx6xkc2j", "content": "", "creation_timestamp": "2026-01-28T23:01:24.025383Z"}, {"uuid": "afe5b543-dca0-48e2-92ea-52e56edfff8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/baldanders.info/post/3mdjf2or6uu2v", "content": "", "creation_timestamp": "2026-01-28T23:03:59.234920Z"}, {"uuid": "8cc298f8-e5e2-4581-b2d9-3c791c92f647", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/spiegel.goark.fedicity.net.ap.brid.gy/post/3mdjf2s3vd3o2", "content": "", "creation_timestamp": "2026-01-28T23:04:04.446047Z"}, {"uuid": "cfa382c5-c88c-4146-9e18-6cd75f102cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mdnyegjg5b2e", "content": "", "creation_timestamp": "2026-01-30T19:00:05.786779Z"}, {"uuid": "77e577ed-3ae4-46c9-bd34-ae123b81c049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3me2vtaxjj62g", "content": "", "creation_timestamp": "2026-02-04T22:19:19.430318Z"}, {"uuid": "dd2fd1e9-c63c-4c1f-b70b-d73a934fb453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mdji565djm2x", "content": "", "creation_timestamp": "2026-01-28T23:59:07.325314Z"}, {"uuid": "2ed9edf8-e108-4459-b61e-c0b760536754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mdls3rjb2k2q", "content": "", "creation_timestamp": "2026-01-29T22:02:34.060044Z"}, {"uuid": "9aad468d-02c1-4077-9ef5-975778c973b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mdjmo5ixz42v", "content": "", "creation_timestamp": "2026-01-29T01:20:08.602940Z"}, {"uuid": "08c219db-ad13-43e1-a3fa-d4bbb0efb73a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdjqikohbn2y", "content": "", "creation_timestamp": "2026-01-29T02:28:35.874360Z"}, {"uuid": "57b4f73b-11fd-4149-80d0-4628174fd915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/lazarusholic.bsky.social/post/3m7upkdqupf2a", "content": "", "creation_timestamp": "2025-12-13T13:30:12.278260Z"}, {"uuid": "3fbe4948-4085-4606-a626-c02558063b5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mdjuui3llu2h", "content": "", "creation_timestamp": "2026-01-29T03:46:50.550179Z"}, {"uuid": "f04c90c7-34a6-45c4-b087-7186e85eae8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdtseh72oi2w", "content": "", "creation_timestamp": "2026-02-02T02:28:42.748611Z"}, {"uuid": "a0262f0b-9aba-4d76-a8df-a309e781c2be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdjzlwyl242s", "content": "", "creation_timestamp": "2026-01-29T05:11:32.966397Z"}, {"uuid": "6909a58b-4992-4be7-9149-d28ebdd5da46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdytbxfvo426", "content": "", "creation_timestamp": "2026-02-04T02:28:31.580219Z"}, {"uuid": "d2b0ca7a-89da-4a62-851c-47afdac8b7f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/rankednews.bsky.social/post/3mdlyvdk2is25", "content": "", "creation_timestamp": "2026-01-30T00:04:14.081874Z"}, {"uuid": "8b2d891b-429b-4a11-b53a-36c387f8e441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/percepticon.bsky.social/post/3mdyxjzecez2g", "content": "", "creation_timestamp": "2026-02-04T03:44:37.338282Z"}, {"uuid": "2bfcd63a-8d19-492b-bc87-7582b83d805a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mdkarphoao2v", "content": "", "creation_timestamp": "2026-01-29T07:20:02.966430Z"}, {"uuid": "648a8d6f-25bc-4370-87c2-a981a8325189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mdmascsdb22q", "content": "", "creation_timestamp": "2026-01-30T02:25:42.947138Z"}, {"uuid": "188e1e20-06b5-474c-9145-bcc399a31db9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdorfuu5sc26", "content": "", "creation_timestamp": "2026-01-31T02:28:18.220511Z"}, {"uuid": "eaaaa77f-e1a1-4bfb-80c2-30d628178d1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "MISP/f7c90110-c01f-4d3c-81ac-a92e4fb45e2b", "content": "", "creation_timestamp": "2026-02-02T07:27:51.000000Z"}, {"uuid": "12906a5c-36f3-4a88-bd48-c842644a01cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mdmhqi4pis2d", "content": "", "creation_timestamp": "2026-01-30T04:29:56.694472Z"}, {"uuid": "1d358303-fc3b-483f-b46d-85e6ed8f1748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3maakxvo3ew2j", "content": "", "creation_timestamp": "2025-12-18T06:40:15.443674Z"}, {"uuid": "d5e0c78d-b77a-4872-968b-37526b73ed9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mdkihrs5nk2p", "content": "", "creation_timestamp": "2026-01-29T09:37:46.253683Z"}, {"uuid": "eb3e1f6a-0413-4e58-bc9a-1a11112025f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/ijasonwu.bsky.social/post/3mdmvg4glmc2h", "content": "", "creation_timestamp": "2026-01-30T08:34:49.225736Z"}, {"uuid": "5b7cba32-e4a4-431c-825a-fa10b3095e2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3me45azegzs2q", "content": "", "creation_timestamp": "2026-02-05T10:04:56.850095Z"}, {"uuid": "1908d61d-b320-473c-9b9e-a30a8094fb0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mar5mywohu2a", "content": "", "creation_timestamp": "2025-12-24T20:56:46.740023Z"}, {"uuid": "68ee1894-9448-4889-967e-40122e16539a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3marbtjh45g25", "content": "", "creation_timestamp": "2025-12-24T22:12:00.264089Z"}, {"uuid": "5622828b-8ef9-4a7f-afab-761a7f99ea39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mdkknjtsqk25", "content": "", "creation_timestamp": "2026-01-29T10:16:38.501586Z"}, {"uuid": "b7626165-3b4b-4207-8de4-43fd0a9d12c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://social.tchncs.de/users/gborn/statuses/115977867033348297", "content": "", "creation_timestamp": "2026-01-29T10:16:49.785085Z"}, {"uuid": "1881225f-cba3-41f7-a327-758616daa94b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3me4dzypiwo2h", "content": "", "creation_timestamp": "2026-02-05T12:06:18.224114Z"}, {"uuid": "b1ec9d52-b295-4e27-bde4-a76783a342bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mbh7b6qydf26", "content": "", "creation_timestamp": "2026-01-02T15:24:32.027921Z"}, {"uuid": "17f4f0f6-7085-48c0-af94-6f81a1965ce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/sctocs.bsky.social/post/3me4l3zwis222", "content": "", "creation_timestamp": "2026-02-05T14:12:43.692885Z"}, {"uuid": "49a9ba32-aa96-4b62-9d0c-8d2374efd60c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3me23h7gmjj2h", "content": "", "creation_timestamp": "2026-02-04T14:27:17.149547Z"}, {"uuid": "95985252-0b18-41a6-a213-5162b2c8fbdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mdkvxjtwbk2q", "content": "", "creation_timestamp": "2026-01-29T13:39:06.761823Z"}, {"uuid": "6ccf0e48-ce01-4d97-ae71-0ba5c8f0321d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/116012946267338282", "content": "", "creation_timestamp": "2026-02-04T14:57:56.029633Z"}, {"uuid": "b98c6eee-42a4-4e26-91bb-438ec486648f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3me25fgggnj2s", "content": "", "creation_timestamp": "2026-02-04T15:02:05.721925Z"}, {"uuid": "e9a7e63a-46c7-45b5-80d4-4fe2619c4961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3me2627pxqi2f", "content": "", "creation_timestamp": "2026-02-04T15:13:43.007201Z"}, {"uuid": "4d4fc01d-4e4b-4764-9aa3-9c6fb24c9c71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mdl3ihknpp2i", "content": "", "creation_timestamp": "2026-01-29T15:18:03.150373Z"}, {"uuid": "4c17e5f4-1575-426e-a7a4-e50e11226f78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "MISP/f7c90110-c01f-4d3c-81ac-a92e4fb45e2b", "content": "", "creation_timestamp": "2026-02-04T13:24:12.000000Z"}, {"uuid": "31bfa745-f5bd-4996-b63c-74e90c570350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/hakksaww.bsky.social/post/3mevvultoxo2a", "content": "", "creation_timestamp": "2026-02-15T16:01:57.068834Z"}, {"uuid": "fe3c0f8d-c5b9-4178-a463-2f7549b24f83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdrbwl5itf2w", "content": "", "creation_timestamp": "2026-02-01T02:29:17.727056Z"}, {"uuid": "5d60f584-bf36-4b63-a3f7-87876c8da03e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3me2b625juj2m", "content": "", "creation_timestamp": "2026-02-04T16:09:31.999645Z"}, {"uuid": "96aea7b1-cf88-4330-a282-c1e56e783557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116019124284663862", "content": "", "creation_timestamp": "2026-02-05T17:09:09.619452Z"}, {"uuid": "f7e87246-43c3-4420-a0b9-3ec87bb5457b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3me4uxvu7a42o", "content": "", "creation_timestamp": "2026-02-05T17:09:20.610416Z"}, {"uuid": "a67e3cda-cb32-46ed-81c3-b119ed581fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3me2e3ywh7g24", "content": "", "creation_timestamp": "2026-02-04T17:02:04.917775Z"}, {"uuid": "90a15dfd-e2d1-4257-a5c1-b074973ca079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/hackmag.com/post/3mheg3z3lsv2o", "content": "", "creation_timestamp": "2026-03-18T21:20:05.680696Z"}, {"uuid": "eb0decc5-5efa-4c4a-8949-3dded97858b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://www.cert.se/2026/01/cert-se-veckobrev-v5.html", "content": "", "creation_timestamp": "2026-01-30T13:50:00.000000Z"}, {"uuid": "878f6235-c2db-45d7-9f50-b3a8213c05aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mdfzmqhmlx2s", "content": "", "creation_timestamp": "2026-01-27T15:01:20.753797Z"}, {"uuid": "be69d533-35f4-4c7a-ac4d-9ab1e963376e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mdg334mh3i2g", "content": "", "creation_timestamp": "2026-01-27T15:27:16.817238Z"}, {"uuid": "da81f5c5-6d2b-4a7e-863f-df4fd033b710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/montxt.bsky.social/post/3mdg47zguu42x", "content": "", "creation_timestamp": "2026-01-27T15:47:55.279753Z"}, {"uuid": "f8fe43ef-1f28-43c0-8ab1-3cb3351dc024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mdgahlyfxz2l", "content": "", "creation_timestamp": "2026-01-27T17:03:44.647938Z"}, {"uuid": "2a8cb675-cd81-4077-8d98-db9f516759fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://infosec.exchange/users/defendopsdiaries/statuses/115968803404242142", "content": "", "creation_timestamp": "2026-01-27T19:51:49.368904Z"}, {"uuid": "c7994b2f-8654-4e4f-89cc-207f651e9371", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mdgk5cjcn32i", "content": "", "creation_timestamp": "2026-01-27T19:56:56.777646Z"}, {"uuid": "3638e828-9e9f-46a2-8b55-1e23e8a6931a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/allsafeus.bsky.social/post/3mdgo3ylpox2v", "content": "", "creation_timestamp": "2026-01-27T21:07:47.600139Z"}, {"uuid": "bcebf691-3e30-4e8b-9c27-03a70393c958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/allsafeus.bsky.social/post/3mdgqqborsh24", "content": "", "creation_timestamp": "2026-01-27T21:54:55.818596Z"}, {"uuid": "4b0212bb-2029-4e5e-90c5-0c590df6079c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mdgxybppq52p", "content": "", "creation_timestamp": "2026-01-28T00:04:40.036636Z"}, {"uuid": "364d93b5-68e5-4ff1-9d41-8cc32169b6bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/coldblacksun.bsky.social/post/3mdgzwc6oac27", "content": "", "creation_timestamp": "2026-01-28T00:39:22.806033Z"}, {"uuid": "9bc5bb81-e623-44e9-92f0-46a4217644c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/abijita.bsky.social/post/3mdhadu7eq624", "content": "", "creation_timestamp": "2026-01-28T02:34:18.206979Z"}, {"uuid": "b59a6b32-c698-493e-9394-31fecc28f940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mdhmfmczp22e", "content": "", "creation_timestamp": "2026-01-28T06:10:03.923190Z"}, {"uuid": "f0577efb-fb1d-4bf3-bc48-9604d2065c0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mdhqocvuo62v", "content": "", "creation_timestamp": "2026-01-28T07:26:29.698488Z"}, {"uuid": "047e2a0c-4de2-4a1c-90bb-8bc6cf6a2e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdhsk76wn7o2", "content": "", "creation_timestamp": "2026-01-28T08:00:04.230443Z"}, {"uuid": "3cf657cb-f8e6-4ef4-92db-65582fea56aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mdhxlwtoaa2f", "content": "", "creation_timestamp": "2026-01-28T09:30:26.266496Z"}, {"uuid": "275dc7a9-105b-4853-83b4-a8125fce714a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://infosec.exchange/users/VirusBulletin/statuses/115972119696577389", "content": "", "creation_timestamp": "2026-01-28T09:55:12.813960Z"}, {"uuid": "d5d00eab-bffe-41d5-a818-7e518438e541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/virusbtn.bsky.social/post/3mdhyye6xhc2w", "content": "", "creation_timestamp": "2026-01-28T09:55:24.018561Z"}, {"uuid": "ae831265-d25b-43fb-86e0-225bb4a840a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mdhzdpykmz2m", "content": "", "creation_timestamp": "2026-01-28T10:01:37.451545Z"}, {"uuid": "5a61fd72-10ca-4d64-ab99-6651bdc160ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdi2qpnny2b2", "content": "", "creation_timestamp": "2026-01-28T10:26:52.418758Z"}, {"uuid": "a4f8b08d-5c36-4986-bfcf-c809f610b6ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mdi4a3fqv624", "content": "", "creation_timestamp": "2026-01-28T10:53:16.932577Z"}, {"uuid": "1639ef4c-f918-432b-bcaa-fb065d808b83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdi4hheles2v", "content": "", "creation_timestamp": "2026-01-28T10:57:24.480888Z"}, {"uuid": "4b175173-0319-470a-863c-bafdc7472014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://thehackernews.com/2026/01/google-warns-of-active-exploitation-of.html", "content": "", "creation_timestamp": "2026-01-28T08:46:00.000000Z"}, {"uuid": "e05dd513-295a-40b8-893e-67cd6f075578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mdi4tycb6x24", "content": "", "creation_timestamp": "2026-01-28T11:04:24.284817Z"}, {"uuid": "babc669b-4ad4-4fca-b364-afc16a0798e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/sctocs.bsky.social/post/3mdibmo7vqc2t", "content": "", "creation_timestamp": "2026-01-28T12:30:00.295796Z"}, {"uuid": "a935d7f2-139f-4248-beb6-f2cdd624b2ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/780thmibdecyber.bsky.social/post/3mdif4dhmr22k", "content": "", "creation_timestamp": "2026-01-28T13:32:16.123228Z"}, {"uuid": "b51d8422-6817-4c54-a28e-29a86476fb15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3mdigvk4drc2d", "content": "", "creation_timestamp": "2026-01-28T14:04:19.279967Z"}, {"uuid": "ed4732d1-ad39-42eb-8823-3d383c55c86d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mdihxkmcss2s", "content": "", "creation_timestamp": "2026-01-28T14:23:24.002424Z"}, {"uuid": "fba56cd5-6dee-482a-8100-60e50acdefa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mdihxpx5mc2s", "content": "", "creation_timestamp": "2026-01-28T14:23:24.987765Z"}, {"uuid": "7d8cf858-4bf0-4df7-ac38-25de82e9cc7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mdihxpxcik2s", "content": "", "creation_timestamp": "2026-01-28T14:23:25.999109Z"}, {"uuid": "5c4e73da-a73e-42b0-9c5b-fd8e94969af8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115973188338984313", "content": "", "creation_timestamp": "2026-01-28T14:26:58.158413Z"}, {"uuid": "da8a904d-2c41-4563-9376-716c5357c1c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mdimkmcsev2y", "content": "", "creation_timestamp": "2026-01-28T15:45:29.504298Z"}, {"uuid": "0b90811d-626a-46f1-bb13-28b8b4d94fc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mdimkisl6c2g", "content": "", "creation_timestamp": "2026-01-28T15:45:35.818094Z"}, {"uuid": "3ac77ca1-ee3f-4abb-aae0-64c087681b58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/mezhamedia.bsky.social/post/3mdinizbdve2e", "content": "", "creation_timestamp": "2026-01-28T16:02:30.204175Z"}, {"uuid": "654a751e-0e70-40a9-8d5a-9036627f4292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/androidcompl.bsky.social/post/3mdip2razl22p", "content": "", "creation_timestamp": "2026-01-28T16:30:19.454586Z"}, {"uuid": "b3dc4841-a3a6-4911-81d0-201d47262ea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://threatintel.cc/2026/01/28/diverse-threat-actors-exploiting-critical.html", "content": "", "creation_timestamp": "2026-01-28T13:27:11.000000Z"}, {"uuid": "d73d46a8-4a88-4560-8532-f56c58410e13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/afd738da-a62c-4f84-9636-3b87950f7160", "content": "", "creation_timestamp": "2026-02-02T12:25:55.017130Z"}, {"uuid": "fa6c3c36-c2d5-4ba6-aa82-aa7caeeda8fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/mLEOWN64VqKw_0VE78e17Gu1UFXBsQSVdJfNgYq3VLys3t4", "content": "", "creation_timestamp": "2025-12-20T21:00:05.000000Z"}, {"uuid": "386c6da8-f4ad-4058-b76e-fb842343c272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/N4svM2fMVKaE4zhWWe2RNwhpakg9BGtWhN5IwLIxjVwk8jo", "content": "", "creation_timestamp": "2025-11-23T15:48:09.000000Z"}, {"uuid": "f41eabf3-8249-40a1-a196-bc6a3933ab0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/i4Th3-qfHPrRxEPubQsx_tgczYzW3xhGs7IIz0Vj8tpPp0c", "content": "", "creation_timestamp": "2025-11-27T21:00:05.000000Z"}, {"uuid": "bac5ddf2-ba73-4144-96d9-454292b1e76d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/6x7nwna-vtQ089AZvELTDYHncFwQR8bSc4xo9Mu5UunXTzE", "content": "", "creation_timestamp": "2025-11-26T15:00:08.000000Z"}, {"uuid": "94b22fe9-7b95-4ffb-bab6-76cb2f61f413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/Px86r7YM_5uy0nBxKBAOqrEctEXVUS1VfUeJPbvOmBj2WEc", "content": "", "creation_timestamp": "2025-09-07T06:00:05.000000Z"}, {"uuid": "3a874b77-3b00-4236-9432-afa42476b48a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://infosec.exchange/users/VirusBulletin/statuses/116379696062598057", "content": "", "creation_timestamp": "2026-04-10T09:27:16.071878Z"}, {"uuid": "7009f4b9-b168-4e9b-9986-02376b9a7b1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/virusbtn.bsky.social/post/3mj4yynbpkc2v", "content": "", "creation_timestamp": "2026-04-10T09:27:26.818113Z"}, {"uuid": "0eef7b11-d9f8-4f37-953c-20f578bae5ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/GithubRedTeam/59600", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPath traversal tool based on CVE-2025-8088\nURL\uff1ahttps://github.com/0xDTC/Below-Logger-Symlink-Attack_CVE-2025-27591\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-13T17:48:19.000000Z"}, {"uuid": "066bccaa-ff6a-45be-bff1-186213b1106e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/Rb4wQk4sv77MPMIFv9GC6iH60q7V6h0ylg0pbuMdA-XU9rk", "content": "", "creation_timestamp": "2025-08-26T21:00:04.000000Z"}, {"uuid": "2166f79c-5c8b-407e-a68d-f4250f470a64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/6epx-3BQxTrkqZ6l5w7-X1UnDFzfHf3_J-HeEcKgNnF31DA", "content": "", "creation_timestamp": "2025-08-27T21:00:04.000000Z"}, {"uuid": "5e6779c3-3c91-4f30-81e1-9ef69d6c9c08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/true_secator/7315", "content": "\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 WinRAR \u0432 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 7.13 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e 0-day, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-8088 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u041f\u0440\u0438 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0438 \u0444\u0430\u0439\u043b\u0430 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 WinRAR, RAR \u0434\u043b\u044f Windows, UnRAR, \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u0438\u043c\u044b\u0439 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u043a\u043e\u0434 UnRAR \u0438 UnRAR.dll \u043c\u043e\u0433\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0443\u0442\u044c, \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u043c \u0430\u0440\u0445\u0438\u0432\u0435, \u0432\u043c\u0435\u0441\u0442\u043e \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043f\u0443\u0442\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c Unix-\u0432\u0435\u0440\u0441\u0438\u0438 RAR, UnRAR, \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u0438\u043c\u044b\u0439 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u043a\u043e\u0434 UnRAR \u0438 UnRAR.dll, \u0430 \u0442\u0430\u043a\u0436\u0435 RAR \u0434\u043b\u044f Android \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0412 \u043e\u0431\u0449\u0435\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0430\u0440\u0445\u0438\u0432\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u043f\u0443\u0442\u0438 \u0430\u0432\u0442\u043e\u0437\u0430\u043f\u0443\u0441\u043a\u0430.\n\n\u041f\u0440\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0432\u0445\u043e\u0434\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 WinRAR \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0441\u00a0win-rar.com.\n\n\u041e\u0448\u0438\u0431\u043a\u0443 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 ESET, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442 \u043e \u0435\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 \u0432 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0441 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 Rocom.\n\n\u0422\u0430\u043a \u0438\u043b\u0438 \u0438\u043d\u0430\u0447\u0435 \u043f\u043e\u043a\u0430 \u044d\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u0432\u043e\u0434\u0443 ESET \u043e\u0431\u0435\u0449\u0430\u0435\u0442 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u043e\u0432\u0441\u0435\u043c \u0441\u043a\u043e\u0440\u043e.\n\n\u0410 \u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u043c \u0438\u043d\u0444\u043e\u0441\u0435\u043a\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e 0-day \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u044e\u0442 \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 APT\u00a0Paper Werewolf, aka Goffee.\n\n\u0412 \u0438\u044e\u043b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 BI.ZONE \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0441\u0435\u0440\u0438\u044e \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b GOFFEE.\n\n\u041e\u0434\u043d\u043e\u0439 \u0438\u0437\u00a0\u0446\u0435\u043b\u0435\u0439 \u0441\u0442\u0430\u043b \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0441\u043f\u0435\u0446\u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u043f\u0438\u0441\u044c\u043c\u043e \u043e\u0442\u00a0\u0438\u043c\u0435\u043d\u0438 \u043a\u0440\u0443\u043f\u043d\u043e\u0433\u043e \u041d\u0418\u0418, \u043f\u0440\u0438\u0447\u0435\u043c \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u043b\u044f\u00a0\u044d\u0442\u043e\u0433\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c \u0430\u0434\u0440\u0435\u0441\u043e\u043c \u0434\u0440\u0443\u0433\u043e\u0439 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438\u00a0- \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u043c\u0435\u0431\u0435\u043b\u0438.\n\n\u0412\u00a0\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u043c \u043a\u00a0\u043f\u0438\u0441\u044c\u043c\u0443 RAR\u2011\u0430\u0440\u0445\u0438\u0432\u0435 \u0431\u044b\u043b\u0438 \u00ab\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u0438\u0437\u00a0\u043c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u0430\u00bb, \u0430\u00a0\u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b XPS Viewer. \n\n\u042d\u0442\u043e\u00a0\u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u0430\u044f \u041f\u041e, \u043d\u043e\u00a0\u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0435\u0435\u00a0\u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u0432\u043d\u0443\u0442\u0440\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u041e\u043d\u00a0\u0434\u0430\u0432\u0430\u043b \u0438\u043c\u00a0\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438\u00a0\u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-6218 \u0432 WinRAR \u0434\u043e\u00a07.11\u00a0\u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e.\n\n\u0412\u00a0\u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430\u00a0\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438\u0437\u00a0\u0420\u043e\u0441\u0441\u0438\u0438 \u0438\u00a0\u0423\u0437\u0431\u0435\u043a\u0438\u0441\u0442\u0430\u043d\u0430, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043d\u0430\u00a0\u043d\u043e\u0432\u0443\u044e, \u043d\u0435\u00a0\u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0443\u044e \u043d\u0430\u00a0\u0442\u043e\u0442 \u043c\u043e\u043c\u0435\u043d\u0442  0-day, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u0438 WinRAR \u0434\u043e 7.12 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e. \n\n\u041a \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u043c \u043f\u0438\u0441\u044c\u043c\u0430\u043c \u043f\u0440\u0438\u043b\u0430\u0433\u0430\u043b\u0441\u044f \u0430\u0440\u0445\u0438\u0432, \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u0434 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u043e\u0442 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432.\n\n\u0412\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 directory traversal \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438.\n\n\u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e\u00a0\u043d\u0435\u0437\u0430\u0434\u043e\u043b\u0433\u043e \u0434\u043e\u00a0\u044d\u0442\u0438\u0445 \u0430\u0442\u0430\u043a \u043d\u0430\u00a0\u043e\u0434\u043d\u043e\u043c \u0438\u0437\u00a0\u0434\u0430\u0440\u043a\u043d\u0435\u0442 \u0444\u043e\u0440\u0443\u043c\u043e\u0432 \u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u00a0\u043f\u0440\u043e\u0434\u0430\u0436\u0435 \u044f\u043a\u043e\u0431\u044b \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.", "creation_timestamp": "2025-08-11T14:06:40.000000Z"}, {"uuid": "c46b1d10-5f36-4003-b5bc-671e3f9d98fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/information_security_channel/53983", "content": "Russian Hackers Exploited WinRAR Zero-Day in Attacks on Europe, Canada\nhttps://www.securityweek.com/russian-hackers-exploited-winrar-zero-day-in-attacks-on-europe-canada/\n\nWinRAR has patched CVE-2025-8088, a zero-day exploited by Russia\u2019s RomCom in attacks on financial, defense, manufacturing and logistics companies.\nThe post Russian Hackers Exploited WinRAR Zero-Day in Attacks on Europe, Canada (https://www.securityweek.com/russian-hackers-exploited-winrar-zero-day-in-attacks-on-europe-canada/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2025-08-11T13:00:02.000000Z"}, {"uuid": "8f5414e8-8fdb-4c67-97a5-eaf1738b7acc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/kasperskyb2b/1858", "content": "\u2620\ufe0f \u0420\u0430\u0437\u0432\u0430\u043b MITRE, \u043f\u0430\u0440\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 APT \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83d\ude36 \u0411\u0435\u0437 \u043b\u0438\u0448\u043d\u0435\u0433\u043e \u0448\u0443\u043c\u0430 \u0432 MITRE \u0443\u0432\u043e\u043b\u0438\u043b\u0438 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 CTID \u0438 ATT&CK EVALS. \u042d\u0442\u043e, \u043a\u0430\u043a \u0438 \u0447\u0435\u0440\u0435\u0434\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 NVD, \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u0443\u044e \u043f\u0443\u0441\u0442\u043e\u0442\u0443 \u0432 \u0441\u0444\u0435\u0440\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u043d\u043e\u0439 \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043c\u043e\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u0438\u0431\u0435\u0440\u0437\u0430\u0449\u0438\u0442\u044b.\n\n\ud83d\udc7e \u0421\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e \u043f\u0435\u0440\u0435\u0441\u0435\u043a\u0430\u044e\u0449\u0438\u043c\u0441\u044f, \u043d\u043e \u0440\u0430\u0437\u043d\u044b\u043c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c BYOVD \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0421\u0417\u0418: \u043d\u0430\u0448 \u043e\u0442\u0447\u0451\u0442 \u043f\u043e AV-Killer, \u0442\u043e\u0442 \u0436\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u043f\u043b\u044e\u0441 \u0435\u0449\u0451 \u043e\u0434\u0438\u043d \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 Akira, \u0435\u0449\u0451 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u044b \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 8 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043e\u043a (IoC \u043d\u0430 \u0433\u0438\u0445\u0430\u0431\u0435). \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0435\u0439 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u0432 \u0436\u0435\u043b\u0435\u0437\u043a\u0430\u0445 SonicWall. \u041a\u0441\u0442\u0430\u0442\u0438, \u0432\u0435\u043d\u0434\u043e\u0440 \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u044d\u0442\u043e \u043d\u0435 \u0437\u0438\u0440\u043e\u0434\u0435\u0439, \u0430 \u043d\u0435 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u0432\u0435\u0434\u0451\u043d\u043d\u043e\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0435\u0433\u043e \u0434\u0435\u0444\u0435\u043a\u0442\u0430.\n\n\ud83d\ude0e \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0435\u0434\u0435\u043b\u044f \u043f\u0440\u043e\u0448\u043b\u0430 \u043f\u043e\u0434 \u0437\u043d\u0430\u043a\u043e\u043c BlackHat \u0438 DEF CON, \u0442\u043e \u0432 \u043d\u043e\u0432\u043e\u0441\u0442\u044f\u0445 \u0418\u0411 \u0434\u043e\u043c\u0438\u043d\u0438\u0440\u0443\u044e\u0442 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: \n\n\ud83d\udfe2\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u0435\u0444\u0435\u043a\u0442 \u0432 \u0433\u0438\u0431\u0440\u0438\u0434\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u044f\u0445 Exchange, CVE-2025-53786, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u043c\u0435\u043d \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u0425\u043e\u0442\u044f Microsoft \u043f\u043e \u0441\u0443\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u0435\u0444\u0435\u043a\u0442 \u0435\u0449\u0451 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435, \u0432 \u0447\u0435\u0441\u0442\u044c \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0435\u043c\u0443 \u043d\u0430\u0437\u043d\u0430\u0447\u0438\u043b\u0438 CVE ID.  \u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c CISA \u0432\u0435\u043b\u0438\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430 \u0447\u0435\u0442\u044b\u0440\u0435 \u0434\u043b\u044f \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Exchange \u043e\u0442 \u0441\u0435\u0442\u0438. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shadowserver \u0434\u0435\u0444\u0435\u043a\u0442\u0443 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043e \u043f\u043e\u0447\u0442\u0438 30 \u0442\u044b\u0441\u044f\u0447 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.\n\n\ud83d\udfe2\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043b\u0430\u0441\u0441\u0430 HTTP desync (\u043e\u043d\u0430 \u0436\u0435 HTTP smuggling) \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 CDN, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Akmai \u0438 Cloudflare, \u0438 \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u044c \u043a \u0443\u0433\u043e\u043d\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0441\u0435\u0441\u0441\u0438\u0439, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0432 \u043a\u044d\u0448\u0435 CDN \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u043e\u0441\u0442\u044f\u043c. CVE-2025-32094 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441\u043a\u043e\u0440\u0435\u0435 \u0444\u0443\u043d\u0434\u0430\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430, \u0447\u0435\u043c \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0430\u0432\u0442\u043e\u0440\u044b \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044e\u0442 \u043f\u043e\u0441\u043a\u043e\u0440\u0435\u0435 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a HTTP/2.\n\n\ud83d\udfe2\u0415\u0449\u0451 \u043e\u0434\u0438\u043d \u0437\u0438\u0440\u043e\u0434\u0435\u0439 \u0432 WinRAR, CVE-2025-8088, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \n\n\ud83d\udfe2\u041d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c OAuth \u0432 Entra \u0442\u0430\u043a \u043d\u0435\u043f\u0440\u043e\u0441\u0442\u043e, \u0447\u0442\u043e \u0434\u0430\u0436\u0435 Microsoft \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441\u043c\u043e\u0433 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a 20 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0430\u043c\u0443 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0431\u0430\u0433 \u0431\u0430\u0443\u043d\u0442\u0438. \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u0449\u0435\u0434\u0440\u043e \u0437\u0430\u043f\u043b\u0430\u0442\u0438\u043b \u0437\u0430 \u044d\u0442\u043e $0.\n\n\ud83d\udfe2\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u0435\u0431-\u043a\u0430\u043c\u0435\u0440\u0430\u0445, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u044f\u0434\u0440\u0435 Linux, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 Lenovo, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0448\u0438\u0432\u0430\u0442\u044c \u0438\u0445 \u043d\u0435\u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u043c\u0438 \u043e\u0431\u0440\u0430\u0437\u0430\u043c\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a BadUSB. \u0414\u0435\u0444\u0435\u043a\u0442 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Badcam \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e, \u0438 \u0434\u0438\u0441\u0442\u0430\u043d\u0446\u0438\u043e\u043d\u043d\u043e, \u0430\u0432\u0442\u043e\u0440\u044b \u0432\u0438\u0434\u044f\u0442 \u0435\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u0443 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\ud83d\udfe1\u041d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 APT-C-09 \u043d\u0430 \u0432\u043e\u0435\u043d\u043d\u044b\u0435 \u0438 \u0442\u0435\u043b\u0435\u043a\u043e\u043c-\u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u041f\u0430\u043a\u0438\u0441\u0442\u0430\u043d\u0430.\n\n\ud83d\udc6e\u200d\u2640\ufe0f \u0421\u0442\u0438\u043b\u0435\u0440 Efimer \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u043a\u0440\u0430\u0436\u0443 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b \u043d\u043e, \u0447\u0442\u043e \u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e, \u043e\u0431\u043b\u0430\u0434\u0430\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e, \u043f\u043e\u043c\u043e\u0433\u0430\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u0435\u0433\u043e \u0434\u0430\u043b\u044c\u0448\u0435 \u0447\u0435\u0440\u0435\u0437 \u0432\u0437\u043b\u043e\u043c WordPress-\u0441\u0430\u0439\u0442\u043e\u0432 \u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u0435 \u043d\u0430 \u043d\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u2754 \u042d\u043a\u0441\u043f\u0440\u0435\u0441\u0441-\u0440\u0435\u0434\u0442\u0438\u043c \u043d\u0430\u0431\u0435\u0433 \u043d\u0430 \u0441\u0432\u0435\u0436\u0443\u044e GPT-5 \u043f\u043e\u043a\u0430\u0437\u0430\u043b \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0440\u0435\u0433\u0440\u0435\u0441\u0441 \u043f\u043e \u043b\u0438\u043d\u0438\u0438 \u0418\u0411:  \u043c\u043e\u0434\u0435\u043b\u044c \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u043b\u0435\u0433\u0447\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043d\u0443\u0442\u044c \u0434\u0436\u0435\u0439\u043b\u0431\u0440\u0435\u0439\u043a\u0443, \u043b\u0435\u0433\u0447\u0435 \u0441\u0431\u0438\u0442\u044c \u0441 \u0442\u0435\u043c\u044b \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u0430, \u043b\u0435\u0433\u0447\u0435 \u0443\u0431\u0435\u0434\u0438\u0442\u044c \u0435\u0451 \u0432\u044b\u0434\u0430\u0442\u044c \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\u041a\u0441\u0442\u0430\u0442\u0438, NIST \u043f\u0435\u0440\u0435\u0434\u0443\u043c\u0430\u043b \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u0447\u0451\u0442 \u0441 139 \u043c\u0435\u0442\u043e\u0434\u0430\u043c\u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0435\u0439.\n\n#APT #\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 @\u041f2\u0422", "creation_timestamp": "2025-08-11T12:23:42.000000Z"}, {"uuid": "014f4825-2c96-4c92-8fc0-b3fdda562d95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/qP4ATtXqVjZ2NQNBpFxFUpCqNtRkP8nG37QRNXEozXO3oQg", "content": "", "creation_timestamp": "2025-08-13T11:00:09.000000Z"}, {"uuid": "5e427d1e-5997-4c85-bfd8-e80ff74cb9f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/ANo4o4WZ9Ykw7n5LApACzuvOyXBe5rhG1dgRl_L2h0RaDes", "content": "", "creation_timestamp": "2025-08-16T09:00:04.000000Z"}, {"uuid": "c0f82306-9b9a-4b13-b6db-c0f20b9312a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/vicoders/383", "content": "CVE-2025-8088 \u2013 \u062b\u063a\u0631\u0629 WinRAR (Path Traversal via ADS)\n\n\u0627\u0644\u062a\u0635\u0646\u064a\u0641: CVSS 8.4 \u2013 \u062e\u0637\u064a\u0631\u0629\n\u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0645\u062a\u0623\u062b\u0631\u0629: \u062c\u0645\u064a\u0639 \u0625\u0635\u062f\u0627\u0631\u0627\u062a WinRAR \u062d\u062a\u0649 7.12 (\u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 UnRAR.dll \u0648\u0627\u0644\u0643\u0648\u062f \u0627\u0644\u0645\u0635\u062f\u0631\u064a)\n\u062a\u0645 \u0627\u0644\u0625\u0635\u0644\u0627\u062d \u0641\u064a: WinRAR 7.13 (30 \u064a\u0648\u0644\u064a\u0648 2025)\n\n\u0648\u0635\u0641 \u0627\u0644\u062b\u063a\u0631\u0629\n\n\u062b\u063a\u0631\u0629 Path Traversal \u062a\u064f\u0645\u0643\u0651\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0645\u0646 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 Alternate Data Streams (ADSes) \u062f\u0627\u062e\u0644 \u0645\u0644\u0641\u0627\u062a RAR \u0645\u064f\u0639\u062f\u0651\u0629 \u062e\u0635\u064a\u0635\u064b\u0627\u060c \u0645\u0645\u0627 \u064a\u0633\u0645\u062d \u0628\u0625\u0633\u0642\u0627\u0637 \u0645\u0644\u0641\u0627\u062a \u0641\u064a \u0623\u0645\u0627\u0643\u0646 \u062d\u0633\u0627\u0633\u0629 \u062e\u0627\u0631\u062c \u0645\u062c\u0644\u062f \u0627\u0644\u0627\u0633\u062a\u062e\u0631\u0627\u062c \u0627\u0644\u0645\u062d\u062f\u062f (\u0645\u062b\u0644 \u0645\u062c\u0644\u062f Startup \u0641\u064a \u0648\u064a\u0646\u062f\u0648\u0632).\n\u0639\u0646\u062f \u0625\u0639\u0627\u062f\u0629 \u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u062c\u0647\u0627\u0632\u060c \u064a\u0645\u0643\u0646 \u062a\u0634\u063a\u064a\u0644 \u0645\u0644\u0641\u0627\u062a \u0636\u0627\u0631\u0629 \u062a\u0644\u0642\u0627\u0626\u064a\u064b\u0627 \u0645\u062b\u0644 DLL \u0623\u0648 .lnk.\n\n\u0637\u0631\u064a\u0642\u0629 \u0627\u0644\u0647\u062c\u0648\u0645\n\n\u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u064a\u0636\u064a\u0641 \u062a\u0633\u0644\u0633\u0644\u0627\u062a \u0645\u0633\u0627\u0631 .. \u0641\u064a \u0627\u0644\u0645\u0633\u0627\u0631\u0627\u062a \u062f\u0627\u062e\u0644 \u0627\u0644\u0640 ADS \u0628\u0645\u0644\u0641 RAR.\n\n\u0627\u0644\u0645\u0644\u0641 \u064a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 decoy (\u0645\u0644\u0641 \u0648\u0647\u0645\u064a) \u0648\u0645\u0644\u0641 payload \u0636\u0627\u0631.\n\n\u0639\u0646\u062f \u0641\u0643 \u0627\u0644\u0636\u063a\u0637\u060c \u0627\u0644\u0645\u0644\u0641 \u0627\u0644\u0636\u0627\u0631 \u064a\u0646\u062a\u0642\u0644 \u0625\u0644\u0649 \u0645\u0648\u0642\u0639 \u062d\u0631\u062c \u0641\u064a \u0627\u0644\u0646\u0638\u0627\u0645.\n\n\u063a\u0627\u0644\u0628\u064b\u0627 \u064a\u062a\u0645 \u0625\u064a\u0635\u0627\u0644 \u0627\u0644\u0645\u0644\u0641 \u0639\u0628\u0631 \u0647\u062c\u0645\u0627\u062a spearphishing (\u0645\u062b\u0644 \u0631\u0633\u0627\u0626\u0644 \u0648\u0638\u0627\u0626\u0641 \u0648\u0647\u0645\u064a\u0629).\n\n\n\u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0641\u064a \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u062d\u0642\u064a\u0642\u064a\u0629\n\n\u0623\u0648\u0644 \u0631\u0635\u062f: 18 \u064a\u0648\u0644\u064a\u0648 2025 \u0628\u0648\u0627\u0633\u0637\u0629 ESET.\n\n\u0627\u0644\u0645\u0646\u0641\u0630\u0648\u0646: \u0645\u062c\u0645\u0648\u0639\u0629 RomCom (\u0627\u0644\u0645\u0639\u0631\u0648\u0641\u0629 \u0623\u064a\u0636\u064b\u0627 \u0628\u0640 Storm-0978 / Tropical Scorpius / UNC2596).\n\n\u0627\u0644\u0623\u0647\u062f\u0627\u0641: \u0627\u0644\u0642\u0637\u0627\u0639\u0627\u062a \u0627\u0644\u0645\u0627\u0644\u064a\u0629\u060c \u0627\u0644\u062f\u0641\u0627\u0639\u060c \u0627\u0644\u062a\u0635\u0646\u064a\u0639\u060c \u0648\u0627\u0644\u0644\u0648\u062c\u0633\u062a\u064a\u0627\u062a \u0641\u064a \u0623\u0648\u0631\u0648\u0628\u0627 \u0648\u0643\u0646\u062f\u0627.\n\n\nPoC \u0641\u064a \u0627\u0644\u0631\u064a\u0628\u0648\n\n\u0633\u0643\u0631\u064a\u0628\u062a Python \u064a\u0646\u0634\u0626 \u0645\u0644\u0641 RAR \u0636\u0627\u0631 \u0644\u0644\u0627\u0633\u062a\u0639\u0631\u0627\u0636.\n\n\u064a\u0639\u062a\u0645\u062f \u0639\u0644\u0649 \u0623\u062f\u0627\u0629 rar.exe \u0627\u0644\u062e\u0627\u0635\u0629 \u0628\u0640 WinRAR.\n\n\u064a\u0645\u0643\u0646 \u062a\u062e\u0635\u064a\u0635:\n\n\u0645\u0644\u0641 \u0627\u0644\u0640 decoy.\n\n\u0645\u0644\u0641 \u0627\u0644\u0640 payload.\n\n\u0645\u0633\u0627\u0631 \u0625\u0633\u0642\u0627\u0637 \u0627\u0644\u0645\u0644\u0641.\n\n\u0639\u062f\u062f \u0645\u0633\u062a\u0648\u064a\u0627\u062a ...\n\n\n\u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u062a\u0639\u0644\u064a\u0645\u064a \u0641\u0642\u0637 \u2013 \u063a\u064a\u0631 \u0645\u062e\u0635\u0635 \u0644\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u0641\u0639\u0644\u064a.", "creation_timestamp": "2025-08-15T18:20:49.000000Z"}, {"uuid": "11942473-a2da-4023-8732-45f4eb5c5d1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/56322", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aA POC exploit for WinRAR vulnerability (CVE-2025-8088) affecting versions 7.12 and lower\nURL\uff1ahttps://github.com/papcaii2004/CVE-2025-8088-WinRAR-builder\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-21T05:07:43.000000Z"}, {"uuid": "bd53a296-31d4-4c55-95e0-965a9c763312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/Q-s80O6b5uVlmhryR8-ZciI2tLabDBtdKOXSX3QDtGfzYSw", "content": "", "creation_timestamp": "2025-11-13T21:00:05.000000Z"}, {"uuid": "b8286903-6ebe-4c27-bdab-97684877343f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/59597", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPath traversal tool based on CVE-2025-8088\nURL\uff1ahttps://github.com/WezRyan/CVE-2025-8088\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-13T17:36:14.000000Z"}, {"uuid": "84de752b-a2fc-47a9-bcdf-177f82a5e38c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/58013", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-8088\nURL\uff1ahttps://github.com/B1ack4sh/Blackash-CVE-2025-8088\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-02T19:26:38.000000Z"}, {"uuid": "060b4c0b-70dc-4fb9-b2ba-064f0ca8c857", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/PO0oWKD_0dQKMdfBlUdpALOxC_j0fHtsMlyXztmz6yr7XDo", "content": "", "creation_timestamp": "2025-10-24T10:33:18.000000Z"}, {"uuid": "c5143796-1e9b-4b31-84ef-4d9e60f76eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/8S_4X1NYxsBuwQbEVJTNgd4SGDWOMWwvUMLfwiHO4aN-Lh0", "content": "", "creation_timestamp": "2025-10-21T21:00:05.000000Z"}, {"uuid": "bdb326dc-38ef-4de0-aec2-ee7c6b8fa1c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/Qlu2TxpQ7PzRE5b0iJTHRMQcK91tVZ4jRE6zApsmv8LxsDQ", "content": "", "creation_timestamp": "2025-11-03T03:00:05.000000Z"}, {"uuid": "00a60e7b-24cd-4e2f-9966-02adaa0c74d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/iXe-OVT1tHXQdDlbAPn638pHPy57Ybzfo66cLw-We4__N40", "content": "", "creation_timestamp": "2025-11-08T15:00:08.000000Z"}, {"uuid": "d872458e-ecb0-4492-967d-098f8b057293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/biMvhx_bQZEIPstafGoTx4XDcTb7SVDT87NXCIRdYuzVTC0", "content": "", "creation_timestamp": "2025-11-11T01:35:20.000000Z"}, {"uuid": "01ce0318-d4e2-4a76-ba3d-70a907604808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/Wl9CrQOxsQx4KE-BWCuSJcJWoX1uryv_sC7BNGTK9kDjsYQ", "content": "", "creation_timestamp": "2026-04-07T21:00:05.000000Z"}, {"uuid": "f945eaad-792e-4112-9391-143d38863f40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/58803", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPath traversal tool based on CVE-2025-8088 vulnerability\nURL\uff1ahttps://github.com/shourout/CVE-2025-8088\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-08T08:10:02.000000Z"}, {"uuid": "1302b50c-1cba-4bb1-b5dc-cadf1030f132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/kasperskyb2b/2103", "content": "\u2755 \u0422\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0438 \u0432 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: \u041e\u0421 Linux \u0441\u0442\u0430\u043b\u0430 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430 \n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0430\u0445 \u0432 4 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430.  \u041a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u043a\u0430\u0440\u0442\u0438\u043d\u0430 \u0441\u0438\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0438 \u0448\u0438\u0440\u043e\u043a\u043e\u0437\u0430\u0445\u0432\u0430\u0442\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u043d\u043e \u0438 \u0442\u0430\u043c, \u0438 \u0442\u0430\u043c \u043d\u0435\u0441\u043a\u0443\u0447\u043d\u043e. \n\n\u041d\u0435\u0438\u0437\u0431\u0438\u0440\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438:\n\ud83d\udfe3 \u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u043e\u0441\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0430 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0435 \u041e\u0421 *nix \u2014 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0430 \u0432\u0441\u0435\u0445 \u0430\u0442\u0430\u043a \u0437\u0430 2025 \u0433\u043e\u0434 \u043f\u0440\u0438\u0448\u043b\u0430\u0441\u044c \u043d\u0430 4 \u043a\u0432\u0430\u0440\u0442\u0430\u043b. \u041e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u043e \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043d\u043e \u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Linux \u0434\u043b\u044f \u0434\u0435\u0441\u043a\u0442\u043e\u043f\u043e\u0432;\n\ud83d\udfe3\u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0435 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0434\u0440\u0435\u0432\u043d\u0438\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u044b Linux, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u044e\u0442\u0441\u044f: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Dirty Pipe, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Netfilter. \u042d\u0442\u043e CVE-2022-0847, CVE-2019-13272, CVE-2021-22555, CVE-2023-32233;\n\ud83d\udfe3 \u0434\u043b\u044f \u041e\u0421 Windows \u0442\u0435\u043c\u043f\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441\u043d\u0438\u0437\u0438\u043b\u0438\u0441\u044c \u0434\u043e \u0441\u0430\u043c\u043e\u0433\u043e \u043d\u0438\u0437\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0432 2025 \u0433\u043e\u0434\u0443, \u043d\u043e \u043e\u043d\u0438 \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u044e\u0442 \u043d\u0430\u0447\u0430\u043b\u043e 2024-\u0433\u043e;\n\ud83d\udfe3 \u0434\u043e\u043c\u0438\u043d\u0438\u0440\u0443\u044e\u0442 \u0442\u0430\u043a\u0436\u0435 \u0434\u0440\u0435\u0432\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: CVE-2017-11882 \u0438 CVE-2018-0802 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Equation Editor \u0438\u0437 \u043f\u0430\u043a\u0435\u0442\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Microsoft Office, CVE-2017-0199 \u0432 Microsoft Office \u0438 WordPad.\n\n\u041a\u0430\u043a \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445, \u0442\u0430\u043a \u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u0435\u0435 \u0446\u0435\u043b\u044f\u0442\u0441\u044f \u0432 \u0434\u0435\u0444\u0435\u043a\u0442\u044b \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u043e\u0432. \u0412 2025 \u0433\u043e\u0434\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 WinRAR (CVE-2023-38831, CVE-2025-6218 \u0438 -8088) \u0438 7-Zip (CVE-2025-11001).\n\n\u0426\u0435\u043b\u0435\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438:\n\ud83d\udfe3 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0441\u0432\u0435\u0436\u0438\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u044b \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u043e\u043b\u0433\u043e\u0434\u0430;\n\ud83d\udfe3 \u0441 \u0433\u0438\u0433\u0430\u043d\u0442\u0441\u043a\u0438\u043c \u043e\u0442\u0440\u044b\u0432\u043e\u043c \u0434\u043e\u043c\u0438\u043d\u0438\u0440\u0443\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f React4shell, \u0432 \u0442\u0440\u043e\u0439\u043a\u0435 \u043b\u0438\u0434\u0435\u0440\u043e\u0432 \u0442\u0430\u043a\u0436\u0435 CVE-2025-61882 \u0432 Oracle E-Business Suite \u0438 CVE-2025-8088 \u0432 WinRAR;\n\ud83d\udfe3 \u043c\u043d\u043e\u0433\u0438\u0435 CVE \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u0437\u0430\u043a\u0440\u0435\u043f\u044f\u0442\u0441\u044f \u0432 \u0445\u0438\u0442-\u043f\u0430\u0440\u0430\u0434\u0435 \u043d\u0430\u0434\u043e\u043b\u0433\u043e, \u0434\u043b\u044f \u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435;\n\ud83d\udfe3 \u043f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u044e\u0442 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 Silver, Mythic, Havoc \u0438 Metasploit.\n\n\ud83d\udccc \u0412 \u043f\u043e\u043b\u043d\u043e\u043c \u043e\u0442\u0447\u0451\u0442\u0435 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 Securelist \u044d\u0442\u0438 \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0438 \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043d\u044b \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e, \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u044b \u0441\u0432\u044f\u0437\u0438 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0441 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 2025 \u0433\u043e\u0434\u0430. \n\n#\u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2026-03-10T14:02:31.000000Z"}, {"uuid": "1f5c5f8e-b0f1-4b39-ab47-5e7fc1a8813d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/kasperskyb2b/2082", "content": "\ud83d\udd25 \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83d\udfe3APT Head Mare \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0433\u043e\u0434\u0430 \u0432\u043e\u043e\u0440\u0443\u0436\u0438\u043b\u0430\u0441\u044c \u043d\u043e\u0432\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 PhantomHeart \u0438 \u043f\u0440\u043e\u043a\u0441\u0438-\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 PhantomProxyLite, \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 PowerShell. \u042d\u0442\u043e \u043e\u0442\u0440\u0430\u0436\u0430\u0435\u0442 \u0441\u0442\u0440\u0435\u043c\u043b\u0435\u043d\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c LotL. \u0414\u043b\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u00a0 BDU:2025-10114 \u0432\u00a0 TrueConf Server \u0438 \u0440\u0430\u0441\u0441\u044b\u043b\u0430\u044e\u0442 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433.\n\n\ud83d\udfe2\u041f\u043e\u043c\u0438\u043d\u0443\u0442\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 TTPs \u0433\u0440\u0443\u043f\u043f\u044b Scattered Spider/Muddled Libra, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u043e\u0431\u0440\u0430\u0437\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u043a\u0438, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 \u043f\u043e\u0441\u043b\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 VMware vSphere\u00a0 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0436\u0435\u0440\u0442\u0432\u044b. \n\n\ud83d\udfe3\u041d\u043e\u0432\u044b\u0435 \u0448\u0442\u0440\u0438\u0445\u0438 \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u044e \u0441 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0435\u0439 Notepad++ \u2014 \u0440\u0430\u0437\u0431\u043e\u0440 \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u0445 \u043f\u0430\u0442\u0442\u0435\u0440\u043d\u043e\u0432 \u0432 TTPs \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445. \u0410\u0442\u0430\u043a\u0443 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 APT\u00a0 Lotus Blossom/G0030.\n\n\ud83d\udfe2\u0413\u0440\u0443\u043f\u043f\u0430 Storm-2603 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e CVE-2026-23760 \u0432\u00a0 SmarterMail \u0447\u0442\u043e\u0431\u044b \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a Warlock \u043d\u0430 \u043f\u043e\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \n\n\ud83d\udfe3\u041d\u043e\u0432\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u0441\u0432\u0435\u0436\u0438\u0445 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 BRICKSTORM (\u043a\u043e\u043d\u0435\u0447\u043d\u043e \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Ivanti).\n\n\ud83d\udfe3\u0422\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0438 \u0441\u043f\u0430\u043c\u0430 \u0438 \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u0437\u0430 2025 \u0433\u043e\u0434. \u041a\u0440\u043e\u043c\u0435 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438, \u0438\u043d\u0442\u0435\u0440\u0435\u0441 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0438, \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0435 \u0437\u0430 \u0433\u043e\u0434.\n\n\ud83d\udfe2\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0412\u041f\u041e Lockbit 5.0, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 Windows, Linux \u0438 ESXi. \n\n\ud83d\udfe1\u041e\u0431\u0437\u043e\u0440 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 Google \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f Gemini \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u041c\u043d\u043e\u0433\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u044b \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0418\u0418 \u043d\u0430 \u043f\u043e\u0442\u043e\u043a \u043a \u043a\u043e\u043d\u0446\u0443 \u0433\u043e\u0434\u0430 \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438, \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043c\u043f\u043e\u0432 \u043f\u043e\u0447\u0442\u044b \u0438 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0443\u0431\u0435\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u043f\u0440\u0438\u043c\u0430\u043d\u043e\u043a.\n\n\ud83d\udfe3\u0420\u0430\u0437\u0431\u043e\u0440 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a RenEngine \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b ACR Stealer. \u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043f\u0438\u0440\u0430\u0442\u0441\u043a\u0438\u0435 \u0438\u0433\u0440\u044b. \n\n\ud83d\udfe2\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u0447\u0442\u0438 \u0433\u043e\u0434\u0438\u0447\u043d\u043e\u0433\u043e \u0437\u0430\u0442\u0438\u0448\u044c\u044f \u0432\u043e\u0437\u043e\u0431\u043d\u043e\u0432\u0438\u043b\u043e\u0441\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 LummaStealer.\n\n\ud83d\udd35\u041e\u043a\u043e\u043b\u043e 80% \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0418\u0422-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e WinRAR. \u0414\u0435\u0444\u0435\u043a\u0442\u043e\u043c CVE-2025-8088 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438.\n\n\ud83d\udfe2\u041c\u043e\u0434\u0430 \u043f\u0438\u0441\u0430\u0442\u044c \u0432\u0441\u0451 \u043f\u043e\u0434\u0440\u044f\u0434 \u043d\u0430 Node.js \u0434\u043e\u0431\u0440\u0430\u043b\u0430\u0441\u044c \u0434\u043e \u0412\u041f\u041e \u2014 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0439\u0442\u0435 LTX stealer.\n\n\ud83d\udfe3\u041e\u0431\u0437\u043e\u0440 ZerodayRAT, \u043f\u0440\u043e\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u0447\u0435\u0440\u0435\u0437 Telegram \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f Android \u0438 iOS. \u0421\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f iOS \u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0432 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0442\u043e\u043b\u043a\u043e\u043c \u043d\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u044b, \u0437\u0430\u0442\u043e \u0435\u0441\u0442\u044c \u043c\u043d\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u043e\u0432 \u0430\u0434\u043c\u0438\u043d\u043a\u0438 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u0430. \n\n\ud83d\udd35Juniper research \u0438 Revolut \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u044e\u0442 \u043e\u0431\u044a\u0451\u043c \u043f\u043b\u0430\u0442\u043d\u043e\u0439 \u0440\u0435\u043a\u043b\u0430\u043c\u044b \u0432 \u0441\u043e\u0446\u0441\u0435\u0442\u044f\u0445, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0434\u0430\u043b\u0438 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u0438 \u0432 2025 \u0433\u043e\u0434\u0443 \u0432 \u043e\u0434\u043d\u043e\u0439 \u0415\u0432\u0440\u043e\u043f\u0435, \u0432 \u0441\u043a\u0440\u043e\u043c\u043d\u044b\u0435 3,8 \u043c\u043b\u0440\u0434. \u0444\u0443\u043d\u0442\u043e\u0432. \n\n\ud83d\udd34\u0412\u043e\u0442 \u043e\u043d\u0438, \u043f\u0440\u043e\u0441\u0442\u044b\u0435 \u043f\u043e\u0432\u0441\u0435\u0434\u043d\u0435\u0432\u043d\u044b\u0435 \u0443\u0436\u0430\u0441\u044b \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a. \u041e\u0434\u043d\u0430 \u0443\u0442\u0451\u043a\u0448\u0430\u044f \u0443\u0447\u0451\u0442\u043a\u0430 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0444\u0438\u0440\u043c\u044b-\u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043b\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u043f\u043e\u043a\u0440\u0443\u043f\u043d\u0435\u0435, \u0434\u0430\u0432\u0430\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0418\u0422-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 200 (!) \u0430\u044d\u0440\u043e\u043f\u043e\u0440\u0442\u043e\u0432. \u0414\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0430\u044d\u0440\u043e\u043f\u043e\u0440\u0442\u0430\u043c\u0438, \u044d\u0442\u043e \u0431\u044b\u043b \u0443\u0447\u0451\u0442\u043a\u0430 \u043a \u043f\u043e\u0440\u0442\u0430\u043b\u0443 NGOSS (Next Generation Operations Support System).\n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 @\u041f2\u0422", "creation_timestamp": "2026-02-16T07:11:28.000000Z"}, {"uuid": "0b5f3e3f-22ff-4826-9cc4-f763cf977215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/kasperskyb2b/2075", "content": "\ud83d\udd0e \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83d\udc6e\u200d\u2640\ufe0f \u041d\u043e\u0432\u044b\u0435 TTPs \u0433\u0440\u0443\u043f\u043f\u044b Stan Ghouls/Bloody Wolf, \u0432\u0435\u0434\u0443\u0449\u0435\u0439 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445, \u0418\u0422- \u0438 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0432 \u0420\u0424 \u0438 \u0426\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u043e\u0439 \u0410\u0437\u0438\u0438. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u043c \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u043c \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433. \u041f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0438 \u0432 \u0441\u0432\u043e\u0439 \u0430\u0440\u0441\u0435\u043d\u0430\u043b \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e Mirai.\n\n\ud83e\udd28 \u0420\u0430\u0437\u0431\u043e\u0440 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 APT TGR-STA-1030/UNC6619. \u0412 \u0440\u0430\u043c\u043a\u0430\u0445 Shadow Campaigns \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b 70 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0438 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u041a\u0418\u0418 \u0432 37 \u0441\u0442\u0440\u0430\u043d\u0430\u0445, \u0430 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0430 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u043f\u0440\u043e\u0442\u0438\u0432 155 \u0441\u0442\u0440\u0430\u043d. \u0426\u0435\u043b\u044c\u044e \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436 \u0438 \u0441\u0431\u043e\u0440 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u0445. \u041f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 N-day, \u0444\u0438\u0448\u0438\u043d\u0433, Cobalt Strike/VShell/Havoc, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0444\u0438\u0440\u043c\u0435\u043d\u043d\u044b\u0439 eBPF-\u0440\u0443\u0442\u043a\u0438\u0442 ShadowGuard.\n\n\ud83d\udcbe \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430 DKnife, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0440\u043e\u0443\u0442\u0435\u0440\u044b \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0412\u041f\u041e \u0436\u0435\u0440\u0442\u0432\u0430\u043c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 AitM.  \u0412\u041f\u041e \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 Android \u0438 Windows, \u043f\u043e\u043c\u043e\u0433\u0430\u044f \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0436\u0435\u0440\u0442\u0432\u0430\u043c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u044b ShadowPad \u0438 DarkNimbus, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u043c\u0435\u0448\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0442\u0440\u0430\u0444\u0438\u043a \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043e\u0432.\n\n\ud83d\udd14 \u0410\u043d\u0430\u043b\u0438\u0437 \u043a\u0440\u0443\u043f\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u0432\u0437\u043b\u043e\u043c\u0443 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 TeamPCP \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0435\u0442 \u0432\u0441\u0451, \u0447\u0442\u043e \u043f\u043b\u043e\u0445\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043e \u2014 \u043e\u0442 Docker \u0438 Kubernetes \u0434\u043e Redis \u0438 Ray \u2014 \u0447\u0442\u043e\u0431\u044b \u0432\u043e\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440\u044b \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0430\u0442\u0430\u043a\u0438. \n\n\ud83d\udc40 \u041c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b ransomware \u0438 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0412\u041f\u041e (LockBit, Qilin, BlackCat, Ursnif, NetSupport) \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u044e\u0442 \u043e\u0434\u043d\u043e\u0442\u0438\u043f\u043d\u044b\u043c\u0438 \u0448\u0430\u0431\u043b\u043e\u043d\u0430\u043c\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437  ISPsystem VMmanager.  \u0417\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u04212 \u0438\u043c\u0435\u044e\u0442 \u043e\u0434\u043d\u043e\u0442\u0438\u043f\u043d\u044b\u0435 \u0438\u043c\u0435\u043d\u0430 \u0445\u043e\u0441\u0442\u043e\u0432 \u043d\u0430\u043f\u043e\u0434\u043e\u0431\u0438\u0435 WIN-J9D866ESIJ2. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u044d\u0442\u0430 \u043e\u0431\u0449\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0434\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \"\u043f\u0443\u043b\u0435\u043d\u0435\u043f\u0440\u043e\u0431\u0438\u0432\u0430\u0435\u043c\u044b\u0445\" \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u0432 \u0438 \u043d\u0435\u043b\u044c\u0437\u044f \u043d\u0430 \u044d\u0442\u043e\u043c \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043e\u0434\u043d\u043e\u043c\u0443 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0443 \u0443\u0433\u0440\u043e\u0437. \n\n\ud83d\uddff React2Shell \u0436\u0438\u0432\u0451\u0442 \u0438 \u0442\u043e\u0440\u0436\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u2014 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0442 \u0441 \u0435\u0433\u043e \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u0435\u0440\u0432\u0435\u0440\u044b NGINX \u0438 \u043f\u0435\u0440\u0435\u0430\u0434\u0440\u0435\u0441\u0443\u044e\u0442 \u0442\u0440\u0430\u0444\u0438\u043a \u043d\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0434\u043e\u043c\u0435\u043d\u044b. \u0416\u0435\u0440\u0442\u0432\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u0434\u043e\u043c\u0435\u043d\u0430\u0445 .gov \u0438 .edu, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0430\u0437\u0438\u0430\u0442\u0441\u043a\u0438\u0445 TLD (in, .id, .pe, .bd, .th).\n\n\ud83c\udf83 \u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u00ab\u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438\u00bb n8n \u044f\u0432\u043d\u043e \u0441\u043d\u044f\u0442\u0441\u044f \u043b\u0430\u0432\u0440\u044b Ivanti. \u0421\u043d\u043e\u0432\u0430 CVSS 10.0 \u2014 CVE-2026-25049 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u044e\u0449\u0435\u043c\u0443 \u0441 \u0431\u0430\u0437\u043e\u0432\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440. \n\n\ud83d\udce0 \u0420\u0435\u0434\u043a\u0438\u0439, \u0432\u044b\u043c\u0438\u0440\u0430\u044e\u0449\u0438\u0439 \u0432\u0438\u0434 \u2014 \u0412\u041f\u041e \u00ab\u043a\u043e\u043c\u0430\u043d\u0434\u044b Legion\u00bb \u0434\u0435\u043b\u0430\u0435\u0442 \u0432\u0438\u0434, \u0447\u0442\u043e \u043e\u043d\u043e ransomware, \u0445\u043e\u0442\u044f \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440, \u043a\u0430\u043a \u0432 \u043d\u0435\u0432\u0438\u043d\u043d\u044b\u0435 \u043d\u0443\u043b\u0435\u0432\u044b\u0435. \n\n\ud83d\udcbe \u0413\u0440\u0443\u043f\u043f\u0430 Amaranth Dragon, \u0432\u0445\u043e\u0434\u044f\u0449\u0430\u044f \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440 APT41, \u0432\u043e\u043e\u0440\u0443\u0436\u0438\u043b\u0430\u0441\u044c \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0438\u043c \u0445\u0438\u0442\u043e\u043c CVE-2025-8088 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c WinRAR), \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0436\u0435\u0440\u0442\u0432\u0430\u043c \u0444\u0438\u0440\u043c\u0435\u043d\u043d\u044b\u0439 Amaranth Loader, \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043c\u0430\u044f\u0447\u043e\u043a Havoc C2, \u043b\u0438\u0431\u043e \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u043e\u0435 \u0412\u041f\u041e TGAmaranth RAT, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0439 (\u0432\u044b \u0443\u0433\u0430\u0434\u0430\u043b\u0438) \u0447\u0435\u0440\u0435\u0437 Telegram. \u0426\u0435\u043b\u044c\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436 \u0437\u0430 \u0433\u043e\u0441\u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438 \u0438 \u043f\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u043e\u0440\u0433\u0430\u043d\u0430\u043c\u0438 \u0432 \u042e\u0412\u0410.\n\n\u2699\ufe0f \u0421\u0432\u0435\u0436\u0438\u0439 \u043a\u0435\u0439\u0441 \u0431\u043e\u0440\u044c\u0431\u044b \u0440\u0430\u043d\u0441\u043e\u043c\u0432\u0430\u0440\u0449\u0438\u043a\u043e\u0432 \u0441 EDR \u2014 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u043d\u043e\u0441\u044f\u0442 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u043e\u0442 \u041f\u041e EnCase, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0432 \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u0442\u0438\u043a\u0435.\n\n\ud83d\udcbb\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0437\u0430\u043f\u0443\u0442\u0430\u043d\u043d\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0438 \u0412\u041f\u041e AsyncRAT, \u0441\u043e\u0447\u0435\u0442\u0430\u044e\u0449\u0435\u0439 \u043e\u0431\u0440\u0430\u0437\u044b vhd, \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 IPFS, \u043c\u0443\u0434\u0440\u0451\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b PowerShell \u0438 \u0434\u0435\u0441\u044f\u0442\u043e\u043a \u0434\u0440\u0443\u0433\u0438\u0445 \u0442\u0440\u044e\u043a\u043e\u0432.\n\n\ud83d\udcf1 \u041f\u0435\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u043e\u0442 Google \u2014 \u0432\u0441\u0435\u0433\u043e 7,5% \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Android \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 \u0441\u0432\u0435\u0436\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u041e\u0421.\n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 @\u041f2\u0422", "creation_timestamp": "2026-02-09T07:09:14.000000Z"}, {"uuid": "5675005e-091d-418c-8143-bc8cec9291ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/ctinow/245282", "content": "Amaranth-Dragon: Weaponizing CVE-2025-8088 for Targeted Espionage in the Southeast Asia\nhttps://ift.tt/epxz30Y", "creation_timestamp": "2026-02-04T13:59:42.000000Z"}, {"uuid": "5d360dea-adb5-4edb-b412-e9558ccf3aa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/true_secator/7978", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432 \u0441\u0432\u043e\u0435\u043c \u043d\u043e\u0432\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u043a\u043e\u043d\u0441\u0442\u0430\u0442\u0438\u0440\u0443\u044e\u0442, \u0447\u0442\u043e 4 \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2025 \u0441\u0442\u0430\u043b \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u043d\u0430\u0441\u044b\u0449\u0435\u043d\u043d\u044b\u0445 \u043f\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0443 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0439 \u0433\u0440\u043e\u043c\u043a\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u0445 \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445.\n\n\u0410\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044f \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0438 \u0432 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u041b\u041a \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0432 \u044d\u0442\u043e\u043c \u043f\u043b\u0430\u043d\u0435 \u041e\u0421 Linux \u0441\u0442\u0430\u043b\u0430 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430. \u041d\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b \u0433\u043e\u0434\u0430 \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u044b \u0432\u0441\u0435\u0445 \u0430\u0442\u0430\u043a \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c\u0438 \u0434\u043b\u044f Linux \u043e\u0442 \u0441\u0443\u043c\u043c\u0430\u0440\u043d\u044b\u0445 \u0433\u043e\u0434\u043e\u0432\u044b\u0445 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439.\u00a0\n\n\u0412 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u043f\u0440\u0438\u0447\u0438\u043d\u043e\u0439 \u0442\u0430\u043a\u043e\u0433\u043e \u0432\u0441\u043f\u043b\u0435\u0441\u043a\u0430 \u0441\u0442\u0430\u043b\u043e \u0431\u044b\u0441\u0442\u0440\u043e\u0440\u0430\u0441\u0442\u0443\u0449\u0435\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Linux.\n\n\u041a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u043a\u0430\u0440\u0442\u0438\u043d\u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0438\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0438 \u0448\u0438\u0440\u043e\u043a\u043e\u0437\u0430\u0445\u0432\u0430\u0442\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \u0412 \u043e\u0431\u043e\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 - \u0434\u0438\u043d\u0430\u043c\u0438\u043a\u0430 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0430.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0435\u0438\u0437\u0431\u0438\u0440\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a:\n- \u043f\u043e\u0434 \u043f\u0440\u0438\u0446\u0435\u043b\u043e\u043c \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u0442\u0430\u0440\u044b\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u044b Linux, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u044e\u0442\u0441\u044f: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Dirty Pipe, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Netfilter (CVE-2022-0847, CVE-2019-13272, CVE-2021-22555, CVE-2023-32233);\n- \u0434\u043b\u044f \u041e\u0421 Windows \u0442\u0435\u043c\u043f\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441\u043d\u0438\u0437\u0438\u043b\u0438\u0441\u044c \u0434\u043e \u0441\u0430\u043c\u043e\u0433\u043e \u043d\u0438\u0437\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0432 2025 \u0433\u043e\u0434\u0443, \u043d\u043e \u043e\u043d\u0438 \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u044e\u0442 \u043d\u0430\u0447\u0430\u043b\u043e 2024-\u0433\u043e, \u0434\u043e\u043c\u0438\u043d\u0438\u0440\u0443\u044e\u0442 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 CVE-2017-11882 \u0438 CVE-2018-0802 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Equation Editor \u0438\u0437 Microsoft Office, CVE-2017-0199 \u0432 Microsoft Office \u0438 WordPad.\n\n\u041a\u0430\u043a \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445, \u0442\u0430\u043a \u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u0435\u0435 \u043f\u043e\u0434 \u0443\u0434\u0430\u0440 \u043f\u043e\u043f\u0430\u0434\u0430\u044e\u0442 \u0432 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0430\u0445. \u0412 2025 \u0433\u043e\u0434\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 WinRAR (CVE-2023-38831, CVE-2025-6218 \u0438 -8088) \u0438 7-Zip (CVE-2025-11001).\n\n\u041f\u043e \u0447\u0430\u0441\u0442\u0438 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a:\n- \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0441\u0432\u0435\u0436\u0438\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u044b \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u043e\u043b\u0433\u043e\u0434\u0430;\n- \u0441 \u0433\u0438\u0433\u0430\u043d\u0442\u0441\u043a\u0438\u043c \u043e\u0442\u0440\u044b\u0432\u043e\u043c \u0434\u043e\u043c\u0438\u043d\u0438\u0440\u0443\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f React4shell, \u0442\u0430\u043a\u0436\u0435 \u0432 \u0442\u0440\u043e\u0439\u043a\u0435 \u043b\u0438\u0434\u0435\u0440\u043e\u0432 \u0442\u0430\u043a\u0436\u0435 CVE-2025-61882 \u0432 Oracle E-Business Suite \u0438 CVE-2025-8088 \u0432 WinRAR;\n- \u043c\u043d\u043e\u0433\u0438\u0435 CVE \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u043e\u0441\u0442\u0430\u043d\u0443\u0442\u0441\u044f \u0432 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u0435 \u043d\u0430\u0434\u043e\u043b\u0433\u043e, \u0434\u043b\u044f \u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435;\n- \u043f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u044e\u0442 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 Silver, Mythic, Havoc \u0438 Metasploit.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0433\u0440\u0430\u0444\u0438\u043a\u0430, \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0438 \u0438 \u0440\u0430\u0437\u0431\u043e\u0440 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 \u041b\u041a.", "creation_timestamp": "2026-03-10T15:26:05.000000Z"}, {"uuid": "e00aef63-9c71-4e92-ba52-8a991c775f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/cyberguerre/3948", "content": "\u0424\u0438\u0448\u0438\u043d\u0433 \u0447\u0435\u0440\u0435\u0437 \u0433\u043e\u0441\u0441\u0430\u0439\u0442\u044b \u0423\u043a\u0440\u0430\u0438\u043d\u044b\n\n\u0423\u043a\u0440\u0430\u0438\u043d\u0441\u043a\u0438\u0439 CERT \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043e \u0432\u0435\u0434\u0443\u0449\u0438\u0445\u0441\u044f \u0441 \u044f\u043d\u0432\u0430\u0440\u044f \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u0430\u0445 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u043f\u0438\u0441\u0435\u043c \u044f\u043a\u043e\u0431\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0447\u0438\u043d\u043e\u0432\u043d\u0438\u043a\u043e\u0432, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0438\u0445 \u0433\u0440\u0430\u0436\u0434\u0430\u043d\u0430\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u041d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0438\u0434\u043e\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. CERT-UA \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u043e\u0432\u0430\u043b \u044d\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u043e\u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0435 PalachPro, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 UAC-0252.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u044b \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u0436\u0435\u0440\u0442\u0432\u0430\u043c \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0434\u0432\u0443\u043c\u044f \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u043f\u0443\u0442\u044f\u043c\u0438. \u0427\u0430\u0441\u0442\u044c \u043f\u0438\u0441\u0435\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0438 \u0430\u0440\u0445\u0438\u0432 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c, \u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u2014 \u0441\u0441\u044b\u043b\u043a\u0443 \u043d\u0430 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u0435.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043a\u0430\u043a \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0434\u043e\u043c\u0435\u043d\u044b, \u0442\u0430\u043a \u0438 \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0434\u0432\u0430 \u0443\u043a\u0440\u0430\u0438\u043d\u0441\u043a\u0438\u0445 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u0430, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0412 \u043f\u0438\u0441\u044c\u043c\u0435 \u0441\u0442\u043e\u044f\u043b\u0430 \u0433\u0438\u043f\u0435\u0440\u0441\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0440\u0435\u0441\u0443\u0440\u0441, \u043f\u0440\u0430\u0432\u0434\u0430 \u043f\u0443\u0442\u044c \u0431\u044b\u043b \u0447\u0443\u0442\u044c \u0434\u043b\u0438\u043d\u043d\u0435\u0435: \u043a \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c\u0443 \u0430\u0434\u0440\u0435\u0441\u0443 \u0431\u044b\u043b \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u0441\u043a\u0440\u0438\u043f\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u0441 GitHub'\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445.\n\n\u0412 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438 CERT-UA \u0441\u0430\u0439\u0442\u044b, \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u0430\u0441\u044c \u0430\u0442\u0430\u043a\u0430, \u043d\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u044b. \u041d\u043e \u043f\u043e \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u0430\u043c \u0432\u0438\u0434\u043d\u043e, \u0447\u0442\u043e \u044d\u0442\u043e \u0431\u044b\u043b\u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043c\u0438\u0441\u0441\u0438\u0438, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u0440\u0435\u0433\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 \u0441\u0444\u0435\u0440\u0430\u0445 \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u043a\u0438 \u0438 \u043a\u043e\u043c\u043c\u0443\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433, \u0438 \u041d\u0438\u043a\u043e\u043b\u0430\u0435\u0432\u0441\u043a\u043e\u0439 \u043e\u0431\u043b\u0430\u0441\u0442\u043d\u043e\u0439 \u0432\u043e\u0435\u043d\u043d\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438.\n\n\u0412 \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0442\u0440\u0438 \u0440\u0430\u0437\u043d\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u0430, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0437\u0430\u0440\u0430\u0436\u0430\u043b\u0438\u0441\u044c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b \u0436\u0435\u0440\u0442\u0432: \u043d\u043e\u0432\u044b\u0439 \u0441\u0442\u0438\u043b\u0435\u0440 SHADOWSNIFF, \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u0441\u0442\u0438\u043b\u0435\u0440 Salat \u0438 \u0431\u044d\u043a\u0434\u043e\u0440 DEAFTICK (\u0432 \u043e\u0442\u0447\u0451\u0442\u0435 \u043e\u043d \u043d\u0430\u0437\u0432\u0430\u043d \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043d\u044b\u043c). \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0431\u044b\u043b\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b: \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u0441 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 ransomware \u0438 \u0430\u0440\u0445\u0438\u0432 \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-8088 \u0432 WinRAR, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0435\u0449\u0451 \u0441 \u043b\u0435\u0442\u0430 \u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442.\n\n\u0410\u0432\u0442\u043e\u0440 \u043a\u0430\u043d\u0430\u043b\u0430 PalachPro \u0441 \u043e\u0442\u0447\u0451\u0442\u043e\u043c \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u043b\u0441\u044f \u0438 \u043e\u0441\u0442\u0430\u043b\u0441\u044f \u043d\u0435\u0434\u043e\u0432\u043e\u043b\u0435\u043d \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0438 \u0432 CERT-UA: \u00ab\u0412\u044b \u043d\u0435 \u043c\u043e\u0433\u043b\u0438 \u043c\u043d\u0435 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e\u0435, \u043a\u0440\u0430\u0441\u0438\u0432\u043e\u0435 \u043f\u043e\u0433\u043e\u043d\u044f\u043b\u043e \u0434\u0430\u0442\u044c? 0252? \u0421\u0435\u0440\u044c\u0435\u0437\u043d\u043e? \u0414\u0430\u0432\u0430\u0439\u0442\u0435 0222\u00bb.", "creation_timestamp": "2026-03-05T05:12:57.000000Z"}, {"uuid": "9c6198f9-9700-4efd-bb32-81efe9c4a8f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/QJh2gJnoc4daWcxfNoqT6p9mqDF9F-uED9YOdUj76SKBE8s", "content": "", "creation_timestamp": "2025-08-27T03:00:05.000000Z"}, {"uuid": "5857f712-fb6a-46ba-aee4-d3ec47bb1c67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/TFgIrRyFVdmt-_iXx8f0LX8Ka84NvNMzkX0RvLq3uNFE64w", "content": "", "creation_timestamp": "2025-10-10T03:00:06.000000Z"}, {"uuid": "91f3df61-3260-42be-bcff-6d2fc5ac3c4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/NTfyQynzcS9PwhmyaDxAMy3c_Zr_QUpHlrDqhPEGx6R9TGE", "content": "", "creation_timestamp": "2026-01-11T15:00:09.000000Z"}, {"uuid": "8487514f-7237-4b67-891c-de56bf9b50e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3mkfcr2okeh2g", "content": "", "creation_timestamp": "2026-04-26T10:08:30.861914Z"}, {"uuid": "6188a841-afa3-4492-b243-630e855317dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/Ph5XVLoVKPKzeNd3zHbruXHl3wn31oqUjoUVrNk6if5Q2TM", "content": "", "creation_timestamp": "2026-01-02T21:00:05.000000Z"}, {"uuid": "775c1c16-e69c-4019-ae28-7854184b33fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/cKure/15257", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2025-8088 \u2013 WinRAR Zero-Day Path Traversal Vulnerability Exploited to Execute Malware.\n\nhttps://cybersecuritynews.com/winrar-0-day-exploited/", "creation_timestamp": "2025-08-18T11:33:46.000000Z"}, {"uuid": "1a161ab2-1976-43e1-90ec-b62f3308c0f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/vEUyviaiZGkuLRsynqljbDA9URouLWKwFcm5aN3JpwPCmY8", "content": "", "creation_timestamp": "2025-10-21T09:00:08.000000Z"}, {"uuid": "c4062e08-eb3d-4996-996f-0d9311aae575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/pZwcCYQukOtRLWk7NTp5Nlaw1XUizNIAu3QSCOkD3M6Qc1s", "content": "", "creation_timestamp": "2025-10-17T21:00:04.000000Z"}, {"uuid": "6ffc8705-767b-4237-b234-5004a2fcf382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/55761", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-8088-BUILDER\nURL\uff1ahttps://github.com/aldisakti2/CVE-2025-8088-BUILDER-Winrar-Tool\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-16T20:42:11.000000Z"}, {"uuid": "5a38f53d-6635-45e0-9b6d-f7f40e74c51d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/55704", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-8088 based path traversal tool\nURL\uff1ahttps://github.com/tookATE/CVE-2025-8088\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-16T11:47:58.000000Z"}, {"uuid": "1a2d2745-e2a4-4d1e-ae6e-d3a8b0132bd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/47311", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPython tool for safe archive handling, path traversal awareness, and secure extraction. Inspired by CVE-2025-8088.\nURL\uff1ahttps://github.com/jordan922/CVE-2025-8088\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-08-11T06:15:38.000000Z"}, {"uuid": "f1cbbd35-28f0-44f0-9c18-273d92dc7a1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/GithubRedTeam/48509", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aThis PoC is for authorized study and testing. CVE-2025-8088 is actively exploited, and misuse may violate laws or cause harm. Update to WinRAR 7.13+ to avoid suspicious RARs.\nURL\uff1ahttps://github.com/ghostn4444/CVE-2025-8088\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-08-21T08:24:45.000000Z"}, {"uuid": "76bf55ab-7edd-4b87-867f-93b9630ebad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/48505", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\ude80 Demonstrate the WinRAR CVE-2025-8088 exploit with a PoC RAR archive that installs a VBScript on startup, showcasing its impact on vulnerable systems.\nURL\uff1ahttps://github.com/amel-62/WinRAR-CVE-2025-8088-PoC-RAR\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-08-21T07:42:33.000000Z"}, {"uuid": "a1f89277-d602-412f-b74b-3fde3f4a989d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "Telegram/TR26JPamabQCPfOhS5veNYgHqPNnBfJVv8qfNoaiAk_lOA", "content": "", "creation_timestamp": "2025-08-18T17:36:33.000000Z"}, {"uuid": "8f4a391a-accd-4b18-b09a-1301d9f56056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/51520", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aThis repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.\nURL\uff1ahttps://github.com/techcorp/CVE-2025-8088-Exploit\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-14T07:08:26.000000Z"}, {"uuid": "a3ac27ad-bf97-4edf-9b31-10c2a714d2d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/47564", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-8088 WinRAR Proof of Concept (PoC-Exploit)\nURL\uff1ahttps://github.com/sxyrxyy/CVE-2025-8088-WinRAR-Proof-of-Concept-PoC-Exploit-\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-08-13T11:07:08.000000Z"}, {"uuid": "ab1b198c-b1da-4dc7-b810-d4c90865d652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/48002", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aProof-of-Concept for CVE-2025-8088 vulnerability in WinRAR (path traversal via ADS)\nURL\uff1ahttps://github.com/pexlexity/WinRAR-CVE-2025-8088-Path-Traversal-PoC\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-08-17T06:52:03.000000Z"}, {"uuid": "7498f221-35d5-4589-bc7c-825e9da54720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/49173", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aAn engaging walkthrough on uncovering, patching, and securing the WinRAR CVE-2025-8088 with a hands-on hacker\u2019s twist.\nURL\uff1ahttps://github.com/AdityaBhatt3010/CVE-2025-8088-WinRAR-Zero-Day-Path-Traversal\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-08-26T20:39:23.000000Z"}, {"uuid": "d86b86f1-ef63-430c-a217-7ff19012373c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/47631", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aAdvanced WinRAR Path Traversal Exploit Tool for CVE-2025-8088\nURL\uff1ahttps://github.com/onlytoxi/CVE-2025-8088-Winrar-Tool\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-08-14T00:17:17.000000Z"}, {"uuid": "69f46889-6ffe-42af-a09d-79b6db5d1fbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/51720", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-8088 path traversal tool\nURL\uff1ahttps://github.com/tartalu/CVE-2025-8088\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-15T14:54:05.000000Z"}, {"uuid": "8bb3802c-eba0-47f1-9263-4a3223580fc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/49655", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aA high-performance, memory-safe implementation of the WinRAR CVE-2025-8088 exploit tool, rewritten in Rust for better reliability and performance.\nURL\uff1ahttps://github.com/Kastowm/Anydesk-Exploit-CVE-2025-12654-RCE-Builder\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-08-30T19:55:23.000000Z"}, {"uuid": "43d2722e-b70d-4436-a0e3-8e0009b56181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/49287", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aA high-performance, memory-safe implementation of the WinRAR CVE-2025-8088 exploit tool, rewritten in Rust for better reliability and performance.\nURL\uff1ahttps://github.com/kitsuneshade/WinRAR-Exploit-Tool---Rust-Edition\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-08-27T17:59:57.000000Z"}, {"uuid": "59c7676b-0b3b-4f6b-8e09-c6fc0a87f1b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/50525", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aWinRAR CVE-2025-8088 exploit tool\nURL\uff1ahttps://github.com/cozythrill/CVE-2025-8088\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-06T18:46:27.000000Z"}, {"uuid": "e5686bd8-a257-4dde-bc18-4b2f5cc71311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/53000", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-8088 exploit C++ impl\nURL\uff1ahttps://github.com/0x721658/winrar-malware-exploit\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-25T05:58:37.000000Z"}, {"uuid": "4494b29c-1c0c-4613-92ec-fe9906390e61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/53811", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-8088 based path traversal tool\nURL\uff1ahttps://github.com/MoAlali/CVE-2025-56379\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-01T18:51:28.000000Z"}, {"uuid": "b2c1be71-007d-43f7-a0df-e6ce5017a136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/52098", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aWinRAR\u6f0f\u6d1eCVE-2025-8088\u7684payload\u4e00\u952e\u751f\u6210\u5de5\u5177\nURL\uff1ahttps://github.com/hbesljx/CVE-2025-8088-EXP\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-18T07:12:48.000000Z"}, {"uuid": "9546e81a-9703-4a05-bfc4-9f417bc4592f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/51519", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aThis repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.\nURL\uff1ahttps://github.com/techcorp/CVE-2025-8088-Exploit\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-14T07:08:00.000000Z"}, {"uuid": "3a7891b4-4081-4218-a88a-73793fc60630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/51450", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-8088 path traversal tool\nURL\uff1ahttps://github.com/tartalu/CVE-2025-8088\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-13T15:45:14.000000Z"}, {"uuid": "b6a869be-3471-4252-be5b-d60e52521c4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/52869", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udea8 Exploit WinRAR CVE-2025-8088 with this PoC RAR archive, demonstrating the vulnerability and its impact when executed on the affected software.\nURL\uff1ahttps://github.com/pablo388/WinRAR-CVE-2025-8088-PoC-RAR\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-24T05:39:31.000000Z"}, {"uuid": "b78a5b8c-a6f4-42fa-a9a1-4ec3295dd78c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/53683", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-8088 based path traversal tool\nURL\uff1ahttps://github.com/haspread/CVE-2025-8088\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-30T16:27:05.000000Z"}, {"uuid": "e044980b-ebe9-48e4-884a-a5ec5dff4433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/52665", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-8088 path traversal tool\nURL\uff1ahttps://github.com/kay0te/CVE-2025-8088\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-22T14:51:54.000000Z"}, {"uuid": "0f4b79fe-f747-48b4-8862-5836f3ad77e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/52918", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udea8 Exploit WinRAR CVE-2025-8088 with this PoC RAR archive, demonstrating the vulnerability and its impact when executed on the affected software.\nURL\uff1ahttps://github.com/pablo388/WinRAR-CVE-2025-8088-PoC-RAR\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-24T13:57:43.000000Z"}, {"uuid": "eea8eab3-9935-40c7-8171-965325865539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/53002", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-8088 exploit C++ impl\nURL\uff1ahttps://github.com/lucyna77/winrar-malware-exploit\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-25T06:02:48.000000Z"}, {"uuid": "072349db-619a-4cbf-a729-9df85023f3b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/3QfV2OwNjlG2D0Y1m7AvTd7yKXiJL0Cvj9djK7PFuNGWvfc", "content": "", "creation_timestamp": "2025-09-21T21:00:05.000000Z"}, {"uuid": "d932114d-248f-41f1-b730-be36a4fec3f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/Arab_heroes/1961156", "content": "\u2b05\ufe0f\u062a\u062d\u0644\u064a\u0644 \u0648\u0634\u0631\u062d \u0639\u0645\u0644\u064a \u0644\u062b\u063a\u0631\u0629 WinRAR 2025 \u0628\u0631\u0642\u0645 CVE-2025-8088 \u26a0\ufe0f\n\n\u26a0\ufe0f \u062a\u0633\u0645\u062d \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0628\u0625\u0646\u0634\u0627\u0621 \u0645\u0644\u0641\u0627\u062a \u0627\u0631\u0634\u064a\u0641 RAR #\u20e3 \u062e\u0628\u064a\u062b\u0629 \u0648\u0645\u0635\u0645\u0645\u0629 \u062e\u0635\u064a\u0635\u0627 \u0644\u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0625\u062e\u062a\u0631\u0627\u0642 \ud83d\ude12 \u060c \u0639\u0646\u062f \u0641\u0643 \u0636\u063a\u0637 \u0647\u0630\u0627 \u0627\u0644\u0627\u0631\u0634\u064a\u0641 \u064a\u062a\u0645\u0643\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0645\u0646 \u0648\u0636\u0639 \u0645\u0644\u0641\u0627\u062a \u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u062e\u0628\u064a\u062b\u0629 \u0641\u064a \u0645\u0633\u0627\u0631\u0627\u062a \u062d\u0633\u0627\u0633\u0629 \u0639\u0644\u0649 \u0646\u0638\u0627\u0645 \u0627\u0644\u0636\u062d\u064a\u0629\u060c\ud83d\udcbb \u062b\u0645 \u064a\u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u062b\u063a\u0631\u0629 \u0644\u062a\u062c\u0627\u0648\u0632 \u0645\u0633\u0627\u0631 \u0627\u0644\u0627\u0633\u062a\u062e\u0631\u0627\u062c \u0627\u0644\u0645\u062d\u062f\u062f \u0648\u0648\u0636\u0639 \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0641\u064a \u0645\u062c\u0644\u062f\u0627\u062a \u0628\u062f\u0621 \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u0639\u0628\u0631 \"ADS\"\u060c \u064a\u0624\u062f\u064a \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u0646\u0627\u062c\u062d \u0625\u0644\u0649 \u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0646 \u0628\u0639\u062f \"RCE\" \u0639\u0644\u0649 \u0627\u0644\u062c\u0647\u0627\u0632 \u0627\u0644\u0645\u0635\u0627\u0628 \u0648\u062a\u0639\u062f \u0627\u0644\u062b\u063a\u0631\u0629 \u0646\u0634\u0637\u0629 \u062d\u062a\u064a \u0627\u0644\u0622\u0646 \u0648\u064a\u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u0639\u0644\u064a\u0627\u26a0\ufe0f.\n\n\u0634\u0627\u0647\u062f \u0627\u0644\u0641\u064a\u062f\u064a\u0648 \u0627\u0644\u0639\u0645\u0644\u064a \u0644\u0634\u0631\u062d \u0648\u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u062b\u063a\u0631\u0629 \u0628\u0634\u0643\u0644 \u062a\u0641\u0635\u064a\u0644\u064a: \u25b6\ufe0f\nhttps://youtu.be/Ht5kSv8hA6A?si=jwgxu5hJSR9x4b4g\n\n\ud83d\udeab\u0644\u0644\u062d\u0645\u0627\u064a\u0629 \u0645\u0646 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0642\u0645 \u0628\u062a\u062d\u062f\u064a\u062b WinRAR \u0625\u0644\u064a \u0623\u062d\u062f\u062b \u0625\u0635\u062f\u0627\u0631 \u0648\u0644\u0627 \u062a\u0633\u062a\u062e\u062f\u0645 \u0627\u0644\u0643\u0631\u0627\u0643 \u0627\u0648 \u0627\u0644\u0628\u0627\u062a\u0634\u0627\u062a \u0627\u0644\u0645\u0646\u062a\u0634\u0631\u0629 \u0645\u0624\u062e\u0631\u0627\u064b.\n\n\n#V7x_Official #V7xTeam \n#V7x #ThreatIntelligence #investigation #DigitalFootprint #ANYRUN #CyberSecurity", "creation_timestamp": "2025-10-01T19:01:06.000000Z"}, {"uuid": "18d7516c-ebc2-4164-9cf8-55e8999117c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/1PVo8rCcFRNLkMNl6krYvndkDFPxV-T8cUtCEs2tbNVK_1o", "content": "", "creation_timestamp": "2025-09-14T15:00:06.000000Z"}, {"uuid": "44384954-59f9-44ca-9575-1c8c4c797406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/CISnvBhtpcTpuXbWc1GKhDmNaPppcwD0-mkgvvv0pIShiw8", "content": "", "creation_timestamp": "2025-09-25T04:38:43.000000Z"}, {"uuid": "ca1dacf2-642e-4788-8785-e58f5b42e417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/2Eqz6E7XYyETwBKa5y29ppyBld-HesnUwhJGUaKWD46GURI", "content": "", "creation_timestamp": "2025-09-25T09:00:04.000000Z"}, {"uuid": "53429f4e-19be-46f5-9f19-35c5b7153e1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/pPehM9XP9UqPJSkSBo6XE6EECTJ7mFLOl2isDLbdd3m6RM0", "content": "", "creation_timestamp": "2025-09-26T21:00:06.000000Z"}, {"uuid": "a772cd51-514d-41db-bd3b-546b87bdcd76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/70", "content": "https://github.com/jordan922/CVE-2025-8088/blob/main/CVE-2025-8088.py", "creation_timestamp": "2025-08-12T01:27:56.000000Z"}, {"uuid": "4c1d36ff-9836-4c53-86a6-e177ec4d1dde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/yUnwmY3OKcZj_97dDe2EqaNsOTl0fvN67D1zYTFMrROvcVE", "content": "", "creation_timestamp": "2025-09-18T15:00:07.000000Z"}, {"uuid": "ba383973-4408-423e-8aaf-810479117cdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/captainsmok3r_official/69", "content": "\u203c\ufe0f WinRAR flaw CVE-2025-8088 has been fixed in version 7.13. \u203c\ufe0f\nNewly discovered WinRAR exploit linked to Russian hacking group, can plant backdoor malware \u2014 zero day hack requires manual update to fix\nsource:\nhttps://www.tomshardware.com/tech-industry/cyber-security/newly-discovered-winrar-exploit-linked-to-russian-hacking-group-can-plant-backdoor-malware-zero-day-hack-requires-manual-update-to-fix", "creation_timestamp": "2025-08-11T23:17:22.000000Z"}, {"uuid": "7f5a5071-3fc1-4cf2-8232-75bb26ec09c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "Telegram/OkdNTIJRF9Ug_BmS0lK_g7aTeYfTunvdBTP79vgb90uLPQ", "content": "", "creation_timestamp": "2025-08-18T17:36:34.000000Z"}, {"uuid": "3a64a1c6-1fa5-452d-8c83-d8bc4f1eb048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/HackerOne/3889", "content": "Winrar  Exploit Tools\n\nhttps://github.com/onlytoxi/CVE-2025-8088-Winrar-Tool", "creation_timestamp": "2025-09-13T17:47:44.000000Z"}, {"uuid": "2cb357eb-d0ba-4e9e-ad9e-8914557bc96f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/4435", "content": "WinRAR Zero-Day CVE-2025-8088 Exploited to Spread RomCom Malware \u2013 hackread.com\n\nSat, 09 Aug 2025 22:46:10", "creation_timestamp": "2025-08-09T16:03:03.000000Z"}, {"uuid": "da995c0b-d7fc-4480-97f1-83eb5e04cfb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/cyberguerre/3407", "content": "\u041a\u043e\u043c\u0430\u043d\u0434\u0430 ESET \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0432\u043e\u0439 \u043e\u0442\u0447\u0451\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 WinRAR (CVE-2025-8088), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u0447\u0435\u0448\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 BI.ZONE.\n\n\u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 BI.ZONE \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 ESET \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0439 \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u0435 \u043d\u0435 \u043d\u0430 \u0420\u043e\u0441\u0441\u0438\u044e (\u0438 \u0423\u0437\u0431\u0435\u043a\u0438\u0441\u0442\u0430\u043d), \u0430 \u043d\u0430 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0435, \u043b\u043e\u0433\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435, \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 \u0438 \u043e\u0431\u043e\u0440\u043e\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0432 \u0415\u0432\u0440\u043e\u043f\u0435 \u0438 \u041a\u0430\u043d\u0430\u0434\u0435. \u0410\u0442\u0430\u043a\u0438 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0435 RomCom (\u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a Storm-0978, UNC2596, Tropical Scorpius). \u0417\u0430\u043f\u0430\u0434\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u0435\u0451 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u0420\u043e\u0441\u0441\u0438\u0435\u0439 \u0438\u043b\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0438\u0437 \u0420\u043e\u0441\u0441\u0438\u0438. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u0442\u0447\u0451\u0442\u0430\u043c, \u0434\u043b\u044f RomCom \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u043e \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e \u043c\u043e\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432 \u0438 \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c ESET, \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u0441\u043f\u0438\u0440\u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0437\u0438\u0440\u043e\u0434\u0435\u044f \u0432 WinRAR 18-21 \u0438\u044e\u043b\u044f, \u0442\u043e \u0435\u0441\u0442\u044c \u0432\u0441\u0435\u0433\u043e \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0440\u0430\u043d\u044c\u0448\u0435, \u0447\u0435\u043c \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0441\u0432\u0435\u0442\u0438\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 Paper Werewolf/GOFFEE, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0420\u043e\u0441\u0441\u0438\u044e. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u043d\u0435\u043a\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f WinRAR \u0434\u043e \u044d\u0442\u043e\u0433\u043e \u0440\u0435\u043a\u043b\u0430\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u043d\u0430 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0445 \u0444\u043e\u0440\u0443\u043c\u0430\u0445, \u043e\u0431\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u0432\u043f\u043e\u043b\u043d\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0435\u0433\u043e \u0438\u0437 \u043e\u0434\u043d\u0438\u0445 \u0440\u0443\u043a.", "creation_timestamp": "2025-08-11T14:59:32.000000Z"}, {"uuid": "742f031a-a460-4570-be00-996b2126fb48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/7YsezDaia3BA-XoFQp1rAm9DJWkOqrM1x1h9TBjHQNo0SrQ", "content": "", "creation_timestamp": "2025-08-27T09:00:04.000000Z"}, {"uuid": "d4024671-5769-483f-9bbd-304b2072a43a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/BleepingComputer/22722", "content": "\u200aDetails emerge on WinRAR zero-day attacks that infected PCs with malware\n\nResearchers have released a report detailing how a recent WinRAR path traversal vulnerability tracked as CVE-2025-8088 was exploited in zero-day attacks by the Russian 'RomCom' hacking group to drop different malware payloads. [...]\n\nhttps://www.bleepingcomputer.com/news/security/details-emerge-on-winrar-zero-day-attacks-that-infected-pcs-with-malware/", "creation_timestamp": "2025-08-12T18:34:14.000000Z"}, {"uuid": "7f69ac0d-ff63-474b-8300-3440d06298d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/BleepingComputer/22708", "content": "\u200aWinRAR zero-day flaw exploited by RomCom hackers in phishing attacks\n\nA recently fixed WinRAR vulnerability tracked as\u00a0CVE-2025-8088 was\u00a0exploited as a zero-day in phishing attacks to install the RomCom malware. [...]\n\nhttps://www.bleepingcomputer.com/news/security/winrar-zero-day-flaw-exploited-by-romcom-hackers-in-phishing-attacks/", "creation_timestamp": "2025-08-08T21:26:18.000000Z"}, {"uuid": "689ec710-6ffb-4799-ab24-3d4375460091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/thehackernews/7318", "content": "\ud83d\uded1 ALERT - Stop what you\u2019re doing & update WinRAR.\n\nA zero-day (CVE-2025-8088) is under active attack\u2014booby-trapped archives can drop malware into Windows startup & hijack your PC.\n\nLinked to Russian group \u201cPaper Werewolf\u201d\n\nUpdate to v7.13 now. Details \u2192 https://thehackernews.com/2025/08/winrar-zero-day-under-active.html", "creation_timestamp": "2025-08-11T05:57:25.000000Z"}, {"uuid": "85fafa47-a933-415d-beff-e1099a76741a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/43nF5lJhGtbb1qyAajHa3_tJPci6HOGVjssoxle-TcDWbss", "content": "", "creation_timestamp": "2025-08-14T03:00:05.000000Z"}, {"uuid": "dd721e77-e7db-43a0-810a-c39c8773637f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/OoyvOxhDepv_VW-3kj9cRIaGdoLcZyggYa8Ds5zdnxyRhfM", "content": "", "creation_timestamp": "2025-08-12T03:00:06.000000Z"}, {"uuid": "10249563-a726-48ae-bbf8-93ce3a6602d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/lGYbLck6G7m7DaRiRxfjxEzwq5qsYzU-Axb6YLGnEcc6ewQ", "content": "", "creation_timestamp": "2025-08-12T21:00:04.000000Z"}, {"uuid": "87b01956-062d-409c-adce-c22c1ff6c12e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/6lKByArH9FS3kGV0eBc5AxMt53ZNy3FxF1pgZuVY2NXgTHI", "content": "", "creation_timestamp": "2025-08-21T15:00:06.000000Z"}, {"uuid": "db3f99bb-6cea-4bab-b1f1-8e59ff997c6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/l5yGjY1hSiP3pTVFOwwMuZMDfoayAV8V9pI9TJkCuOyDVd0", "content": "", "creation_timestamp": "2025-08-17T09:00:04.000000Z"}, {"uuid": "6dfb13ee-1525-4486-a8da-f94cfca72d18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/lfASgpARQv2c57G6EJ6ZFDpLBzh_hf6PR1VyFeUcDrYroUc", "content": "", "creation_timestamp": "2025-08-11T09:00:05.000000Z"}, {"uuid": "0284c5bd-41f9-42cf-bcfa-68a19f289fe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/0ZbDi1BEJ5MKsJqfuMVHwXbByqnv1-nFI5hW5HW2uwELHB4", "content": "", "creation_timestamp": "2025-08-13T15:00:06.000000Z"}, {"uuid": "d2d756ac-4ddd-4854-bd79-b79b8b6316af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/EeyEyY9zr7YTm_7JjxecixN1JQ6Z8f6tuIjcc8sbZwTv", "content": "", "creation_timestamp": "2025-08-19T02:33:57.000000Z"}, {"uuid": "08d4851d-f217-41ce-8680-1a30696d22cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_News/7160", "content": "\ud83d\udea8 News Alert!\n\nSource: Hackread \u2013 Latest Cybersecurity, Hacking News, Tech, AI & Crypto\nTitle: WinRAR Zero-Day CVE-2025-8088 Exploited to Spread RomCom Malware\nLink: https://hackread.com/winrar-zero-day-cve-2025-8088-spread-romcom-malware/", "creation_timestamp": "2025-08-09T14:47:02.000000Z"}, {"uuid": "ea4bd811-a726-41f7-91f0-9d0dc34453f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "Telegram/6IvK-rWAL-jsCCNHlB8SKuxjbJ2xv7SFuOZYA6KxmvdpYw", "content": "", "creation_timestamp": "2025-08-11T06:57:28.000000Z"}, {"uuid": "d70be5b0-c208-4aca-9404-9b9c325ea878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/xakep_ru/17950", "content": "0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WinRAR \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0430\u0441\u044c \u0432 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 ESET \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WinRAR (CVE-2025-8088) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day \u0432 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u0430\u043b\u0432\u0430\u0440\u0438 RomCom.\n\nhttps://xakep.ru/2025/08/12/winrar-romcom/", "creation_timestamp": "2025-08-12T12:48:41.000000Z"}, {"uuid": "31414f98-7611-4a81-9219-dd40f5723795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/cy_Sl6Zf6P0JnYhjy6caBfGaAYXXVmNV89Pw-RvdiUadlsV2", "content": "", "creation_timestamp": "2025-08-09T07:35:06.000000Z"}, {"uuid": "3325d650-684c-4f86-9f1f-38b7b5d6334e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/HackerNewscyber/2309", "content": "\ud83d\udea8\u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632-\u0635\u0641\u0631 WinRAR \u0628\u0631\u0627\u06cc \u0627\u0646\u062a\u0634\u0627\u0631 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 RomCom\n\n\u26aa\ufe0f\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc WinRAR \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2025-8088 \u06a9\u0647 \u062f\u0631 \u0646\u0633\u062e\u0647 7.13 \u0627\u06cc\u0646 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0628\u0631\u0637\u0631\u0641 \u0634\u062f\u0647\u060c \u067e\u06cc\u0634 \u0627\u0632 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648\u0635\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u0646\u0642\u0635 \u0631\u0648\u0632-\u0635\u0641\u0631 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0641\u06cc\u0634\u06cc\u0646\u06af \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u062d\u0641\u0631\u0647 \u0627\u0632 \u0646\u0648\u0639 \u00ab\u0639\u0628\u0648\u0631 \u0627\u0632 \u0645\u0633\u06cc\u0631\u00bb \u0628\u0648\u062f\u0647 \u0648 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u0627 \u0627\u06cc\u062c\u0627\u062f \u0622\u0631\u0634\u06cc\u0648\u0647\u0627\u06cc \u0645\u062e\u0631\u0628\u060c \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc\u06cc \u0631\u0627 \u062f\u0631 \u067e\u0648\u0634\u0647 Startup \u0648\u06cc\u0646\u062f\u0648\u0632 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0647 \u0648 \u062f\u0631 \u0646\u0647\u0627\u06cc\u062a \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u062e\u0648\u062f \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f.\n\n\u26aa\ufe0f\u0628\u0647 \u06af\u0632\u0627\u0631\u0634 \u0634\u0631\u06a9\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc ESET\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u062f\u0631 \u0642\u0627\u0644\u0628 \u0627\u06cc\u0645\u06cc\u0644\u200c\u0647\u0627\u06cc \u0647\u062f\u0641\u0645\u0646\u062f (Spear Phishing) \u062d\u0627\u0648\u06cc \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc RAR \u0622\u0644\u0648\u062f\u0647\u060c \u0627\u0642\u062f\u0627\u0645 \u0628\u0647 \u0627\u0646\u062a\u0634\u0627\u0631 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 RomCom \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f. \u0627\u06cc\u0646 \u062d\u0645\u0644\u0627\u062a \u0628\u0647 \u06cc\u06a9 \u06af\u0631\u0648\u0647 \u0633\u0627\u06cc\u0628\u0631\u06cc \u0645\u0646\u062a\u0633\u0628 \u0628\u0647 \u0631\u0648\u0633\u06cc\u0647 \u0646\u0633\u0628\u062a \u062f\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u067e\u06cc\u0634\u200c\u062a\u0631 \u062f\u0631 \u0639\u0645\u0644\u06cc\u0627\u062a \u0628\u0627\u062c\u200c\u0627\u0641\u0632\u0627\u0631\u06cc\u060c \u0633\u0631\u0642\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0631\u0648\u0632-\u0635\u0641\u0631 \u0645\u0631\u0648\u0631\u06af\u0631\u0647\u0627\u06cc Firefox \u0648 Tor \u0641\u0639\u0627\u0644 \u0628\u0648\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83d\udc9c @HackerNewsCyber", "creation_timestamp": "2025-08-09T08:07:39.000000Z"}, {"uuid": "70e1d50e-c58f-448b-b64e-94de9a5808c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/33669", "content": "WinRAR Zero-Day CVE-2025-8088 Exploited to Spread RomCom Malware \u2013 hackread.com\n\nSat, 09 Aug 2025 22:46:10", "creation_timestamp": "2025-08-09T16:03:03.000000Z"}, {"uuid": "c3cfd41f-c64a-4b67-b14b-5c34749efed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/15319", "content": "WinRAR Zero-Day CVE-2025-8088 Exploited to Spread RomCom Malware \u2013 hackread.com\n\nSat, 09 Aug 2025 22:46:10", "creation_timestamp": "2025-08-09T16:03:03.000000Z"}, {"uuid": "2f19029f-c05b-4908-a378-b66c67cb5dca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/ctinow/236243", "content": "Phishing attacks exploit WinRAR flaw CVE-2025-8088 to install RomCom\nhttps://ift.tt/xwCQ5er", "creation_timestamp": "2025-08-09T07:34:16.000000Z"}, {"uuid": "fdaf4492-a493-4682-b51f-020ee1d1caf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/52096", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aWinRAR\u6f0f\u6d1eCVE-2025-8088\u7684payload\u4e00\u952e\u751f\u6210\u5de5\u5177\nURL\uff1ahttps://github.com/hbesljx/CVE-2025-8088-EXP\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-18T06:55:54.000000Z"}, {"uuid": "4eafdd31-e02c-47c7-b0ed-9457133e1af1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/52551", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-8088 path traversal tool\nURL\uff1ahttps://github.com/m4nbun/CVE-2025-8088\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-21T17:56:11.000000Z"}, {"uuid": "063b4fe9-b97c-4a96-a6a8-218ddd00e207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/53179", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-8088 based path traversal tool\nURL\uff1ahttps://github.com/kyomber/CVE-2025-8088\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-26T14:38:47.000000Z"}, {"uuid": "dda00dfd-e31b-4f11-a9ac-7ea7f0701018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/CyberDispatch/1798", "content": "Russian hackers \"Gamaredon\" are exploiting a critical WinRAR vulnerability to attack Ukraine.\n\nThey\u2019re weaponizing CVE-2025-8088 with GammaPhish HTA files.", "creation_timestamp": "2026-08-30T00:00:40.010176Z"}, {"uuid": "299315ce-ef78-4917-a930-b8e274992bd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/CyberDispatch/711", "content": "Amaranth-Dragon targeted Southeast Asian government and law enforcement networks in 2025, with links to the APT41 ecosystem.\n\nCampaigns leveraged political lures and the WinRAR CVE-2025-8088 RCE flaw, using cloud delivery and geo-fenced infrastructure for stealth.", "creation_timestamp": "2026-08-30T00:00:47.709559Z"}, {"uuid": "d041fefc-dec4-4fc4-9a63-0c4ed8073aac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/CyberDispatch/662", "content": "China-linked Amaranth-Dragon targeted Southeast Asian government and law enforcement networks in 2025, with links to the APT41 ecosystem.\n\nCampaigns leveraged political lures and the WinRAR CVE-2025-8088 RCE flaw, using cloud delivery and geo-fenced infrastructure for stealth.", "creation_timestamp": "2026-08-30T00:00:48.097522Z"}, {"uuid": "5dd00b7e-8736-4bbf-825c-bb7dfb38a20c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/clubic-off.bsky.social/post/3mkzjk2dxy42p", "content": "WinRAR 7.21 corrige un bug de corruption d'archives introduit par la 7.20 et rappelle qu'il faut encore t\u00e9l\u00e9charger chaque mise \u00e0 jour soi-m\u00eame. Dix mois apr\u00e8s le patch, la faille CVE-2025-8088 est toujours exploit\u00e9e.", "creation_timestamp": "2026-05-04T11:03:06.754371Z"}, {"uuid": "01989a58-180e-4fed-8716-731631a4e9a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/sysodmins/26551", "content": "\ud83d\udd0d 0-day \u0432 WinRAR \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u043b\u044f \u0444\u0438\u0448\u0438\u043d\u0433\u0430\n\nESET \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-8088 \u0432 WinRAR, \u0437\u0430\u043a\u0440\u044b\u0442\u0430\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 7.13 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0438\u044e\u043b\u044f, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0430\u0441\u044c \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0435\u0449\u0451 \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0430. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0445\u043e\u0434 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u043f\u0430\u043f\u043a\u0443 \u0430\u0432\u0442\u043e\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Windows, \u0447\u0442\u043e \u0434\u0430\u0432\u0430\u043b\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0430\u0432\u0442\u043e\u0437\u0430\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0432\u0445\u043e\u0434\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 RomCom (\u043e\u043d\u0430 \u0436\u0435 Storm-0978, Tropical Scorpius, UNC2596) \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043e\u0432 SnipBot, RustyClaw \u0438 Mythic. \u0416\u0435\u0440\u0442\u0432\u0430\u043c\u0438 \u0441\u0442\u0430\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438\u0437 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0433\u043e, \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e, \u043e\u0431\u043e\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u0438 \u043b\u043e\u0433\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u0435\u043a\u0442\u043e\u0440\u043e\u0432 \u0432 \u041a\u0430\u043d\u0430\u0434\u0435 \u0438 \u0415\u0432\u0440\u043e\u043f\u0435.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "creation_timestamp": "2025-08-13T03:09:37.000000Z"}, {"uuid": "f554d804-0da2-4006-84bc-65c9e795b48a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-e8c8129d-b09e02c4de9c4f4a", "content": "Exploits and vulnerabilities in Q1 2026\nDuring Q1 2026, the exploit kits leveraged by threat actors to target user systems expanded once again, incorporating new exploits for the Microsoft Office platform, as well as Windows and Linux operating systems.\nIn this report, we dive into the statistics on published vulnerabilities and exploits, as well as the known vulnerabilities leveraged by popular C2 frameworks throughout Q1 2026.\nStatistics on registered vulnerabilities\nThis section provides statistical data on registered vulnerabilities. The data is sourced from cve.org.\nWe examine the number of registered CVEs for each month starting from January 2022. The total volume of vulnerabilities continues rising and, according to current reports, the use of AI agents for discovering security issues is expected to further reinforce this upward trend.\nTotal published vulnerabilities per month from 2022 through 2026 (download)\nNext, we analyze the number of new critical vulnerabilities (CVSS > 8.9) over the same period.\nTotal critical vulnerabilities published per month from 2022 through 2026 (download)\nThe graph indicates that while the volume of critical vulnerabilities slightly decreased compared to previous years, an upward trend remained clearly visible. At present, we attribute this to the fact that the end of last year was marked by the disclosure of several severe vulnerabilities in web frameworks. The current growth is driven by high-profile issues like React2Shell, the release of exploit frameworks for mobile platforms, and the uncovering of secondary vulnerabilities during the remediation of previously discovered ones. We will be able to test this hypothesis in the next quarter; if correct, the second quarter will show a significant decline, similar to the pattern observed in the previous year.\nExploitation statistics\nThis section presents statistics on vulnerability exploitation for Q1 2026. The data draws on open sources and our telemetry.\nWindows and Linux vulnerability exploitation\nIn Q1 2026, threat actor toolsets were updated with exploits for new, recently registered vulnerabilities. However, we first examine the list of veteran vulnerabilities that consistently account for the largest share of detections:\n\nCVE-2018-0802: a remote code execution (RCE) vulnerability in the Equation Editor component\nCVE-2017-11882: another RCE vulnerability also affecting Equation Editor\nCVE-2017-0199: a vulnerability in Microsoft Office and WordPad that allows an attacker to gain control over the system\nCVE-2023-38831: a vulnerability resulting from the improper handling of objects contained within an archive\nCVE-2025-6218: a vulnerability allowing the specification of relative paths to extract files into arbitrary directories, potentially leading to malicious command execution\nCVE-2025-8088: a directory traversal bypass vulnerability during file extraction utilizing NTFS Streams\nAmong the newcomers, we have observed exploits targeting the Microsoft Office platform and Windows OS components. Notably, these new vulnerabilities exploit logic flaws arising from the interaction between multiple systems, making them technically difficult to isolate within a specific file or library. A list of these vulnerabilities is provided below:\n\nCVE-2026-21509 and CVE-2026-21514: security feature bypass vulnerabilities: despite Protected View being enabled, a specially crafted file can still execute malicious code without the user\u2019s knowledge. Malicious commands are executed on the victim\u2019s system with the privileges of the user who opened the file.\nCVE-2026-21513: a vulnerability in the Internet Explorer MSHTML engine, which is used to open websites and render HTML markup. The vulnerability involves bypassing rules that restrict the execution of files from untrusted network sources. Interestingly, the data provider for this vulnerability was an LNK file.\nThese three vulnerabilities were utilized together in a single chain during attacks on Windows-based user systems. While this combination is noteworthy, we believe the widespread use of the entire chain as a unified exploit will likely decline due to its instability. We anticipate that these vulnerabilities will eventually be applied individually as initial entry vectors in phishing campaigns.\nBelow is the trend of exploit detections on user Windows systems starting from Q1 2025.\nDynamics of the number of Windows users encountering exploits, Q1 2025 \u2013 Q1 2026. The number of users who encountered exploits in Q1 2025 is taken as 100% (download)\nThe vulnerabilities listed here can be leveraged to gain initial access to a vulnerable system and for privilege escalation. This underscores the critical importance of timely software updates.\nOn Linux devices, exploits for the following vulnerabilities were detected most frequently:\n\nCVE-2022-0847: a vulnerability known as Dirty Pipe, which enables privilege escalation and the hijacking of running applications\nCVE-2019-13272: a vulnerability caused by improper handling of privilege inheritance, which can be exploited to achieve privilege escalation\nCVE-2021-22555: a heap out-of-bounds write vulnerability in the Netfilter kernel subsystem\nCVE-2023-32233: a vulnerability in the Netfilter subsystem that allows for Use-After-Free conditions and privilege escalation through the improper processing of network requests\nDynamics of the number of Linux users encountering exploits, Q1 2025 \u2013 Q1 2026. The number of users who encountered exploits in Q1 2025 is taken as 100% (download)\nIn the first quarter of 2026, we observed a decrease in the number of detected exploits; however, the detection rates are on the rise relative to the same period last year. For the Linux operating system, the installation of security patches remains critical.\nMost common published exploits\nThe distribution of published exploits by software type in Q1 2026 features an updated set of categories; once again, we see exploits targeting operating systems and Microsoft Office suites.\nDistribution of published exploits by platform, Q1 2026 (download)\nVulnerability exploitation in APT attacks\nWe analyzed which vulnerabilities were utilized in APT attacks during Q1 2026. The ranking provided below includes data based on our telemetry, research, and open sources.\nTOP 10 vulnerabilities exploited in APT attacks, Q1 2026 (download)\nIn Q1 2026, threat actors continued to utilize high-profile vulnerabilities registered in the previous year for APT attacks. The hypothesis we previously proposed has been confirmed: security flaws affecting web applications remain heavily exploited in real-world attacks. However, we are also observing a partial refresh of attacker toolsets. Specifically, during the first quarter of the year, APT campaigns leveraged recently discovered vulnerabilities in Microsoft Office products, edge networking device software, and remote access management systems. Although the most recent vulnerabilities are being exploited most heavily, their general characteristics continue to reinforce established trends regarding the categories of vulnerable software. Consequently, we strongly recommend applying the security patches provided by vendors.\nC2 frameworks\nIn this section, we examine the most popular C2 frameworks used by threat actors and analyze the vulnerabilities targeted by the exploits that interacted with C2 agents in APT attacks.\nThe chart below shows the frequency of known C2 framework usage in attacks against users during Q1 2026, according to open sources.\nTOP 10 C2 frameworks used by APTs to compromise user systems, Q1 2026 (download)\nMetasploit has returned to the top of the list of the most common C2 frameworks, displacing Sliver, which now shares the second position with Havoc. These are followed by Covenant and Mythic, the latter of which previously saw greater popularity. After studying open sources and analyzing samples of malicious C2 agents that contained exploits, we determined that the following vulnerabilities were utilized in APT attacks involving the C2 frameworks mentioned above:\n\nCVE-2023-46604: an insecure deserialization vulnerability allowing for arbitrary code execution within the server process context if the Apache ActiveMQ service is running\nCVE-2024-12356 and CVE-2026-1731: command injection vulnerabilities in BeyondTrust software that allow an attacker to send malicious commands even without system authentication\nCVE-2023-36884: a vulnerability in the Windows Search component that enables command execution on the system, bypassing security mechanisms built into Microsoft Office applications\nCVE-2025-53770: an insecure deserialization vulnerability in Microsoft SharePoint that allows for unauthenticated command execution on the server\nCVE-2025-8088 and CVE-2025-6218: similar directory traversal vulnerabilities that allow files to be extracted from an archive to a predefined path, potentially without the archiving utility displaying any alerts to the user\nThe nature of the described vulnerabilities indicates that they were exploited to gain initial access to the system. Notably, the majority of these security issues are targeted to bypass authentication mechanisms. This is likely due to the fact that C2 agents are being detected effectively, prompting threat actors to reduce the probability of discovery by utilizing bypass exploits.\nNotable vulnerabilities\nThis section highlights the most significant vulnerabilities published in Q1 2026 that have publicly available descriptions.\nCVE-2026-21519: Desktop Window Manager vulnerability\nAt the core of this vulnerability is a Type Confusion flaw. By attempting to access a resource within the Desktop Window Manager subsystem, an attacker can achieve privilege escalation. A necessary condition for exploiting this issue is existing authorization on the system.\nIt is worth noting that the DWM subsystem has been under close scrutiny by threat actors for quite some time. Historically, the primary attack vector involves interacting with the NtDComposition* function set.\nRegPwn (CVE-2026-21533): a system settings access control vulnerability\nCVE-2026-21533 is essentially a logic vulnerability that enables privilege escalation. It stems from the improper handling of privileges within Remote Desktop Services (RDS) components. By modifying service parameters in the registry and replacing the configuration with a custom key, an attacker can elevate privileges to the SYSTEM level. This vulnerability is likely to remain a fixture in threat actor toolsets as a method for establishing persistence and gaining high-level privileges.\nCVE-2026-21514: a Microsoft Office vulnerability\nThis vulnerability was discovered in the wild during attacks on user systems. Notably, an LNK file is used to initiate the exploitation process. CVE-2026-21514 is also a logic issue that allows for bypassing OLE technology restrictions on malicious code execution and the transmission of NetNTLM authentication requests when processing untrusted input.\nClawdbot (CVE-2026-25253): an OpenClaw vulnerability\nThis vulnerability in the AI agent leaks credentials (authentication tokens) when queried via the WebSocket protocol. It can lead to the compromise of the infrastructure where the agent is installed: researchers have confirmed the ability to access local system data and execute commands with elevated privileges. The danger of CVE-2026-25253 is further compounded by the fact that its exploitation has generated numerous attack scenarios, including the use of prompt injections and ClickFix techniques to install stealers on vulnerable systems.\nCVE-2026-34070: LangChain framework vulnerability\nLangChain is an open-source framework designed for building applications powered by large language models (LLMs). A directory traversal vulnerability allowed attackers to access arbitrary files within the infrastructure where the framework was deployed. The core of CVE-2026-34070 lies in the fact that certain functions within langchain_core/prompts/loading.py handled configuration files insecurely. This could potentially lead to the processing of files containing malicious data, which could be leveraged to execute commands and expose critical system information or other sensitive files.\nCVE-2026-22812: an OpenCode vulnerability\nCVE-2026-22812 is another vulnerability identified in AI-assisted coding software. By default, the OpenCode agent provided local access for launching authorized applications via an HTTP server that did not require authentication. Consequently, attackers could execute malicious commands on a vulnerable device with the privileges of the current user.\nConclusion and advice\nWe observe that the registration of vulnerabilities is steadily gaining momentum in Q1 2026, a trend driven by the widespread development of AI tools designed to identify security flaws across various software types. This trajectory is likely to result not only in a higher volume of registered vulnerabilities but also in an increase in exploit-driven attacks, further reinforcing the critical necessity of timely security patch deployment. Additionally, organizations must prioritize vulnerability management and implement effective defensive technologies to mitigate the risks associated with potential exploitation.\nTo ensure the rapid detection of threats involving exploit utilization and to prevent their escalation, it is essential to deploy a reliable security solution. Key features of such a tool include continuous infrastructure monitoring, proactive protection, and vulnerability prioritization based on real-world relevance. These mechanisms are integrated into Kaspersky Next, which also provides endpoint security and protection against cyberattacks of any complexity. \nsecurelist.com/vulnerabilities\u2026", "creation_timestamp": "2026-05-07T10:52:24.204020Z"}, {"uuid": "6abb19c7-e10b-4388-a8ae-968f3361dc2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/S_E_Reborn/6571", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u043b\u0430\u043d\u0434\u0448\u0430\u0444\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u0437\u0430 \u0432\u0442\u043e\u0440\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2026 \u0433\u043e\u0434\u0430.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c \u043a\u043e\u043d\u0441\u0442\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f. \u0412\u043e-\u043f\u0435\u0440\u0432\u044b\u0445, \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 CVE \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u043e \u0431\u0435\u0441\u043f\u0440\u0435\u0446\u0435\u0434\u0435\u043d\u0442\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u043e \u0447\u0430\u0441\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u042d\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u043f\u043e\u0432\u0441\u0435\u043c\u0435\u0441\u0442\u043d\u044b\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u0418\u0418 \u043a\u0430\u043a \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0442\u0430\u043a \u0438 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435, \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u0446\u0435\u043b\u044b\u0435 \u043a\u043b\u0430\u0441\u0441\u044b \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Linux.\n\n\u0412\u043e-\u0432\u0442\u043e\u0440\u044b\u0445, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u0430\u043b\u0438 \u0447\u0430\u0449\u0435 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u043a \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u044b\u0439 \u043f\u0440\u0435\u0446\u0435\u0434\u0435\u043d\u0442 \u0432 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 Windows \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043a \u043d\u0438\u043c: \u043d\u0435 \u0434\u043e\u0436\u0438\u0434\u0430\u0442\u044c\u0441\u044f, \u043f\u043e\u043a\u0430 \u0438\u0445 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0442, \u043d\u0435 \u0433\u043e\u0432\u043e\u0440\u044f \u0443\u0436\u0435 \u043e \u043f\u0430\u0442\u0447\u0430\u0445.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Nightmare Eclipse (\u0438\u043b\u0438 Chaotic Eclipse) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0441\u043f\u0438\u0441\u043e\u043a \u043d\u043e\u0432\u044b\u0445 \u00ab\u0438\u043c\u0435\u043d\u043d\u044b\u0445\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows (BlueHammer, RedSun, YellowKey, GreenPlasma, RougePlanet, UnDefend).\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0441\u043b\u0443\u0447\u0430\u0438 \u043f\u043e\u043a\u0430 \u0435\u0434\u0438\u043d\u0438\u0447\u043d\u044b, \u0432 \u041b\u041a \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u043d\u0438 \u043f\u0435\u0440\u0435\u0440\u0430\u0441\u0442\u0443\u0442 \u0432 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 \u0442\u0440\u0435\u043d\u0434. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0430\u043d\u043d\u044f\u044f \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u043e \u043f\u0435\u0440\u0435\u0434 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0422\u0430\u043a\u0436\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u00ab\u0437\u0430\u0441\u043b\u0443\u0436\u0435\u043d\u043d\u044b\u0435\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041f\u041e \u0434\u043b\u044f Windows, \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u041b\u041a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u044e\u0442 \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u044d\u0442\u043e CVE-2018-0802 \u0438 CVE-2017-11882 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Equation Editor; CVE-2017-0199 \u0432 Microsoft Office \u0438 WordPad; CVE-2023-38831 \u0438 CVE-2025-6218 (ZDI-CAN-27198) \u0432 WinRAR; CVE-2025-8088 \u043f\u043e \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430\u044f CVE-2025-6218.\n\n\u041f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0412 Linux \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u0442\u043e\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0447\u0435\u0440\u043d\u0430\u044f \u043f\u043e\u043b\u043e\u0441\u0430. \u0422\u0430\u043a, \u0431\u044b\u043b \u0440\u0430\u0441\u043a\u0440\u044b\u0442 \u043a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Dirty Frag, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432\u043d\u0443\u0442\u0440\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430, \u0442\u0430\u043a \u0438\u043b\u0438 \u0438\u043d\u0430\u0447\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u043b\u0438\u0441\u044c \u043a \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Linux.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435: CVE-2026-31431 (Copy Fail), CVE-2026-43284, CVE-2026-43500 (Dirty Frag), CVE-2026-46300 (Fragnesia), CVE-2026-31635 (DirtyDecrypt), CVE-2026-43494 (PinTheft) \u0438 CVE-2026-46331 (pedit COW).\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u0441\u0440\u0430\u0437\u0443 \u0441\u0442\u0430\u043b\u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u041b\u041a \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0442\u0430\u043a\u0436\u0435 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2022-0847 (Dirty Pipe), CVE-2019-13272, CVE-2021-22555, CVE-2023-32233.\n\n\u0412 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043f\u043e \u0442\u0438\u043f\u0430\u043c \u041f\u041e \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0430\u0432\u043d\u043e \u043d\u0435 \u043f\u043e\u043f\u0430\u0434\u0430\u043b\u0438 \u0432 \u0432\u044b\u0431\u043e\u0440\u043a\u0443. \u0422\u0430\u043a, \u043c\u044b \u0441\u043d\u043e\u0432\u0430 \u0432\u0438\u0434\u0438\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0442\u0430\u043a\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b, \u043a\u0430\u043a SharePoint.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u0432 APT-\u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430\u043c\u0435\u0442\u0438\u043b\u0441\u044f \u0442\u0440\u0435\u043d\u0434 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0440\u0430\u0437\u0443 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c, \u043a\u0430\u043a \u0438 \u0440\u0430\u043d\u044c\u0448\u0435, \u0432 \u041b\u041a \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438 \u043c\u043d\u043e\u0433\u043e 0-day. \u0421\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u043e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Langflow - \u044d\u0442\u043e \u043e\u0434\u0438\u043d \u0438\u0437 \u043f\u0435\u0440\u0432\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u0435\u0432, \u043a\u043e\u0433\u0434\u0430 APT \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0418\u0418, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0435\u0439\u0447\u0430\u0441 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c.\n\n\u0421\u0430\u043c\u044b\u043c\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u043c\u0438 C2-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430\u043c\u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f Sliver, Havoc, Adaptix\u04212 \u0438 Metasploit.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0433\u0440\u0430\u0444\u0438\u043a\u0430 - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "creation_timestamp": "2026-08-30T01:00:03.686781Z"}, {"uuid": "f5e3fe3e-f14c-4437-a552-86954c3c27e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/780thmibdecyber.bsky.social/post/3mlqekvahjc2z", "content": "Gamaredon, also known as Aqua Blizzard, Primitive Bear, Shuckworm or UAC-0010, has been exploiting CVE-2025-8088 to target Ukrainian organizations.\nHarfang Lab\nharfanglab.io/insidethelab...", "creation_timestamp": "2026-05-13T13:05:22.183318Z"}, {"uuid": "90286463-769a-46d1-a04d-71cf7e6ed766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mlrrkr5rym2j", "content": "Top 3 CVE for last 7 days:\nCVE-2026-43284: 134 interactions\nCVE-2026-43500: 99 interactions\nCVE-2026-31431: 73 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-46300: 14 interactions\nCVE-2026-42945: 7 interactions\nCVE-2025-8088: 6 interactions\n", "creation_timestamp": "2026-05-14T02:30:34.950954Z"}, {"uuid": "4a94965d-4c5a-4bf2-af81-313abea005c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/cyberguerre/4175", "content": "\u0423\u0434\u0430\u0440 \u0447\u0435\u0440\u0435\u0437 WinRAR\n\n\u041b\u0435\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0437\u0438\u0440\u043e\u0434\u0435\u0439-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WinRAR (CVE-2025-8088), \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0430\u0442\u0430\u043a\u0443\u044e\u0442 \u043a\u0430\u043a \u0420\u043e\u0441\u0441\u0438\u044e, \u0442\u0430\u043a \u0438 \u0423\u043a\u0440\u0430\u0438\u043d\u0443.\n\n\u0412 \u0441\u0432\u0435\u0436\u0435\u043c \u043e\u0442\u0447\u0451\u0442\u0435 HarfangLab \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0435 Gamaredon, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u043c\u043d\u043e\u0433\u0438\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u041c\u0438\u0448\u0435\u043d\u044f\u043c\u0438, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0441\u0442\u0430\u043b\u0438 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0444\u0438\u0441\u044b \u0443\u043a\u0440\u0430\u0438\u043d\u0441\u043a\u0438\u0445 \u0433\u043e\u0441\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0421\u0411\u0423, \u0432\u043e\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f, \u0441\u0443\u0434\u044b, \u043e\u0440\u0433\u0430\u043d\u044b \u043f\u0440\u043e\u043a\u0443\u0440\u0430\u0442\u0443\u0440\u044b. \n\n\u0410\u0442\u0430\u043a\u0430 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0433\u043e \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 RAR-\u0430\u0440\u0445\u0438\u0432\u043e\u043c. \u0412 \u0430\u0440\u0445\u0438\u0432\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f PDF-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442, \u043a \u043d\u0435\u043c\u0443 \u0441\u043a\u0440\u044b\u0442\u043d\u043e \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 (\u0432 ADS). \u041f\u0440\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442-\u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 VBS \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0430\u043f\u043a\u0443 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Windows.\n\n\u041e\u0441\u0435\u043d\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u044d\u0442\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 Gamaredon \u0431\u044b\u043b\u0430 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0438\u0437 Qihoo 360, \u0432 \u043d\u0435\u0439 \u0438\u0437 \u0430\u0440\u0445\u0438\u0432\u0430 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u043b\u0441\u044f HTA-\u0444\u0430\u0439\u043b. \u0422\u0435\u043f\u0435\u0440\u044c \u0436\u0435 HTA \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u044d\u0442\u0430\u043f\u0435 \u0430\u0442\u0430\u043a\u0438.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u044d\u0442\u0430\u043f\u043e\u043c \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0441\u043b\u0443\u0436\u0438\u0442 \u0438\u043c\u043f\u043b\u0430\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 HarfangLab \u043d\u0430\u0437\u0432\u0430\u043b\u0430 GamaLoad \u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u0442\u044c\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e HarfangLab, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0434\u0443\u0431\u043b\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u0432\u043e\u044e \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b Cloudflare Workers, \u0430 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0437\u0430\u043f\u0430\u0441\u043d\u044b\u0445 \u2014 \u0434\u043e\u043c\u0435\u043d\u044b \u0432 \u0437\u043e\u043d\u0430\u0445 .ru \u0438 .online, \u0442\u0430\u043a\u0436\u0435 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 Cloudflare. \u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u0432\u0441\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0434\u043e\u043c\u0435\u043d\u044b \u0431\u044b\u043b\u0438 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0447\u0435\u0440\u0435\u0437 \u00ab\u0420\u0435\u0433.\u0440\u0443\u00bb\n\n\u0412 \u0420\u043e\u0441\u0441\u0438\u0438, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb \u0438 Positive Technologies, CVE-2025-8088 \u0442\u043e\u0436\u0435 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u0441\u0440\u0435\u0434\u0438 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0445\u043e\u0442\u044f \u043e \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c.", "creation_timestamp": "2026-05-13T15:55:25.000000Z"}, {"uuid": "e122c714-cff4-4461-bcaa-8738d36cfce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/CyberDispatch/662", "content": "China-linked Amaranth-Dragon targeted Southeast Asian government and law enforcement networks in 2025, with links to the APT41 ecosystem.\n\nCampaigns leveraged political lures and the WinRAR CVE-2025-8088 RCE flaw, using cloud delivery and geo-fenced infrastructure for stealth.", "creation_timestamp": "2026-08-29T20:00:22.267286Z"}, {"uuid": "d01586e2-3a33-4e76-9c02-4e69b07af7eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/CyberDispatch/1798", "content": "Russian hackers \"Gamaredon\" are exploiting a critical WinRAR vulnerability to attack Ukraine.\n\nThey\u2019re weaponizing CVE-2025-8088 with GammaPhish HTA files.", "creation_timestamp": "2026-08-29T20:00:13.466839Z"}, {"uuid": "a9fa69ba-570b-4670-80db-6726b6a53738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/erichkron.bsky.social/post/3mndaxpadxs2a", "content": "WinRAR is back in the cybersecurity headlines, and not for compressing files.\n\nThe Russia-linked Gamaredon group is exploiting a WinRAR vulnerability (CVE-2025-8088) to deliver malware and maintain persistence on victim systems.\n\nPatch your software, folks.\n\nthehackernews.com/2026/06/gama...", "creation_timestamp": "2026-06-02T18:46:44.728913Z"}, {"uuid": "50d46618-d600-4f9a-bfe6-ce44ca23962d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mndcovipl62c", "content": "Gamaredon Exploits WinRAR CVE-2025-8088 to Drop Data-Theft Malware\n\nhttps://blindthoughts.com/gamaredon-winrar-cve-2025-8088-gammaworm-gammasteel\n\n#apt #winrar #cve #malware #patchnow", "creation_timestamp": "2026-06-02T19:17:33.527378Z"}, {"uuid": "667a7ddf-aabb-4873-902d-55ecfa731d1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://thehackernews.com/2026/06/gamaredon-exploits-winrar-to-deliver.html", "content": "The Russian hacking group known as Gamaredon has been attributed to the continued exploitation of a WinRAR vulnerability to deliver multiple malware families aimed at data theft and propagation.\n\nPer Sekoia, the activity involves the weaponization of CVE-2025-8088, a path traversal flaw in WinRAR, to launch an HTML Application payload dubbed GammaPhish, which is then used to retrieve an", "creation_timestamp": "2026-06-02T16:21:49.000000Z"}, {"uuid": "ccd39f4c-ca12-4383-87e7-d3a49c9e00b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/purp_sec/1021", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-32433 \u2014 unauth RCE \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Secure Shell (SSH) (sshd) \u0438\u0437 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Open Telecom Platform (OTP). \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b UNIT42 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u043b\u0438, \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b\u0438 \u0438 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b\u0438 \u0441\u0432\u043e\u0438 \u043c\u0435\u0442\u043e\u0434\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\ud83d\udd35 CVE-2025-8088 \u2014 \u0431\u0433\u0430 \u0442\u0438\u043f\u0430 path traversal \u0447\u0435\u0440\u0435\u0437 Alternate Data Streams (ADSes) \u0432 Windows-\u0432\u0435\u0440\u0441\u0438\u0438 WinRAR (\u0432\u043a\u043b\u044e\u0447\u0430\u044f UnRAR, UnRAR.dll). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043a\u0440\u044b\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432\u043d\u0443\u0442\u0440\u0438 ADS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u0443\u0434\u0443\u0442 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b \u0432 \u043d\u0435\u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0443\u044e \u043f\u0430\u043f\u043a\u0443 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, %TEMP%, Startup) \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u044b \u043f\u0440\u0438 \u0441\u0442\u0430\u0440\u0442\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. WinRAR \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0431\u0430\u0433\u0430. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043e\u043d \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438. \n\n\ud83d\udd35 CVE-2025-6543 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Citrix NetScaler ADC \u0438 NetScaler Gateway. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 RCE-\u0430\u0442\u0430\u043a\u0443 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443. \u0423\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u2014 \u0441\u043b\u0435\u0434\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0434\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043c\u0430\u0435\u043c 2025 \u0433\u043e\u0434\u0430.\n\n\ud83d\udd35 CVE-2025-54253 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Adobe Experience Manager (AEM), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u043c\u0438. \u041f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0431\u0430\u0433\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438 \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0436\u0435\u0440\u0442\u0432\u044b, \u043e\u0431\u0445\u043e\u0434\u044f \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b.\n\n\ud83d\udd35 CVE-2025-54788 \u2014 SQLi-\u0431\u0430\u0433 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 InboundEmail SuiteCRM. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0434\u043e\u0431\u044b\u0447\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u0411\u0414, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0438 \u0432 \u0446\u0435\u043b\u043e\u043c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a\u043e \u0432\u0441\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0411\u0414 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0441\u0442\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b. \n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:09.331832Z"}, {"uuid": "e1873268-6e33-48a8-84ed-a059d1292ee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3mneu26brlr2t", "content": "WinRAR: hacker russi sfruttano vecchia vulnerabilit\u00e0 per rubare dati\nLa vulnerabilit\u00e0 CVE-2025-8088 di WinRAR continua a essere sfruttata da gruppi russi...\nhttps://www.ilsoftware.it/winrar-hacker-russi-sfruttano-vecchia-vulnerabilita-per-rubare-dati/", "creation_timestamp": "2026-06-03T10:00:45.229402Z"}, {"uuid": "23a9f151-a269-4c01-863b-58f801f2547b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mnf5rrijhvq2", "content": "# **Gamaredon sfrutta CVE-2025-8088 in WinRAR per distribuire GammaWorm e GammaSteel contro l\u2019Ucraina**\n\n\n@informatica\nSekoia documenta una campagna di gennaio 2026 del gruppo APT russo Gamaredon: sfruttando CVE-2025-8088 in WinRAR, gli operatori dell'FSB distribuiscono GammaPhish, GammaLoad [\u2026]", "creation_timestamp": "2026-06-03T12:55:09.132775Z"}, {"uuid": "b2f0dd14-a3e0-419c-9b90-3049edd4f790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "Telegram/XlP8N-QhlPKzfgy7e5MO0bsQ7qrXC6u5yxiFVq7j0avKCA", "content": "", "creation_timestamp": "2026-06-02T21:35:12.000000Z"}, {"uuid": "82794a6f-c0ea-4fd3-83b9-709ee305c7e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mnisebdrks2k", "content": "\ud83d\udea8 [CRITICAL INFRASTRUCTURE ALERT]: CVE-2025-8088\n\n\u2022 CVE ID: CVE-2025-8088\n\u2022 CVSS Score: 8.8 (High)\n\u2022 Affected: Gamaredon\n\nhttps://securitycyber.uk", "creation_timestamp": "2026-06-04T23:41:15.233555Z"}, {"uuid": "f0876acf-fea3-4f85-b1ac-3c06544f5e0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mnjuytyrl322", "content": "\ud83d\udea8 [CRITICAL INFRASTRUCTURE ALERT]: CVE-2025-8088\n\n\u2022 CVE ID: CVE-2025-8088\n\u2022 CVSS Score: 8.8 (High)\n\u2022 Affected: Gamaredon WinRAR De\n\nhttps://securitycyber.uk", "creation_timestamp": "2026-06-05T10:01:13.137292Z"}, {"uuid": "feb2d2cd-5821-408e-aa05-c475147de01f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mnjuytyrl322", "content": "\ud83d\udea8 [CRITICAL INFRASTRUCTURE ALERT]: CVE-2025-8088\n\n\u2022 CVE ID: CVE-2025-8088\n\u2022 CVSS Score: 8.8 (High)\n\u2022 Affected: Gamaredon WinRAR De\n\nhttps://securitycyber.uk", "creation_timestamp": "2026-06-05T10:01:13.133974Z"}, {"uuid": "98fe347f-4808-415d-9754-6f97e0e102dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/feikeh.bsky.social/post/3mnroegfsic26", "content": "CVE-2025-8088, a WinRAR flaw, is still exploited by Russia-aligned groups against Ukraine. SHADOW-EARTH-066 (UAC-0226) deploys an evolved GIFTEDCROOK infostealer. Earth Dahu (Gamaredon) uses HTA + Cloudflare Workers. The flaw keeps on working (no WinRAR auto-update). trendmicro.com/en_us/resear...", "creation_timestamp": "2026-06-08T12:23:48.332561Z"}, {"uuid": "cbde9e73-73ad-43a6-be0f-54466a06014d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/780thmibdecyber.bsky.social/post/3mnrohkqhp22u", "content": "Two separate Russia-aligned campaigns are still exploiting the WinRAR flaw CVE-2025-8088 against Ukrainian organizations nearly a year after it was patched\nTrend Micro\nwww.trendmicro.com/en_us/resear...", "creation_timestamp": "2026-06-08T12:25:30.415580Z"}, {"uuid": "367b459d-a649-49c8-a200-bee7c9bcc10e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mnsilz46lb24", "content": "~Trendmicro~\nThreat actors SHADOW-EARTH-066 and Earth Dahu are exploiting WinRAR flaw CVE-2025-8088 to target Ukraine with GIFTEDCROOK stealer and espionage tools.\n-\nIOCs: 166[. ]0[. ]132[. ]237, 136[. ]0[. ]141[. ]41, 136[. ]0[. ]141[. ]138\n-\n...", "creation_timestamp": "2026-06-08T20:13:15.302070Z"}, {"uuid": "f40da7f8-4b5f-4f59-8dba-6ab599f0ffd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mnsm25gjae2o", "content": "CVE-2025-8088: The WinRAR Path Traversal That Won\u2019t Die \u2013 APT Groups Still Weaponizing After 1 Year +\u00a0Video\n\nIntroduction: Nearly a year after WinRAR patched CVE-2025-8088, Russia-aligned intrusion sets including SHADOW-EARTH-066 (UAC-0226) and Earth Dahu (Gamaredon) continue to weaponize the path\u2026", "creation_timestamp": "2026-06-08T21:16:43.016745Z"}, {"uuid": "c51c5195-1f36-4581-be22-7dca98506cad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mnt5okxrpl2a", "content": "Top 3 CVE for last 7 days:\nCVE-2025-48595: 137 interactions\nCVE-2015-5119: 20 interactions\nCVE-2020-0601: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-50751: 6 interactions\nCVE-2025-8088: 5 interactions\nCVE-2026-50131: 5 interactions\n", "creation_timestamp": "2026-06-09T02:30:30.659281Z"}, {"uuid": "ef114b1e-3d77-4d87-8c63-fdf998ccb4b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mntevcyz5g2z", "content": "Old WinRAR Flaw Fuels Attacks on Ukraine: Two separate Russia-aligned campaigns are still exploiting the WinRAR flaw CVE-2025-8088 against Ukrainian organizations nearly a year after it was patched,", "creation_timestamp": "2026-06-09T04:39:52.220007Z"}, {"uuid": "140d3af1-9749-433f-b41b-05b1389280cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://infosec.exchange/users/VirusBulletin/statuses/116719353011137768", "content": "Trend Micro researchers Hiroyuki Kakara & Feike Hacquebord examine two separate campaigns that exploit WinRAR CVE-2025-8088 against Ukrainian targets. SHADOW-EARTH-066 & Earth Dahu (Gamaredon) use different tooling and infrastructure, but share the same entry point. https://www.trendmicro.com/en_us/research/26/f/old-winrar-flaw-fuels-attacks-on-ukraine.html", "creation_timestamp": "2026-06-09T09:06:28.191965Z"}, {"uuid": "dc3448c2-3841-44fd-9819-0306008b585c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/virusbtn.bsky.social/post/3mnttt56wmc2i", "content": "Trend Micro researchers Hiroyuki Kakara & Feike Hacquebord examine two separate campaigns that exploit WinRAR CVE-2025-8088 against Ukrainian targets. SHADOW-EARTH-066 & Earth Dahu (Gamaredon) use different tooling & infrastructure, but share the same entry point. www.trendmicro.com/en_us/resear...", "creation_timestamp": "2026-06-09T09:06:52.933504Z"}, {"uuid": "22024099-fa66-4963-9160-c17a764fb695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://thehackernews.com/2026/06/winrar-flaw-exploited-by-russia-aligned.html", "content": "Two Russia-aligned cyber attack campaigns have continued to exploit a security flaw in WinRAR to target Ukrainian organisations, almost a year after patches for the vulnerability were released.\n\nThe activity has been attributed by Trend Micro to Earth Dahu (aka Gamaredon) and SHADOW-EARTH-066 (aka UAC-0226). It involves the exploitation of CVE-2025-8088, a path traversal flaw that allows an", "creation_timestamp": "2026-06-09T10:26:10.000000Z"}, {"uuid": "1426237d-6939-4023-b3e4-0312cd5c8c72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mnub4zv34m2m", "content": "Two Russian-aligned hacking groups continue to exploit a patched WinRAR vulnerability to target Ukrainian organizations. The flaw, CVE-2025-8088, allows attackers [\u2026]", "creation_timestamp": "2026-06-09T13:04:56.238306Z"}, {"uuid": "55d22ea9-3132-4c71-acc2-eb7973692ae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mnuepeiqnqm2", "content": "WinRAR Flaw Exploited by Russia-Aligned Groups to Deploy Stealers in Ukraine TheHackerNews Russia-aligned hackers are still exploiting WinRAR CVE-2025-8088 against Ukrainian organizations nearly a ...\n\n#Security #News\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-09T14:11:40.791429Z"}, {"uuid": "6804540d-6eba-4833-aaab-da3aa2f6eae0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://www.darkreading.com/vulnerabilities-threats/russian-groups-winrar-flaw-ukrainian-orgs", "content": "Two separate campaigns target CVE-2025-8088, fixed last July, to conduct data theft and cyberespionage against military and government targets in Ukraine.", "creation_timestamp": "2026-06-09T13:37:02.000000Z"}, {"uuid": "302aa2c6-c2d3-4c42-9cee-e75ea5a5f48a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mnuvqaa6pr2b", "content": "FSB-linked groups exploit CVE-2025-8088 in WinRAR to deliver credential-stealing malware against Ukrainian government and military targets, despite a July 2025 patch.\n", "creation_timestamp": "2026-06-09T19:13:35.488816Z"}, {"uuid": "ce6cca13-1850-4d6c-b2a3-de0260ce0dc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3mnv2bcidlxl2", "content": "\ud83d\udea9 Patched WinRAR Vulnerability CVE-2025-8088 Continues to Be Exploited by Multiple Russia-Aligned Threat Actors Against Ukrainian Government and Military Organizations Multiple Russia-aligned th...\n\n#TIGR #vulnerability\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-09T20:35:43.304704Z"}, {"uuid": "5d531c32-26ee-4283-aee7-11537624fa9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://threatintel.cc/2026/06/09/russian-attackers-weaponize-winrar-flaw.html", "content": "Russian Attackers Weaponize WinRAR Flaw Against Ukraine\n\nRussia-aligned threat actors are actively exploiting a patched WinRAR vulnerability, CVE-2025-8088, to conduct cyber espionage and credential theft against Ukrainian government and military organizations. Because WinRAR lacks native auto-update features, many unpatched systems remain vulnerable to these phishing-based attacks that leverage malicious archives to execute arbitrary code.", "creation_timestamp": "2026-06-09T17:30:12.000000Z"}, {"uuid": "899df984-de4d-414c-a82e-380fa742a993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mnwxfl2yv42d", "content": "Russian APTs Still Exploiting Patched WinRAR Flaw CVE-2025-8088", "creation_timestamp": "2026-06-10T14:49:54.419370Z"}, {"uuid": "14ae1681-e810-4656-878a-b6a732c58e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/sleepydogtsjp.bsky.social/post/3mnxpvxg6zc2x", "content": "Russian APTs Still Exploiting Patched WinRAR Flaw CVE-2025-8088\nsecurityaffairs.com/193476/apt/r...", "creation_timestamp": "2026-06-10T22:07:30.529240Z"}, {"uuid": "881ac077-18fe-43e7-b17c-368d19549b10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mnxyovih2j2c", "content": "\u30ed\u30b7\u30a2\u306eAPT\u653b\u6483\u306f\u3001\u4fee\u6b63\u6e08\u307f\u306eWinRAR\u306e\u8106\u5f31\u6027CVE-2025-8088\u3092\u4f9d\u7136\u3068\u3057\u3066\u60aa\u7528\u3057\u3066\u3044\u308b \n\nRussian APTs Still Exploiting Patched WinRAR Flaw CVE-2025-8088  #SecurityAffairs (Jun 10)\n\nsecurityaffairs.com/193476/apt/r...", "creation_timestamp": "2026-06-11T00:44:31.344857Z"}, {"uuid": "4ea17b13-263a-4048-b9c7-ba2b62e9253d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/conflictsandwars.bsky.social/post/3mnz3pdoy562i", "content": "Russian state-linked hackers continue exploiting a patched WinRAR vulnerability (CVE-2025-8088) to target systems, despite available fixes, researchers report. #Cybersecurity", "creation_timestamp": "2026-06-11T11:11:06.555254Z"}, {"uuid": "c386263b-ca8e-48e9-b4d7-0d259df41bc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mnzbkls2es2h", "content": "Russian APTs Still Exploiting Patched WinRAR Flaw CVE-2025-8088\n\nDespite a 2025 patch, Russian-linked groups still exploit a WinRAR flaw (CVE-2025-8088) to deploy malware via phishing archives. CVE-2025-8088 is a path traversal flaw in WinRAR that lets an attacker write files outs\u2026\n#hackernews #news", "creation_timestamp": "2026-06-11T12:55:50.424822Z"}, {"uuid": "6210d794-9153-496d-95d3-a2eaffd6701f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mo23p3ptjv2y", "content": "Russian APTs, including Gamaredon, are still exploiting a year-old WinRAR flaw (CVE-2025-8088) to attack Ukrainian government & military targets. The attacks deliver infostealers and espionage tools. \ud83c\uddf7\ud83c\uddfa\ud83c\uddfa\ud83c\udde6 #APT #Gamaredon #Ukraine #CyberWarfare\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-11T20:43:38.136138Z"}, {"uuid": "c96a3914-db92-436a-8201-9eb3da98ad4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mocqmpyida2d", "content": "\u30cf\u30c3\u30ab\u30fc\u304cWinRAR\u306eNTFS\u4ee3\u66ff\u30c7\u30fc\u30bf\u30b9\u30c8\u30ea\u30fc\u30e0\u3092\u60aa\u7528\u2014\u2014RAR\u30a2\u30fc\u30ab\u30a4\u30d6\u7d4c\u7531\u3067\u30de\u30eb\u30a6\u30a7\u30a2\u3092\u6295\u4e0b\n\n\u6df1\u523b\u306a\u8106\u5f31\u6027\u306b\u30d1\u30c3\u30c1\u304c\u9069\u7528\u3055\u308c\u3066\u304b\u3089\u7d041\u5e74\u304c\u7d4c\u904e\u3057\u305f\u73fe\u5728\u3082\u3001\u9ad8\u5ea6\u306a\u8105\u5a01\u30a2\u30af\u30bf\u30fc\u304cWinRAR\u3092\u60aa\u7528\u3057\u3066\u30a6\u30af\u30e9\u30a4\u30ca\u5404\u5730\u306e\u6a19\u7684\u3092\u4fb5\u5bb3\u3057\u7d9a\u3051\u3066\u3044\u307e\u3059\u3002 CVE-2025-8088\uff08CVSS 8.4\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u3092\u5229\u7528\u3059\u308b\u3068\u3001\u653b\u6483\u8005\u306f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8b66\u544a\u3092\u56de\u907f\u3057\u3001\u88ab\u5bb3\u8005\u306e\u30de\u30b7\u30f3\u306b\u30de\u30eb\u30a6\u30a7\u30a2\u3092\u30b5\u30a4\u30ec\u30f3\u30c8\u30a4\u30f3\u30b9\u30c8\u30fc...", "creation_timestamp": "2026-06-15T07:19:25.621974Z"}, {"uuid": "0836b7a3-6bd8-42e6-a6b6-4d60061a01cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mocvey24rg2o", "content": "Russian hackers exploit WinRAR flaw CVE-2025-8088 to deploy GIFTEDCROOK stealer, targeting Ukrainian organizations. Update WinRAR now. #CyberSecurity #WinRAR #GIFTEDCROOK #CVE20258088 thedailytechfeed.com/russian-hack...", "creation_timestamp": "2026-06-15T08:44:34.069376Z"}, {"uuid": "2523426e-2c74-4eb8-9d7b-3d11794b6172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mocyoayeyk2p", "content": "Hackers Weaponize WinRAR & NTFS Alternate Data Streams: The Silent Malware Extraction Attack +\u00a0Video\n\nIntroduction: A path traversal vulnerability in WinRAR, tracked as CVE-2025-8088 (CVSS 8.4/8.8), continues to be actively exploited by Russia-aligned threat groups nearly a year after a patch was\u2026", "creation_timestamp": "2026-06-15T09:43:33.802021Z"}, {"uuid": "b743c83f-aed3-43fb-bac1-1f2c928d56ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mohulllaim24", "content": "Original text: \u201cRussian APTs Still Exploiting Patched WinRAR Flaw CVE-2025-8088\u201d \u2014 Pierluigi Paganini, Security Affairs (June 10, 2026). Trend Micro\u2019s reporting and the two illustrations below are reproduced with attri\nhttps://core-jmp.org/2026/06/cve-2025-8088-russian-apts-winrar-ukraine-patch-gap/", "creation_timestamp": "2026-06-17T08:13:41.167534Z"}, {"uuid": "5eb1b478-e932-4b70-9bc8-922a4701dd40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/patchmypc.com/post/3mois66ieyq2a", "content": "WinRAR fixed CVE-2025-8088 nearly a year ago.\n\nNow it's being actively exploited in the wild.\n\nA good reminder that attackers don't care when a patch was released. They care whether it was deployed.\n\n\ud83d\udcd6 https://bit.ly/3SNe4kk\n\n#PatchManagement #CyberSecurity #ITCommunity #PatchMyPC", "creation_timestamp": "2026-06-17T17:03:07.109502Z"}, {"uuid": "5497d495-776d-4f5d-9146-648782b979e1", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a757b25e-b0aa-4689-b8dd-05d9338236b4", "content": "", "creation_timestamp": "2026-06-19T12:45:27.491088Z"}, {"uuid": "09a5113f-a5c1-451e-9e88-3972b981ab67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/z3usalmighty.bsky.social/post/3monsx3pgrj2c", "content": "Russian campaigns exploit patched WinRAR flaw (CVE-2025-8088) for data theft against Ukrainian orgs. The lesson: attackers don't need zero-days. They need unpatched systems. Your patch cadence is your defense.\n\n#DataStrategy #InfoSec #CyberSecurity", "creation_timestamp": "2026-06-19T17:00:17.397095Z"}, {"uuid": "ade76ad9-c3b6-4775-b334-3b05f551aa6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8088", "type": "seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/116792041179784637", "content": "Russian APTs Still Exploiting Patched WinRAR Flaw CVE-2025-8088 https://securityaffairs.com/193476/apt/russian-apts-still-exploiting-patched-winrar-flaw-cve-2025-8088.html", "creation_timestamp": "2026-06-22T05:12:02.073615Z"}, {"uuid": "c1abfd23-75a7-4c29-a95b-cc8d4992b5de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/purp_sec/1021", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-32433 \u2014 unauth RCE \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Secure Shell (SSH) (sshd) \u0438\u0437 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Open Telecom Platform (OTP). \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b UNIT42 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u043b\u0438, \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b\u0438 \u0438 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b\u0438 \u0441\u0432\u043e\u0438 \u043c\u0435\u0442\u043e\u0434\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\ud83d\udd35 CVE-2025-8088 \u2014 \u0431\u0433\u0430 \u0442\u0438\u043f\u0430 path traversal \u0447\u0435\u0440\u0435\u0437 Alternate Data Streams (ADSes) \u0432 Windows-\u0432\u0435\u0440\u0441\u0438\u0438 WinRAR (\u0432\u043a\u043b\u044e\u0447\u0430\u044f UnRAR, UnRAR.dll). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043a\u0440\u044b\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432\u043d\u0443\u0442\u0440\u0438 ADS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u0443\u0434\u0443\u0442 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b \u0432 \u043d\u0435\u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0443\u044e \u043f\u0430\u043f\u043a\u0443 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, %TEMP%, Startup) \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u044b \u043f\u0440\u0438 \u0441\u0442\u0430\u0440\u0442\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. WinRAR \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0431\u0430\u0433\u0430. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043e\u043d \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438. \n\n\ud83d\udd35 CVE-2025-6543 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Citrix NetScaler ADC \u0438 NetScaler Gateway. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 RCE-\u0430\u0442\u0430\u043a\u0443 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443. \u0423\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u2014 \u0441\u043b\u0435\u0434\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0434\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043c\u0430\u0435\u043c 2025 \u0433\u043e\u0434\u0430.\n\n\ud83d\udd35 CVE-2025-54253 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Adobe Experience Manager (AEM), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u043c\u0438. \u041f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0431\u0430\u0433\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438 \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0436\u0435\u0440\u0442\u0432\u044b, \u043e\u0431\u0445\u043e\u0434\u044f \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b.\n\n\ud83d\udd35 CVE-2025-54788 \u2014 SQLi-\u0431\u0430\u0433 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 InboundEmail SuiteCRM. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0434\u043e\u0431\u044b\u0447\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u0411\u0414, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0438 \u0432 \u0446\u0435\u043b\u043e\u043c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a\u043e \u0432\u0441\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0411\u0414 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0441\u0442\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b. \n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:14.073772Z"}, {"uuid": "91d02554-7f56-4df8-9aff-30e86dc87fb8", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/285657da-f178-4069-a92b-5375e9ce4182", "content": "", "creation_timestamp": "2026-06-23T14:03:52.703050Z"}, {"uuid": "feffa461-4e7a-4d94-851e-86586cb8d259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vaybd72j", "content": "\ud83d\udd17 CVE : CVE-2025-8088, CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, CVE-2026-20348", "creation_timestamp": "2026-08-10T13:20:06.747088Z"}, {"uuid": "00d62d3a-b864-47ed-a2a7-657d37e8d0c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mp4fn6ohda2a", "content": "Russian APTs Still Exploiting Patched WinRAR Flaw CVE-2025-8088 securityaffairs.com/193476/apt/r...", "creation_timestamp": "2026-06-25T12:12:06.690320Z"}, {"uuid": "6f46cea4-54c1-465d-ad33-15f2bc7637fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "MISP/a7e5c1f7-e325-4233-8ec2-b87be9f8e7b0", "content": "", "creation_timestamp": "2026-06-25T12:15:03.132095Z"}, {"uuid": "f6f8d44a-cda3-4625-97b6-bb8740bf5658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/116815263455530372", "content": "\ud83d\udea8 Google has linked Turla to a new .NET backdoor.\nSTOCKSTAY was used in espionage campaigns targeting #Ukraine government and military organizations.\nIt overlaps with Kazuar and reached targets through phishing, RDP files, MSI installers, and #WinRAR CVE-2025-8088 lures.\nSee the full attack details \ud83e\udc16 https://thehackernews.com/2026/06/google-details-turlas-new-stockstay.html", "creation_timestamp": "2026-06-26T07:37:45.786124Z"}, {"uuid": "43792594-7bdf-4f16-9145-5622eb9a1119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3mpasvsgvvo2z", "content": "Turla APT Exploitation of WinRAR CVE-2025-8088 and StockStay Deployment\n\n##WinRAR ##Turla ##ThreatActor ##ZeroDay ##Espionage\n\nhttps://flagthis.com/newsletter/2026/06/27/tldr/3981", "creation_timestamp": "2026-06-27T06:20:09.119922Z"}, {"uuid": "68b4eafc-61b8-4ed7-b323-c5cc832f28c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "MISP/0a74c6b2-617d-4489-9fa8-742b8cba9e42", "content": "", "creation_timestamp": "2026-06-29T09:15:02.559735Z"}, {"uuid": "36c72b47-2999-4c8e-a4fd-44b1bc62fa7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0992", "content": "", "creation_timestamp": "2026-08-13T08:46:25.594872Z"}, {"uuid": "5a332c86-b7e4-4d03-a558-1c670fe167e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "MISP/0a74c6b2-617d-4489-9fa8-742b8cba9e42", "content": "", "creation_timestamp": "2026-06-30T00:15:02.545231Z"}, {"uuid": "04188417-1a0a-47ed-9b0b-339587b736d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mstg4k5fmo2x", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2025-8088: A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by c\u2026\nCVSS 8.8 \u00b7 EPSS 94.6% \u00b7 CISA KEV\nhttps://beta.vulnsea.com/cve/CVE-2025-8088\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-08-11T20:07:26.578016Z"}, {"uuid": "e4ac78ec-195f-405c-ac6c-36236c844fcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/ctinow/251601", "content": "Russian APTs Still Exploiting Patched WinRAR Flaw CVE-2025-8088\nhttps://ift.tt/9762FEm", "creation_timestamp": "2026-07-12T08:00:06.212807Z"}, {"uuid": "1de10bf8-8c3e-4216-9b69-58600803ec04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "Telegram/Q2xwV2a8lwepdJRbd42oBU3J6nUfH1ngjg_xYTBZFphxyrWH", "content": "", "creation_timestamp": "2026-07-12T09:01:47.352596Z"}, {"uuid": "fb9c4ed0-4682-4a3a-b9c2-149092977881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/pleyades_it/12060", "content": "\u2757\ufe0fCVE-2025-8088: #vulnerabilidad cr\u00edtica en WinRAR descubierta (y corregida) en julio de 2025 contin\u00faa siendo ampliamente explotada.\nhttps://acortar.link/WOMAOb", "creation_timestamp": "2026-07-12T22:00:14.595539Z"}, {"uuid": "fd4cfe67-f907-42d5-b10e-93545450a6b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/pleyades_it/12281", "content": "\u2757 CVE-2025-8088: afecta exclusivamente a la versi\u00f3n de #Android. Actualiza la aplicaci\u00f3n a la versi\u00f3n 1.0.0.2026092103 o posterior \u2935\ufe0f\nhttps://short.do/N8XWuI #vulnerabilidad", "creation_timestamp": "2026-07-12T22:00:14.262437Z"}, {"uuid": "da5b2b3a-b8e6-4129-a429-47765f36254f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/pleyades_it/12281", "content": "\u2757 CVE-2025-8088: afecta exclusivamente a la versi\u00f3n de #Android. Actualiza la aplicaci\u00f3n a la versi\u00f3n 1.0.0.2026092103 o posterior \u2935\ufe0f\nhttps://short.do/N8XWuI #vulnerabilidad", "creation_timestamp": "2026-07-13T00:00:38.163897Z"}, {"uuid": "b5ad4395-549d-4723-b58f-391a788f72a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/pleyades_it/12060", "content": "\u2757\ufe0fCVE-2025-8088: #vulnerabilidad cr\u00edtica en WinRAR descubierta (y corregida) en julio de 2025 contin\u00faa siendo ampliamente explotada.\nhttps://acortar.link/WOMAOb", "creation_timestamp": "2026-07-13T00:00:38.486970Z"}, {"uuid": "48a565e9-a20b-4c66-ac07-7304754a56db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/ctinow/251601", "content": "Russian APTs Still Exploiting Patched WinRAR Flaw CVE-2025-8088\nhttps://ift.tt/9762FEm", "creation_timestamp": "2026-07-13T00:00:48.656919Z"}, {"uuid": "e7ad300f-bf8c-429d-aa1e-ab1cf3fbe0ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "Telegram/Q2xwV2a8lwepdJRbd42oBU3J6nUfH1ngjg_xYTBZFphxyrWH", "content": "", "creation_timestamp": "2026-07-13T00:00:47.014002Z"}, {"uuid": "e427d6f9-29e9-45a6-8296-4cdef07907c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/pleyades_it/12060", "content": "\u2757\ufe0fCVE-2025-8088: #vulnerabilidad cr\u00edtica en WinRAR descubierta (y corregida) en julio de 2025 contin\u00faa siendo ampliamente explotada.\nhttps://acortar.link/WOMAOb", "creation_timestamp": "2026-07-14T00:00:53.735803Z"}, {"uuid": "e78b9f28-f8ea-4d18-9d82-9e5586526f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/pleyades_it/12281", "content": "\u2757 CVE-2025-8088: afecta exclusivamente a la versi\u00f3n de #Android. Actualiza la aplicaci\u00f3n a la versi\u00f3n 1.0.0.2026092103 o posterior \u2935\ufe0f\nhttps://short.do/N8XWuI #vulnerabilidad", "creation_timestamp": "2026-07-14T00:00:54.173208Z"}, {"uuid": "bd602fe3-0c4b-4b51-a83d-d3216e45feb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/11430", "content": "Hackers Exploit WinRAR CVE-2025-8088 to Plant Startup Shortcut and Run PowerShell Loader \u2013 gbhackers.com\n\nFri, 26 Jun 2026 17:51:27", "creation_timestamp": "2026-07-14T12:00:04.879224Z"}, {"uuid": "c8f209b3-8e7b-42b1-921f-bb652db7eab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/11430", "content": "Hackers Exploit WinRAR CVE-2025-8088 to Plant Startup Shortcut and Run PowerShell Loader \u2013 gbhackers.com\n\nFri, 26 Jun 2026 17:51:27", "creation_timestamp": "2026-07-15T00:00:25.066069Z"}, {"uuid": "ced0a175-6fde-4316-ade4-929df915fd16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/thehackernews/9354", "content": "\u26a0\ufe0f\u00a0Gamaredon ran 35 phishing campaigns against Ukraine in 2025.\n\nESET says it used new PowerShell tools, HTML smuggling, and CVE-2025-8088 to plant malware in Startup.\n\nSimple malware. Harder infrastructure.\n\nRead more \u2193 https://thehackernews.com/2026/06/gamaredon-expands-ukraine-attacks-with.html", "creation_timestamp": "2026-07-15T12:00:03.361784Z"}, {"uuid": "5ed4dc95-8533-4beb-9fe5-b39002e835c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/thehackernews/9330", "content": "\ud83d\udea8 Google has linked Turla to a new .NET backdoor.\n\nSTOCKSTAY was used in espionage campaigns targeting #Ukraine government and military organizations.\n\nIt overlaps with Kazuar and reached targets through phishing, RDP files, MSI installers, and #WinRAR CVE-2025-8088 lures.\n\nSee the full attack details \ud83e\udc16 https://thehackernews.com/2026/06/google-details-turlas-new-stockstay.html", "creation_timestamp": "2026-07-15T12:00:04.552740Z"}, {"uuid": "b81b17b2-7092-4222-b534-39f50dfd3cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/thehackernews/9130", "content": "Russian state-backed hackers Gamaredon are exploiting a critical WinRAR vulnerability to attack Ukraine.\n\nThey\u2019re weaponizing CVE-2025-8088 with GammaPhish HTA files.\n\nThis leads to GammaLoad downloaders, which deploy:\n\u2022 GammaWorm \u2014 a stealthy self-spreading worm using malicious LNK files\n\u2022 GammaSteel \u2014 a modular information stealer\n\nHighly evasive chain with Telegram C2 and NTFS hiding techniques.\n\nDetails: https://thehackernews.com/2026/06/gamaredon-exploits-winrar-to-deliver.html", "creation_timestamp": "2026-07-15T12:00:05.819296Z"}, {"uuid": "6ebba4f1-3356-4527-9439-22a45b3f78cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/thehackernews/9330", "content": "\ud83d\udea8 Google has linked Turla to a new .NET backdoor.\n\nSTOCKSTAY was used in espionage campaigns targeting #Ukraine government and military organizations.\n\nIt overlaps with Kazuar and reached targets through phishing, RDP files, MSI installers, and #WinRAR CVE-2025-8088 lures.\n\nSee the full attack details \ud83e\udc16 https://thehackernews.com/2026/06/google-details-turlas-new-stockstay.html", "creation_timestamp": "2026-07-16T00:00:10.406715Z"}, {"uuid": "cd2fd757-259d-4867-a4b4-583fc0a6ee1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/thehackernews/9130", "content": "Russian state-backed hackers Gamaredon are exploiting a critical WinRAR vulnerability to attack Ukraine.\n\nThey\u2019re weaponizing CVE-2025-8088 with GammaPhish HTA files.\n\nThis leads to GammaLoad downloaders, which deploy:\n\u2022 GammaWorm \u2014 a stealthy self-spreading worm using malicious LNK files\n\u2022 GammaSteel \u2014 a modular information stealer\n\nHighly evasive chain with Telegram C2 and NTFS hiding techniques.\n\nDetails: https://thehackernews.com/2026/06/gamaredon-exploits-winrar-to-deliver.html", "creation_timestamp": "2026-07-16T00:00:08.766498Z"}, {"uuid": "c9d1e7c2-aeaf-4588-8ced-331263d887ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/thehackernews/9354", "content": "\u26a0\ufe0f\u00a0Gamaredon ran 35 phishing campaigns against Ukraine in 2025.\n\nESET says it used new PowerShell tools, HTML smuggling, and CVE-2025-8088 to plant malware in Startup.\n\nSimple malware. Harder infrastructure.\n\nRead more \u2193 https://thehackernews.com/2026/06/gamaredon-expands-ukraine-attacks-with.html", "creation_timestamp": "2026-07-16T00:00:19.201805Z"}, {"uuid": "33073c15-3a51-4f6e-a237-691f9be01834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "Telegram/JMPLlqAJKVKStPUctSi0425VFAAqn_JlP0EBk3HwzAKEQKc", "content": "", "creation_timestamp": "2026-07-16T19:00:30.964785Z"}, {"uuid": "d3d42ce0-4d01-4c19-be98-245ab31a2dae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "Telegram/JMPLlqAJKVKStPUctSi0425VFAAqn_JlP0EBk3HwzAKEQKc", "content": "", "creation_timestamp": "2026-07-17T00:00:47.719909Z"}, {"uuid": "9f3aef4e-d816-4f24-aba7-7d3278500825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/JMPLlqAJKVKStPUctSi0425VFAAqn_JlP0EBk3HwzAKEQKc", "content": "", "creation_timestamp": "2026-07-18T04:00:03.729183Z"}, {"uuid": "a6569ed2-e4a5-4d0d-b38e-3d02009c1c65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/CyberDispatch/711", "content": "Amaranth-Dragon targeted Southeast Asian government and law enforcement networks in 2025, with links to the APT41 ecosystem.\n\nCampaigns leveraged political lures and the WinRAR CVE-2025-8088 RCE flaw, using cloud delivery and geo-fenced infrastructure for stealth.", "creation_timestamp": "2026-08-29T20:00:21.978076Z"}, {"uuid": "e81c126a-635f-45c8-97f0-2bc45be48d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/cve0day/312", "content": "CVE-2025-8088\n\nA path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by\u00a0Anton Cherepanov, Peter Ko\u0161in\u00e1r, and Peter Str\u00fd\u010dek\n     from ESET.\n\nGitHub Link:\nhttps://github.com/lennertdefauw/CVE-2025-8088", "creation_timestamp": "2026-08-28T00:00:40.950007Z"}, {"uuid": "08ebf23d-9fc9-40f4-a37c-1c013a866098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mqx4t5qp6m2v", "content": "\ud83e\udd16 CVE-2025-8088: RCE in 7-Zip exploitable via malicious archives. Version 26.02 fixes the flaw. Update now.\n\nhttps://www.bleepingcomputer.com/news/security/update-now-7-zip-fixes-rce-flaw-exploitable-with-malicious-archives/", "creation_timestamp": "2026-07-18T20:41:23.770622Z"}, {"uuid": "2bfbb2a3-bf9f-4540-a332-cefdd403eb32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "Telegram/JMPLlqAJKVKStPUctSi0425VFAAqn_JlP0EBk3HwzAKEQKc", "content": "", "creation_timestamp": "2026-07-19T00:00:29.942648Z"}, {"uuid": "2d6569de-fcd0-4e51-94a8-1dfe637985b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/22613", "content": "Hackers Exploit WinRAR CVE-2025-8088 to Plant Startup Shortcut and Run PowerShell Loader \u2013 gbhackers.com\n\nFri, 26 Jun 2026 17:51:27", "creation_timestamp": "2026-07-19T16:00:04.459028Z"}, {"uuid": "cf66becb-8f8a-491d-865a-174d2183489e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/18958", "content": "Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025-8088 \u2013 thehackernews.com\n\nWed, 28 Jan 2026 17:46:00", "creation_timestamp": "2026-07-19T16:00:06.509507Z"}, {"uuid": "10e858b4-fc58-4a6d-98fb-7a1c6a4736e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/ExploitChi/18", "content": "\ud83d\udccc \u0645\u0627\u062c\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2025-8088 \u062f\u0631 WinRAR\n\n\u06a9\u0634\u0641: ESET \u062f\u0631 \u062c\u0648\u0644\u0627\u06cc 2025 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Zero-day \u062f\u0631 WinRAR \u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f \u06a9\u0647 \u062a\u0648\u0633\u0637 \u06af\u0631\u0648\u0647 RomCom (Storm-0978 / Tropical Scorpius / UNC2596) \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u062f.\n\n\u0645\u0627\u0647\u06cc\u062a: \u06cc\u06a9 Path Traversal \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Alternate Data Streams (ADS) \u0628\u0648\u062f. \u06cc\u0639\u0646\u06cc \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u200c\u062a\u0648\u0646\u0633\u062a \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc\u06cc \u0645\u062e\u0641\u06cc \u062f\u0627\u062e\u0644 \u0622\u0631\u0634\u06cc\u0648 \u0628\u0630\u0627\u0631\u0647 \u06a9\u0647 \u0648\u0642\u062a\u06cc \u06a9\u0627\u0631\u0628\u0631 \u0627\u0648\u0646 \u0631\u0648 \u0627\u06a9\u0633\u062a\u0631\u06a9\u062a \u0645\u06cc\u200c\u06a9\u0631\u062f\u060c \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u062f\u0631 \u0645\u0633\u06cc\u0631\u0647\u0627\u06cc \u0633\u06cc\u0633\u062a\u0645\u06cc \u062d\u0633\u0627\u0633 \u0645\u062b\u0644 %TEMP% \u06cc\u0627 Startup folder \u0631\u06cc\u062e\u062a\u0647 \u0645\u06cc\u200c\u0634\u062f\u0646 \u2192 \u0648 \u0627\u06cc\u0646 \u06cc\u0639\u0646\u06cc \u0627\u062c\u0631\u0627\u06cc \u062e\u0648\u062f\u06a9\u0627\u0631 \u0628\u062f\u0627\u0641\u0632\u0627\u0631.\n\n\u067e\u0686: WinRAR \u0633\u0631\u06cc\u0639 \u0648\u0627\u06a9\u0646\u0634 \u0646\u0634\u0648\u0646 \u062f\u0627\u062f \u0648 \u062f\u0631 30 \u062c\u0648\u0644\u0627\u06cc 2025 \u0646\u0633\u062e\u0647\u200c\u06cc 7.13 \u0631\u0648 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f \u06a9\u0647 \u0645\u0634\u06a9\u0644 \u0631\u0648 \u0631\u0641\u0639 \u06a9\u0631\u062f.\n\n\ud83d\udccc \u0631\u0648\u0634 \u062d\u0645\u0644\u0647\n\n\u0645\u0647\u0627\u062c\u0645 \u06cc\u06a9 \u0641\u0627\u06cc\u0644 RAR \u0645\u06cc\u200c\u0633\u0627\u0632\u0647 \u06a9\u0647 \u0638\u0627\u0647\u0631\u0627\u064b \u0641\u0642\u0637 \u0634\u0627\u0645\u0644 \u06cc\u06a9 \u0641\u0627\u06cc\u0644 \u0628\u06cc\u200c\u0636\u0631\u0631 (\u0645\u062b\u0644\u0627\u064b \u0631\u0632\u0648\u0645\u0647 \u06cc\u0627 CV) \u0627\u0633\u062a.\n\n\u0627\u0645\u0627 \u062f\u0631 \u067e\u0634\u062a \u0635\u062d\u0646\u0647\u060c \u0641\u0627\u06cc\u0644 \u062d\u0627\u0648\u06cc ADS\u0647\u0627 (stream\u0647\u0627\u06cc \u0645\u062e\u0641\u06cc NTFS) \u0647\u0633\u062a \u06a9\u0647 WinRAR \u0645\u0648\u0642\u0639 \u0627\u0633\u062a\u062e\u0631\u0627\u062c\u060c \u0627\u0648\u0646\u200c\u0647\u0627 \u0631\u0648 \u0647\u0645 unpack \u0645\u06cc\u200c\u06a9\u0646\u0647.\n\n\u0627\u06cc\u0646 ADS\u0647\u0627 \u0634\u0627\u0645\u0644:\n\n\u06cc\u06a9 DLL \u06cc\u0627 EXE \u0645\u062e\u0631\u0628 (\u062f\u0631 %TEMP% \u06cc\u0627 %LOCALAPPDATA%)\n\n\u06cc\u06a9 LNK \u0645\u062e\u0631\u0628 (\u062f\u0631 Startup folder \u0648\u06cc\u0646\u062f\u0648\u0632) \u0647\u0633\u062a\u0646\u062f.\n\n\u0648\u0642\u062a\u06cc \u0642\u0631\u0628\u0627\u0646\u06cc \u0641\u0627\u06cc\u0644 \u0631\u0648 \u0628\u0627\u0632 \u0648 extract \u0645\u06cc\u200c\u06a9\u0646\u0647\u060c \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u062f\u0631 \u0645\u0633\u06cc\u0631\u0647\u0627\u06cc \u062e\u0627\u0635 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u0646 \u0648 \u0628\u0627 \u0631\u06cc\u0633\u062a\u0627\u0631\u062a \u06cc\u0627 \u0644\u0627\u06af\u06cc\u0646 \u0628\u0639\u062f\u06cc\u060c \u062e\u0648\u062f\u06a9\u0627\u0631 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u0634\u0646.\n\n\ud83d\udccc \u0632\u0646\u062c\u06cc\u0631\u0647\u200c\u0647\u0627\u06cc \u0622\u0644\u0648\u062f\u06af\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc\u200c\u0634\u062f\u0647\n\n\u0622\u0646\u062a\u06cc \u0648\u06cc\u0631\u0648\u0633ESET \u0633\u0647 \u0632\u0646\u062c\u06cc\u0631\u0647 \u0645\u062e\u062a\u0644\u0641 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f\u0647:\n\nMythic agent execution chain\n\n\u0641\u0627\u06cc\u0644 LNK \u0628\u0627\u0639\u062b COM hijacking \u0645\u06cc\u200c\u0634\u0647 (msedge.dll \u0645\u062e\u0631\u0628 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u0645\u06cc\u200c\u0634\u0647).\n\n\u0641\u0627\u06cc\u0644DLL \u06cc\u06a9 shellcode \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc\u200c\u0634\u062f\u0647 \u0628\u0627 AES \u0631\u0648 decrypt \u0648 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u06a9\u0646\u0647.\n\n\u06cc\u06a9 shellcode \u0628\u0647 \u06cc\u06a9 C2 \u0633\u0631\u0648\u0631 \u0645\u062a\u0635\u0644 \u0645\u06cc\u200c\u0634\u0647 (dynamic HTTP profile).\n\n\u062d\u062a\u06cc \u062f\u0627\u0645\u0646\u0647 \u0633\u0627\u0632\u0645\u0627\u0646 \u0647\u062f\u0641 \u0647\u0645 hardcoded \u0628\u0648\u062f\u0647 \u2192 \u06cc\u0639\u0646\u06cc \u062d\u0645\u0644\u0647 \u0628\u0633\u06cc\u0627\u0631 targeted \u0628\u0648\u062f\u0647.\n\nSnipBot variant execution chain\n\n\u0641\u0627\u06cc\u0644 LNK \u06cc\u06a9 EXE \u0645\u062e\u0631\u0628 (ApbxHelper.exe) \u0631\u0648 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u06a9\u0646\u0647.\n\n\u0641\u0627\u06cc\u0644EXE \u062a\u063a\u06cc\u06cc\u0631 \u06cc\u0627\u0641\u062a\u0647\u200c\u06cc PuTTY CAC \u0647\u0633\u062a \u0628\u0627 certificate \u062c\u0639\u0644\u06cc.\n\n\u0641\u0627\u06cc\u0644shellcode SnipBot \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u0634\u0647\u060c \u0648\u0644\u06cc \u0641\u0642\u0637 \u0627\u06af\u0647 \u0642\u0631\u0628\u0627\u0646\u06cc \u062d\u062f\u0627\u0642\u0644 69 \u0641\u0627\u06cc\u0644 \u0627\u062e\u06cc\u0631\u0627\u064b \u0628\u0627\u0632 \u06a9\u0631\u062f\u0647 \u0628\u0627\u0634\u0647 \u2192 \u062a\u06a9\u0646\u06cc\u06a9 \u0636\u062f \u0622\u0646\u0627\u0644\u06cc\u0632.\n\nRustyClaw / MeltingClaw execution chain\n\n\u0641\u0627\u06cc\u0644 LNK \u06cc\u06a9 EXE \u0628\u0647 \u0646\u0627\u0645 Complaint.exe \u0631\u0648 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u06a9\u0646\u0647.\n\n\u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0646\u0648\u0634\u062a\u0647\u200c\u0634\u062f\u0647 \u0628\u0627 Rust \u0647\u0633\u062a \u0648 payload \u0628\u0639\u062f\u06cc \u0631\u0648 \u062f\u0627\u0646\u0644\u0648\u062f \u0645\u06cc\u200c\u06a9\u0646\u0647.\n\n\u0628\u0647 C2 \u0633\u0631\u0648\u0631 \u062c\u062f\u06cc\u062f \u0648\u0635\u0644 \u0645\u06cc\u200c\u0634\u0647 \u0648 \u0645\u0631\u062d\u0644\u0647\u200c\u0647\u0627\u06cc \u0628\u0639\u062f\u06cc \u0622\u0644\u0648\u062f\u06af\u06cc \u0631\u0648 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u06a9\u0646\u0647.\n\n\ud83d\udccc \u0627\u0647\u062f\u0627\u0641 \u062d\u0645\u0644\u0647\n\n\u0634\u0631\u06a9\u062a\u200c\u0647\u0627\u06cc \u0645\u0627\u0644\u06cc\u060c \u062f\u0641\u0627\u0639\u06cc\u060c \u062a\u0648\u0644\u06cc\u062f\u06cc \u0648 \u0644\u062c\u0633\u062a\u06cc\u06a9\u06cc \u062f\u0631 \u0627\u0631\u0648\u067e\u0627 \u0648 \u06a9\u0627\u0646\u0627\u062f\u0627 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0646.\n\n\u0631\u0648\u0634 \u062a\u0648\u0632\u06cc\u0639: \u0627\u06cc\u0645\u06cc\u0644\u200c\u0647\u0627\u06cc Spearphishing \u0628\u0627 \u0641\u0627\u06cc\u0644 RAR \u067e\u06cc\u0648\u0633\u062a (\u0631\u0632\u0648\u0645\u0647\u200c\u0647\u0627\u06cc \u062c\u0639\u0644\u06cc \u0645\u062b\u0644 \u201cEli_Rosenfeld_CV\u201d).\n\n\u062e\u0648\u0634\u0628\u062e\u062a\u0627\u0646\u0647 ESET \u0645\u06cc\u200c\u06af\u0647 \u062f\u0631 telemetry \u062e\u0648\u062f\u0634\u0648\u0646 \u0646\u0634\u0648\u0646\u0647\u200c\u0627\u06cc \u0627\u0632 compromise \u0648\u0627\u0642\u0639\u06cc \u0646\u062f\u06cc\u062f\u0646.\n\n\ud83d\udccc \u0627\u0647\u0645\u06cc\u062a \u062d\u0645\u0644\u0647\n\n\u0627\u06cc\u0646 \u0633\u0648\u0645\u06cc\u0646 \u0628\u0627\u0631 \u0628\u0648\u062f \u06a9\u0647 \u06af\u0631\u0648\u0647 RomCom \u0627\u0632 \u06cc\u06a9 Zero-day \u062c\u062f\u06cc \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0631\u062f.\n\n\u0642\u0628\u0644\u0634 \u0647\u0645 \u0627\u0632:\n\nCVE-2023-36884 (\u062d\u0645\u0644\u0647 \u0628\u0627 Word)\n\n\u0648 \u062a\u0631\u06a9\u06cc\u0628 CVE-2024-9680 + CVE-2024-49039 (\u062d\u0645\u0644\u0647 \u0628\u0647 Firefox/Thunderbird/Tor)\n\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647 \u0628\u0648\u062f\u0646.\n\n\u0646\u0634\u0648\u0646 \u0645\u06cc\u200c\u062f\u0647 \u0627\u06cc\u0646 \u06af\u0631\u0648\u0647 \u0631\u0648\u06cc \u062e\u0631\u06cc\u062f \u0648 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a\u200c\u0647\u0627\u06cc \u0631\u0648\u0632 \u0633\u0631\u0645\u0627\u06cc\u0647\u200c\u06af\u0630\u0627\u0631\u06cc \u0633\u0646\u06af\u06cc\u0646\u06cc \u06a9\u0631\u062f\u0647.\n\n\ud83d\udccc \u0646\u062a\u06cc\u062c\u0647\u200c\u06af\u06cc\u0631\u06cc\n\n\u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0647\u0645 cybercrime (\u0645\u0627\u0644\u06cc) \u0648 \u0647\u0645 espionage (\u062c\u0627\u0633\u0648\u0633\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u06cc) \u0631\u0648 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0647 \u2192 \u06cc\u0639\u0646\u06cc \u062a\u0631\u06a9\u06cc\u0628 \u0645\u0646\u0627\u0641\u0639 \u0645\u0627\u0644\u06cc + \u0633\u06cc\u0627\u0633\u06cc.\n\n\u062a\u0646\u0647\u0627 \u0631\u0627\u0647 \u0627\u0645\u0646:\n\n\u0622\u067e\u062f\u06cc\u062a \u0641\u0648\u0631\u06cc WinRAR \u0628\u0647 \u0646\u0633\u062e\u0647 7.13 \u06cc\u0627 \u0628\u0627\u0644\u0627\u062a\u0631.\n\n\u0627\u06af\u0631 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u062f\u06cc\u06af\u0647\u200c\u0627\u06cc \u0627\u0632 UnRAR.dll \u06cc\u0627 \u0633\u0648\u0631\u0633 UnRAR \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0647 \u2192 \u0628\u0627\u06cc\u062f dependency\u0647\u0627 \u0647\u0645 \u0622\u067e\u062f\u06cc\u062a \u0628\u0634\u0646.\n\n\u0622\u0645\u0648\u0632\u0634 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0628\u0631\u0627\u06cc \u0628\u0627\u0632 \u0646\u06a9\u0631\u062f\u0646 \u0622\u0631\u0634\u06cc\u0648 \u0646\u0627\u0634\u0646\u0627\u0633 (\u0645\u062b\u0644 \u0631\u0632\u0648\u0645\u0647\u200c\u0647\u0627\u06cc \u0645\u0634\u06a9\u0648\u06a9).\n\n\ud83d\udd25 \u062f\u0631 \u0648\u0627\u0642\u0639 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627\u0639\u062b \u0645\u06cc\u200c\u0634\u062f \u0645\u0647\u0627\u062c\u0645 \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u0645\u0633\u062a\u0642\u06cc\u0645 \u0641\u0627\u06cc\u0644 \u062a\u0648\u0633\u0637 \u0642\u0631\u0628\u0627\u0646\u06cc\u060c \u0641\u0642\u0637 \u0628\u0627 Extract \u06a9\u0631\u062f\u0646 \u06cc\u06a9 RAR \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0628\u0631\u0633\u0647 \u2192 \u0648 \u0647\u0645\u06cc\u0646 \u0646\u06a9\u062a\u0647 \u062e\u06cc\u0644\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9\u0634\u0647.", "creation_timestamp": "2026-07-19T17:00:04.965533Z"}, {"uuid": "31e7a1e5-3f11-4663-9ca5-cbc7b8796445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/18958", "content": "Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025-8088 \u2013 thehackernews.com\n\nWed, 28 Jan 2026 17:46:00", "creation_timestamp": "2026-07-20T00:00:20.712946Z"}, {"uuid": "16317b2e-1a78-4a01-ab46-12c049d9db92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/22613", "content": "Hackers Exploit WinRAR CVE-2025-8088 to Plant Startup Shortcut and Run PowerShell Loader \u2013 gbhackers.com\n\nFri, 26 Jun 2026 17:51:27", "creation_timestamp": "2026-07-20T00:00:22.809724Z"}, {"uuid": "45bc9668-cbf9-4b6d-a56b-6630fd9bf274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/ExploitChi/18", "content": "\ud83d\udccc \u0645\u0627\u062c\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2025-8088 \u062f\u0631 WinRAR\n\n\u06a9\u0634\u0641: ESET \u062f\u0631 \u062c\u0648\u0644\u0627\u06cc 2025 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Zero-day \u062f\u0631 WinRAR \u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f \u06a9\u0647 \u062a\u0648\u0633\u0637 \u06af\u0631\u0648\u0647 RomCom (Storm-0978 / Tropical Scorpius / UNC2596) \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u062f.\n\n\u0645\u0627\u0647\u06cc\u062a: \u06cc\u06a9 Path Traversal \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Alternate Data Streams (ADS) \u0628\u0648\u062f. \u06cc\u0639\u0646\u06cc \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u200c\u062a\u0648\u0646\u0633\u062a \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc\u06cc \u0645\u062e\u0641\u06cc \u062f\u0627\u062e\u0644 \u0622\u0631\u0634\u06cc\u0648 \u0628\u0630\u0627\u0631\u0647 \u06a9\u0647 \u0648\u0642\u062a\u06cc \u06a9\u0627\u0631\u0628\u0631 \u0627\u0648\u0646 \u0631\u0648 \u0627\u06a9\u0633\u062a\u0631\u06a9\u062a \u0645\u06cc\u200c\u06a9\u0631\u062f\u060c \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u062f\u0631 \u0645\u0633\u06cc\u0631\u0647\u0627\u06cc \u0633\u06cc\u0633\u062a\u0645\u06cc \u062d\u0633\u0627\u0633 \u0645\u062b\u0644 %TEMP% \u06cc\u0627 Startup folder \u0631\u06cc\u062e\u062a\u0647 \u0645\u06cc\u200c\u0634\u062f\u0646 \u2192 \u0648 \u0627\u06cc\u0646 \u06cc\u0639\u0646\u06cc \u0627\u062c\u0631\u0627\u06cc \u062e\u0648\u062f\u06a9\u0627\u0631 \u0628\u062f\u0627\u0641\u0632\u0627\u0631.\n\n\u067e\u0686: WinRAR \u0633\u0631\u06cc\u0639 \u0648\u0627\u06a9\u0646\u0634 \u0646\u0634\u0648\u0646 \u062f\u0627\u062f \u0648 \u062f\u0631 30 \u062c\u0648\u0644\u0627\u06cc 2025 \u0646\u0633\u062e\u0647\u200c\u06cc 7.13 \u0631\u0648 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f \u06a9\u0647 \u0645\u0634\u06a9\u0644 \u0631\u0648 \u0631\u0641\u0639 \u06a9\u0631\u062f.\n\n\ud83d\udccc \u0631\u0648\u0634 \u062d\u0645\u0644\u0647\n\n\u0645\u0647\u0627\u062c\u0645 \u06cc\u06a9 \u0641\u0627\u06cc\u0644 RAR \u0645\u06cc\u200c\u0633\u0627\u0632\u0647 \u06a9\u0647 \u0638\u0627\u0647\u0631\u0627\u064b \u0641\u0642\u0637 \u0634\u0627\u0645\u0644 \u06cc\u06a9 \u0641\u0627\u06cc\u0644 \u0628\u06cc\u200c\u0636\u0631\u0631 (\u0645\u062b\u0644\u0627\u064b \u0631\u0632\u0648\u0645\u0647 \u06cc\u0627 CV) \u0627\u0633\u062a.\n\n\u0627\u0645\u0627 \u062f\u0631 \u067e\u0634\u062a \u0635\u062d\u0646\u0647\u060c \u0641\u0627\u06cc\u0644 \u062d\u0627\u0648\u06cc ADS\u0647\u0627 (stream\u0647\u0627\u06cc \u0645\u062e\u0641\u06cc NTFS) \u0647\u0633\u062a \u06a9\u0647 WinRAR \u0645\u0648\u0642\u0639 \u0627\u0633\u062a\u062e\u0631\u0627\u062c\u060c \u0627\u0648\u0646\u200c\u0647\u0627 \u0631\u0648 \u0647\u0645 unpack \u0645\u06cc\u200c\u06a9\u0646\u0647.\n\n\u0627\u06cc\u0646 ADS\u0647\u0627 \u0634\u0627\u0645\u0644:\n\n\u06cc\u06a9 DLL \u06cc\u0627 EXE \u0645\u062e\u0631\u0628 (\u062f\u0631 %TEMP% \u06cc\u0627 %LOCALAPPDATA%)\n\n\u06cc\u06a9 LNK \u0645\u062e\u0631\u0628 (\u062f\u0631 Startup folder \u0648\u06cc\u0646\u062f\u0648\u0632) \u0647\u0633\u062a\u0646\u062f.\n\n\u0648\u0642\u062a\u06cc \u0642\u0631\u0628\u0627\u0646\u06cc \u0641\u0627\u06cc\u0644 \u0631\u0648 \u0628\u0627\u0632 \u0648 extract \u0645\u06cc\u200c\u06a9\u0646\u0647\u060c \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u062f\u0631 \u0645\u0633\u06cc\u0631\u0647\u0627\u06cc \u062e\u0627\u0635 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u0646 \u0648 \u0628\u0627 \u0631\u06cc\u0633\u062a\u0627\u0631\u062a \u06cc\u0627 \u0644\u0627\u06af\u06cc\u0646 \u0628\u0639\u062f\u06cc\u060c \u062e\u0648\u062f\u06a9\u0627\u0631 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u0634\u0646.\n\n\ud83d\udccc \u0632\u0646\u062c\u06cc\u0631\u0647\u200c\u0647\u0627\u06cc \u0622\u0644\u0648\u062f\u06af\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc\u200c\u0634\u062f\u0647\n\n\u0622\u0646\u062a\u06cc \u0648\u06cc\u0631\u0648\u0633ESET \u0633\u0647 \u0632\u0646\u062c\u06cc\u0631\u0647 \u0645\u062e\u062a\u0644\u0641 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f\u0647:\n\nMythic agent execution chain\n\n\u0641\u0627\u06cc\u0644 LNK \u0628\u0627\u0639\u062b COM hijacking \u0645\u06cc\u200c\u0634\u0647 (msedge.dll \u0645\u062e\u0631\u0628 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u0645\u06cc\u200c\u0634\u0647).\n\n\u0641\u0627\u06cc\u0644DLL \u06cc\u06a9 shellcode \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc\u200c\u0634\u062f\u0647 \u0628\u0627 AES \u0631\u0648 decrypt \u0648 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u06a9\u0646\u0647.\n\n\u06cc\u06a9 shellcode \u0628\u0647 \u06cc\u06a9 C2 \u0633\u0631\u0648\u0631 \u0645\u062a\u0635\u0644 \u0645\u06cc\u200c\u0634\u0647 (dynamic HTTP profile).\n\n\u062d\u062a\u06cc \u062f\u0627\u0645\u0646\u0647 \u0633\u0627\u0632\u0645\u0627\u0646 \u0647\u062f\u0641 \u0647\u0645 hardcoded \u0628\u0648\u062f\u0647 \u2192 \u06cc\u0639\u0646\u06cc \u062d\u0645\u0644\u0647 \u0628\u0633\u06cc\u0627\u0631 targeted \u0628\u0648\u062f\u0647.\n\nSnipBot variant execution chain\n\n\u0641\u0627\u06cc\u0644 LNK \u06cc\u06a9 EXE \u0645\u062e\u0631\u0628 (ApbxHelper.exe) \u0631\u0648 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u06a9\u0646\u0647.\n\n\u0641\u0627\u06cc\u0644EXE \u062a\u063a\u06cc\u06cc\u0631 \u06cc\u0627\u0641\u062a\u0647\u200c\u06cc PuTTY CAC \u0647\u0633\u062a \u0628\u0627 certificate \u062c\u0639\u0644\u06cc.\n\n\u0641\u0627\u06cc\u0644shellcode SnipBot \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u0634\u0647\u060c \u0648\u0644\u06cc \u0641\u0642\u0637 \u0627\u06af\u0647 \u0642\u0631\u0628\u0627\u0646\u06cc \u062d\u062f\u0627\u0642\u0644 69 \u0641\u0627\u06cc\u0644 \u0627\u062e\u06cc\u0631\u0627\u064b \u0628\u0627\u0632 \u06a9\u0631\u062f\u0647 \u0628\u0627\u0634\u0647 \u2192 \u062a\u06a9\u0646\u06cc\u06a9 \u0636\u062f \u0622\u0646\u0627\u0644\u06cc\u0632.\n\nRustyClaw / MeltingClaw execution chain\n\n\u0641\u0627\u06cc\u0644 LNK \u06cc\u06a9 EXE \u0628\u0647 \u0646\u0627\u0645 Complaint.exe \u0631\u0648 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u06a9\u0646\u0647.\n\n\u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0646\u0648\u0634\u062a\u0647\u200c\u0634\u062f\u0647 \u0628\u0627 Rust \u0647\u0633\u062a \u0648 payload \u0628\u0639\u062f\u06cc \u0631\u0648 \u062f\u0627\u0646\u0644\u0648\u062f \u0645\u06cc\u200c\u06a9\u0646\u0647.\n\n\u0628\u0647 C2 \u0633\u0631\u0648\u0631 \u062c\u062f\u06cc\u062f \u0648\u0635\u0644 \u0645\u06cc\u200c\u0634\u0647 \u0648 \u0645\u0631\u062d\u0644\u0647\u200c\u0647\u0627\u06cc \u0628\u0639\u062f\u06cc \u0622\u0644\u0648\u062f\u06af\u06cc \u0631\u0648 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u06a9\u0646\u0647.\n\n\ud83d\udccc \u0627\u0647\u062f\u0627\u0641 \u062d\u0645\u0644\u0647\n\n\u0634\u0631\u06a9\u062a\u200c\u0647\u0627\u06cc \u0645\u0627\u0644\u06cc\u060c \u062f\u0641\u0627\u0639\u06cc\u060c \u062a\u0648\u0644\u06cc\u062f\u06cc \u0648 \u0644\u062c\u0633\u062a\u06cc\u06a9\u06cc \u062f\u0631 \u0627\u0631\u0648\u067e\u0627 \u0648 \u06a9\u0627\u0646\u0627\u062f\u0627 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0646.\n\n\u0631\u0648\u0634 \u062a\u0648\u0632\u06cc\u0639: \u0627\u06cc\u0645\u06cc\u0644\u200c\u0647\u0627\u06cc Spearphishing \u0628\u0627 \u0641\u0627\u06cc\u0644 RAR \u067e\u06cc\u0648\u0633\u062a (\u0631\u0632\u0648\u0645\u0647\u200c\u0647\u0627\u06cc \u062c\u0639\u0644\u06cc \u0645\u062b\u0644 \u201cEli_Rosenfeld_CV\u201d).\n\n\u062e\u0648\u0634\u0628\u062e\u062a\u0627\u0646\u0647 ESET \u0645\u06cc\u200c\u06af\u0647 \u062f\u0631 telemetry \u062e\u0648\u062f\u0634\u0648\u0646 \u0646\u0634\u0648\u0646\u0647\u200c\u0627\u06cc \u0627\u0632 compromise \u0648\u0627\u0642\u0639\u06cc \u0646\u062f\u06cc\u062f\u0646.\n\n\ud83d\udccc \u0627\u0647\u0645\u06cc\u062a \u062d\u0645\u0644\u0647\n\n\u0627\u06cc\u0646 \u0633\u0648\u0645\u06cc\u0646 \u0628\u0627\u0631 \u0628\u0648\u062f \u06a9\u0647 \u06af\u0631\u0648\u0647 RomCom \u0627\u0632 \u06cc\u06a9 Zero-day \u062c\u062f\u06cc \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0631\u062f.\n\n\u0642\u0628\u0644\u0634 \u0647\u0645 \u0627\u0632:\n\nCVE-2023-36884 (\u062d\u0645\u0644\u0647 \u0628\u0627 Word)\n\n\u0648 \u062a\u0631\u06a9\u06cc\u0628 CVE-2024-9680 + CVE-2024-49039 (\u062d\u0645\u0644\u0647 \u0628\u0647 Firefox/Thunderbird/Tor)\n\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647 \u0628\u0648\u062f\u0646.\n\n\u0646\u0634\u0648\u0646 \u0645\u06cc\u200c\u062f\u0647 \u0627\u06cc\u0646 \u06af\u0631\u0648\u0647 \u0631\u0648\u06cc \u062e\u0631\u06cc\u062f \u0648 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a\u200c\u0647\u0627\u06cc \u0631\u0648\u0632 \u0633\u0631\u0645\u0627\u06cc\u0647\u200c\u06af\u0630\u0627\u0631\u06cc \u0633\u0646\u06af\u06cc\u0646\u06cc \u06a9\u0631\u062f\u0647.\n\n\ud83d\udccc \u0646\u062a\u06cc\u062c\u0647\u200c\u06af\u06cc\u0631\u06cc\n\n\u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0647\u0645 cybercrime (\u0645\u0627\u0644\u06cc) \u0648 \u0647\u0645 espionage (\u062c\u0627\u0633\u0648\u0633\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u06cc) \u0631\u0648 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0647 \u2192 \u06cc\u0639\u0646\u06cc \u062a\u0631\u06a9\u06cc\u0628 \u0645\u0646\u0627\u0641\u0639 \u0645\u0627\u0644\u06cc + \u0633\u06cc\u0627\u0633\u06cc.\n\n\u062a\u0646\u0647\u0627 \u0631\u0627\u0647 \u0627\u0645\u0646:\n\n\u0622\u067e\u062f\u06cc\u062a \u0641\u0648\u0631\u06cc WinRAR \u0628\u0647 \u0646\u0633\u062e\u0647 7.13 \u06cc\u0627 \u0628\u0627\u0644\u0627\u062a\u0631.\n\n\u0627\u06af\u0631 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u062f\u06cc\u06af\u0647\u200c\u0627\u06cc \u0627\u0632 UnRAR.dll \u06cc\u0627 \u0633\u0648\u0631\u0633 UnRAR \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0647 \u2192 \u0628\u0627\u06cc\u062f dependency\u0647\u0627 \u0647\u0645 \u0622\u067e\u062f\u06cc\u062a \u0628\u0634\u0646.\n\n\u0622\u0645\u0648\u0632\u0634 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0628\u0631\u0627\u06cc \u0628\u0627\u0632 \u0646\u06a9\u0631\u062f\u0646 \u0622\u0631\u0634\u06cc\u0648 \u0646\u0627\u0634\u0646\u0627\u0633 (\u0645\u062b\u0644 \u0631\u0632\u0648\u0645\u0647\u200c\u0647\u0627\u06cc \u0645\u0634\u06a9\u0648\u06a9).\n\n\ud83d\udd25 \u062f\u0631 \u0648\u0627\u0642\u0639 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627\u0639\u062b \u0645\u06cc\u200c\u0634\u062f \u0645\u0647\u0627\u062c\u0645 \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u0645\u0633\u062a\u0642\u06cc\u0645 \u0641\u0627\u06cc\u0644 \u062a\u0648\u0633\u0637 \u0642\u0631\u0628\u0627\u0646\u06cc\u060c \u0641\u0642\u0637 \u0628\u0627 Extract \u06a9\u0631\u062f\u0646 \u06cc\u06a9 RAR \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0628\u0631\u0633\u0647 \u2192 \u0648 \u0647\u0645\u06cc\u0646 \u0646\u06a9\u062a\u0647 \u062e\u06cc\u0644\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9\u0634\u0647.", "creation_timestamp": "2026-07-20T00:00:22.982288Z"}, {"uuid": "4735c346-7cab-4531-bbfa-de313a40a10f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "Telegram/u4BK2QtqQNOMpVOeeCtngL5_LfMK9Vh2PbJg3oUI7BP6lPg", "content": "", "creation_timestamp": "2026-07-20T19:00:04.429064Z"}, {"uuid": "77acff37-0e8f-484c-b4fe-1a21d57a2664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/9856", "content": "Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025-8088 \u2013 thehackernews.com\n\nWed, 28 Jan 2026 17:46:00", "creation_timestamp": "2026-07-20T19:00:05.428938Z"}, {"uuid": "b2ce4462-a767-43bd-9c7f-6813f10663c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/6268", "content": "WinRAR Zero-Day CVE-2025-8088 Exploited to Spread RomCom Malware \u2013 hackread.com\n\nSat, 09 Aug 2025 22:46:10", "creation_timestamp": "2026-07-20T20:00:08.454426Z"}, {"uuid": "fdcc4847-44cf-4ef1-b24a-9f9af2f56274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/true_secator/8547", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u043b\u0430\u043d\u0434\u0448\u0430\u0444\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u0437\u0430 \u0432\u0442\u043e\u0440\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2026 \u0433\u043e\u0434\u0430.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c \u043a\u043e\u043d\u0441\u0442\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f. \u0412\u043e-\u043f\u0435\u0440\u0432\u044b\u0445, \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 CVE \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u043e \u0431\u0435\u0441\u043f\u0440\u0435\u0446\u0435\u0434\u0435\u043d\u0442\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u043e \u0447\u0430\u0441\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u042d\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u043f\u043e\u0432\u0441\u0435\u043c\u0435\u0441\u0442\u043d\u044b\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u0418\u0418 \u043a\u0430\u043a \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0442\u0430\u043a \u0438 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435, \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u0446\u0435\u043b\u044b\u0435 \u043a\u043b\u0430\u0441\u0441\u044b \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Linux.\n\n\u0412\u043e-\u0432\u0442\u043e\u0440\u044b\u0445, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u0430\u043b\u0438 \u0447\u0430\u0449\u0435 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u043a \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u044b\u0439 \u043f\u0440\u0435\u0446\u0435\u0434\u0435\u043d\u0442 \u0432 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 Windows \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043a \u043d\u0438\u043c: \u043d\u0435 \u0434\u043e\u0436\u0438\u0434\u0430\u0442\u044c\u0441\u044f, \u043f\u043e\u043a\u0430 \u0438\u0445 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0442, \u043d\u0435 \u0433\u043e\u0432\u043e\u0440\u044f \u0443\u0436\u0435 \u043e \u043f\u0430\u0442\u0447\u0430\u0445.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Nightmare Eclipse (\u0438\u043b\u0438 Chaotic Eclipse) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0441\u043f\u0438\u0441\u043e\u043a \u043d\u043e\u0432\u044b\u0445 \u00ab\u0438\u043c\u0435\u043d\u043d\u044b\u0445\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows (BlueHammer, RedSun, YellowKey, GreenPlasma, RougePlanet, UnDefend).\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0441\u043b\u0443\u0447\u0430\u0438 \u043f\u043e\u043a\u0430 \u0435\u0434\u0438\u043d\u0438\u0447\u043d\u044b, \u0432 \u041b\u041a \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u043d\u0438 \u043f\u0435\u0440\u0435\u0440\u0430\u0441\u0442\u0443\u0442 \u0432 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 \u0442\u0440\u0435\u043d\u0434. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0430\u043d\u043d\u044f\u044f \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u043e \u043f\u0435\u0440\u0435\u0434 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0422\u0430\u043a\u0436\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u00ab\u0437\u0430\u0441\u043b\u0443\u0436\u0435\u043d\u043d\u044b\u0435\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041f\u041e \u0434\u043b\u044f Windows, \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u041b\u041a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u044e\u0442 \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u044d\u0442\u043e CVE-2018-0802 \u0438 CVE-2017-11882 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Equation Editor; CVE-2017-0199 \u0432 Microsoft Office \u0438 WordPad; CVE-2023-38831 \u0438 CVE-2025-6218 (ZDI-CAN-27198) \u0432 WinRAR; CVE-2025-8088 \u043f\u043e \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430\u044f CVE-2025-6218.\n\n\u041f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0412 Linux \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u0442\u043e\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0447\u0435\u0440\u043d\u0430\u044f \u043f\u043e\u043b\u043e\u0441\u0430. \u0422\u0430\u043a, \u0431\u044b\u043b \u0440\u0430\u0441\u043a\u0440\u044b\u0442 \u043a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Dirty Frag, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432\u043d\u0443\u0442\u0440\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430, \u0442\u0430\u043a \u0438\u043b\u0438 \u0438\u043d\u0430\u0447\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u043b\u0438\u0441\u044c \u043a \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Linux.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435: CVE-2026-31431 (Copy Fail), CVE-2026-43284, CVE-2026-43500 (Dirty Frag), CVE-2026-46300 (Fragnesia), CVE-2026-31635 (DirtyDecrypt), CVE-2026-43494 (PinTheft) \u0438 CVE-2026-46331 (pedit COW).\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u0441\u0440\u0430\u0437\u0443 \u0441\u0442\u0430\u043b\u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u041b\u041a \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0442\u0430\u043a\u0436\u0435 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2022-0847 (Dirty Pipe), CVE-2019-13272, CVE-2021-22555, CVE-2023-32233.\n\n\u0412 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043f\u043e \u0442\u0438\u043f\u0430\u043c \u041f\u041e \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0430\u0432\u043d\u043e \u043d\u0435 \u043f\u043e\u043f\u0430\u0434\u0430\u043b\u0438 \u0432 \u0432\u044b\u0431\u043e\u0440\u043a\u0443. \u0422\u0430\u043a, \u043c\u044b \u0441\u043d\u043e\u0432\u0430 \u0432\u0438\u0434\u0438\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0442\u0430\u043a\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b, \u043a\u0430\u043a SharePoint.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u0432 APT-\u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430\u043c\u0435\u0442\u0438\u043b\u0441\u044f \u0442\u0440\u0435\u043d\u0434 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0440\u0430\u0437\u0443 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c, \u043a\u0430\u043a \u0438 \u0440\u0430\u043d\u044c\u0448\u0435, \u0432 \u041b\u041a \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438 \u043c\u043d\u043e\u0433\u043e 0-day. \u0421\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u043e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Langflow - \u044d\u0442\u043e \u043e\u0434\u0438\u043d \u0438\u0437 \u043f\u0435\u0440\u0432\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u0435\u0432, \u043a\u043e\u0433\u0434\u0430 APT \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0418\u0418, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0435\u0439\u0447\u0430\u0441 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c.\n\n\u0421\u0430\u043c\u044b\u043c\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u043c\u0438 C2-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430\u043c\u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f Sliver, Havoc, Adaptix\u04212 \u0438 Metasploit.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0433\u0440\u0430\u0444\u0438\u043a\u0430 - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "creation_timestamp": "2026-08-26T18:00:05.671065Z"}, {"uuid": "343dc338-5037-407a-92f5-c6ff47d6f686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "Telegram/u4BK2QtqQNOMpVOeeCtngL5_LfMK9Vh2PbJg3oUI7BP6lPg", "content": "", "creation_timestamp": "2026-07-21T00:00:19.696765Z"}, {"uuid": "ebd11fe2-fa4f-47a3-abc0-82cca7d5b9d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/6268", "content": "WinRAR Zero-Day CVE-2025-8088 Exploited to Spread RomCom Malware \u2013 hackread.com\n\nSat, 09 Aug 2025 22:46:10", "creation_timestamp": "2026-07-21T00:00:24.504527Z"}, {"uuid": "a37d2132-2bd3-4d6c-9693-b2db7875f5e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/9856", "content": "Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025-8088 \u2013 thehackernews.com\n\nWed, 28 Jan 2026 17:46:00", "creation_timestamp": "2026-07-21T01:00:14.058441Z"}, {"uuid": "e15b8e8d-b72b-4c80-acc1-bc8353c3e124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/knowyouradversary/441", "content": "\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442!\n\n\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u0432\u0437\u0433\u043b\u044f\u043d\u0435\u043c \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0441\u0440\u0430\u0432\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u0432\u0435\u0436\u0438\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445 Gamaredon (Disastrous Werewolf, Primitive Bear, Armageddon, Shuckworm, Aqua Blizzard).\n\n\u041a\u0430\u043a \u0438 \u043f\u0440\u0435\u0436\u0434\u0435, \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430. \u041a \u043d\u0438\u043c \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u044b \u0430\u0440\u0445\u0438\u0432\u044b, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-8088 \u0432 WinRAR. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 VBS-\u0444\u0430\u0439\u043b, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, 1_13_4_1882_18.03.2026.vbs, \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u0432 %APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\.\n\n\u041c\u044b \u043c\u043e\u0436\u0435\u043c \u043f\u043e\u0438\u0441\u043a\u0430\u0442\u044c \u0441\u043e\u0431\u044b\u0442\u0438\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 VBS-\u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u044d\u0442\u043e\u0439 \u043f\u0430\u043f\u043a\u0435:\n\nevent_type: \"filecreatewin\"\n\nAND\n\nfile_path: (\"programs\\\\startup\" AND *.vbs)\n\n\u0414\u0430\u043b\u0435\u0435 VBS-\u0444\u0430\u0439\u043b \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 HTA-\u0444\u0430\u0439\u043b \u0441 Cloudflare Workers. \u0417\u0434\u0435\u0441\u044c \u043c\u044b, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043c\u043e\u0436\u0435\u043c \u043f\u043e\u0438\u0441\u043a\u0430\u0442\u044c \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438 wbscript.exe \u0441 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u0434\u043e\u043c\u0435\u043d\u0430\u043c\u0438:\n\nevent_type: \"dnsreqwin\"\n\nAND\n\ndns_rname: \"workers.dev\"\n\nAND\n\nproc_file_path: \"wscript.exe\"\n\nHTA-\u0444\u0430\u0439\u043b \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0430\u043f\u043a\u0443 %TEMP% \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e mshta.exe, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u0430\u043c \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0443\u044e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u0440\u043e\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u043e\u0438\u0441\u043a\u0430:\n\nevent_type: \"processcreatewin\"\n\nAND\n\nproc_file_path: \"mshta.exe\"\n\nAND\n\ncmdline: \"temp\"\n\n\u042d\u0442\u043e\u0442 \u0444\u0430\u0439\u043b \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0443\u044e \u0441\u0442\u0430\u0434\u0438\u044e \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0435\u0435.\n\n\u0421\u043a\u043e\u0440\u043e \u0443\u0432\u0438\u0434\u0438\u043c\u0441\u044f!\n\nEnglish version", "creation_timestamp": "2026-08-24T21:00:07.654190Z"}, {"uuid": "6eb819f4-ca0a-48ac-ac8e-eebd00a5f898", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/infosec_ita_notizie/2950", "content": "\u2728 Gamaredon sfrutta CVE-2025-8088 in WinRAR per distribuire GammaWorm e GammaSteel contro l\u2019Ucraina\nvia, InsicurezzaDigitale.com\n\n\ud83d\udd17 Leggi di pi\u00f9: https://insicurezzadigitale.com/gamaredon-sfrutta-cve-2025-8088-in-winrar-per-distribuire-gammaworm-e-gammasteel-contro-lucraina/", "creation_timestamp": "2026-07-21T04:00:08.390437Z"}, {"uuid": "d47edabd-8851-4d2d-9c1f-00422381a90b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/cve0day/312", "content": "CVE-2025-8088\n\nA path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by\u00a0Anton Cherepanov, Peter Ko\u0161in\u00e1r, and Peter Str\u00fd\u010dek\n     from ESET.\n\nGitHub Link:\nhttps://github.com/lennertdefauw/CVE-2025-8088", "creation_timestamp": "2026-08-27T15:00:11.684153Z"}, {"uuid": "5235b1c8-9f95-407b-8580-7708a34562c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/6268", "content": "WinRAR Zero-Day CVE-2025-8088 Exploited to Spread RomCom Malware \u2013 hackread.com\n\nSat, 09 Aug 2025 22:46:10", "creation_timestamp": "2026-07-22T00:00:28.098558Z"}, {"uuid": "9ac23c4c-5f5f-476b-bb46-77d0cae86a09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/9856", "content": "Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025-8088 \u2013 thehackernews.com\n\nWed, 28 Jan 2026 17:46:00", "creation_timestamp": "2026-07-22T00:00:31.052579Z"}, {"uuid": "9352d4b3-d321-4d2f-a8be-fd6cb04fea46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/infosec_ita_notizie/2950", "content": "\u2728 Gamaredon sfrutta CVE-2025-8088 in WinRAR per distribuire GammaWorm e GammaSteel contro l\u2019Ucraina\nvia, InsicurezzaDigitale.com\n\n\ud83d\udd17 Leggi di pi\u00f9: https://insicurezzadigitale.com/gamaredon-sfrutta-cve-2025-8088-in-winrar-per-distribuire-gammaworm-e-gammasteel-contro-lucraina/", "creation_timestamp": "2026-07-22T00:00:32.014305Z"}, {"uuid": "299b1bcc-9d50-4ae1-9823-b535be5e5848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/knowyouradversary/441", "content": "\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442!\n\n\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u0432\u0437\u0433\u043b\u044f\u043d\u0435\u043c \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0441\u0440\u0430\u0432\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u0432\u0435\u0436\u0438\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445 Gamaredon (Disastrous Werewolf, Primitive Bear, Armageddon, Shuckworm, Aqua Blizzard).\n\n\u041a\u0430\u043a \u0438 \u043f\u0440\u0435\u0436\u0434\u0435, \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430. \u041a \u043d\u0438\u043c \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u044b \u0430\u0440\u0445\u0438\u0432\u044b, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-8088 \u0432 WinRAR. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 VBS-\u0444\u0430\u0439\u043b, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, 1_13_4_1882_18.03.2026.vbs, \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u0432 %APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\.\n\n\u041c\u044b \u043c\u043e\u0436\u0435\u043c \u043f\u043e\u0438\u0441\u043a\u0430\u0442\u044c \u0441\u043e\u0431\u044b\u0442\u0438\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 VBS-\u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u044d\u0442\u043e\u0439 \u043f\u0430\u043f\u043a\u0435:\n\nevent_type: \"filecreatewin\"\n\nAND\n\nfile_path: (\"programs\\\\startup\" AND *.vbs)\n\n\u0414\u0430\u043b\u0435\u0435 VBS-\u0444\u0430\u0439\u043b \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 HTA-\u0444\u0430\u0439\u043b \u0441 Cloudflare Workers. \u0417\u0434\u0435\u0441\u044c \u043c\u044b, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043c\u043e\u0436\u0435\u043c \u043f\u043e\u0438\u0441\u043a\u0430\u0442\u044c \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438 wbscript.exe \u0441 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u0434\u043e\u043c\u0435\u043d\u0430\u043c\u0438:\n\nevent_type: \"dnsreqwin\"\n\nAND\n\ndns_rname: \"workers.dev\"\n\nAND\n\nproc_file_path: \"wscript.exe\"\n\nHTA-\u0444\u0430\u0439\u043b \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0430\u043f\u043a\u0443 %TEMP% \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e mshta.exe, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u0430\u043c \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0443\u044e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u0440\u043e\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u043e\u0438\u0441\u043a\u0430:\n\nevent_type: \"processcreatewin\"\n\nAND\n\nproc_file_path: \"mshta.exe\"\n\nAND\n\ncmdline: \"temp\"\n\n\u042d\u0442\u043e\u0442 \u0444\u0430\u0439\u043b \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0443\u044e \u0441\u0442\u0430\u0434\u0438\u044e \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0435\u0435.\n\n\u0421\u043a\u043e\u0440\u043e \u0443\u0432\u0438\u0434\u0438\u043c\u0441\u044f!\n\nEnglish version", "creation_timestamp": "2026-08-25T00:00:11.350715Z"}, {"uuid": "dfb33642-9fc7-4a84-ae3f-fede95704fbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/true_secator/8547", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u043b\u0430\u043d\u0434\u0448\u0430\u0444\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u0437\u0430 \u0432\u0442\u043e\u0440\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2026 \u0433\u043e\u0434\u0430.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c \u043a\u043e\u043d\u0441\u0442\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f. \u0412\u043e-\u043f\u0435\u0440\u0432\u044b\u0445, \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 CVE \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u043e \u0431\u0435\u0441\u043f\u0440\u0435\u0446\u0435\u0434\u0435\u043d\u0442\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u043e \u0447\u0430\u0441\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u042d\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u043f\u043e\u0432\u0441\u0435\u043c\u0435\u0441\u0442\u043d\u044b\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u0418\u0418 \u043a\u0430\u043a \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0442\u0430\u043a \u0438 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435, \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u0446\u0435\u043b\u044b\u0435 \u043a\u043b\u0430\u0441\u0441\u044b \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Linux.\n\n\u0412\u043e-\u0432\u0442\u043e\u0440\u044b\u0445, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u0430\u043b\u0438 \u0447\u0430\u0449\u0435 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u043a \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u044b\u0439 \u043f\u0440\u0435\u0446\u0435\u0434\u0435\u043d\u0442 \u0432 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 Windows \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043a \u043d\u0438\u043c: \u043d\u0435 \u0434\u043e\u0436\u0438\u0434\u0430\u0442\u044c\u0441\u044f, \u043f\u043e\u043a\u0430 \u0438\u0445 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0442, \u043d\u0435 \u0433\u043e\u0432\u043e\u0440\u044f \u0443\u0436\u0435 \u043e \u043f\u0430\u0442\u0447\u0430\u0445.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Nightmare Eclipse (\u0438\u043b\u0438 Chaotic Eclipse) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0441\u043f\u0438\u0441\u043e\u043a \u043d\u043e\u0432\u044b\u0445 \u00ab\u0438\u043c\u0435\u043d\u043d\u044b\u0445\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows (BlueHammer, RedSun, YellowKey, GreenPlasma, RougePlanet, UnDefend).\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0441\u043b\u0443\u0447\u0430\u0438 \u043f\u043e\u043a\u0430 \u0435\u0434\u0438\u043d\u0438\u0447\u043d\u044b, \u0432 \u041b\u041a \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u043d\u0438 \u043f\u0435\u0440\u0435\u0440\u0430\u0441\u0442\u0443\u0442 \u0432 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 \u0442\u0440\u0435\u043d\u0434. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0430\u043d\u043d\u044f\u044f \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u043e \u043f\u0435\u0440\u0435\u0434 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0422\u0430\u043a\u0436\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u00ab\u0437\u0430\u0441\u043b\u0443\u0436\u0435\u043d\u043d\u044b\u0435\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041f\u041e \u0434\u043b\u044f Windows, \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u041b\u041a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u044e\u0442 \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u044d\u0442\u043e CVE-2018-0802 \u0438 CVE-2017-11882 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Equation Editor; CVE-2017-0199 \u0432 Microsoft Office \u0438 WordPad; CVE-2023-38831 \u0438 CVE-2025-6218 (ZDI-CAN-27198) \u0432 WinRAR; CVE-2025-8088 \u043f\u043e \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430\u044f CVE-2025-6218.\n\n\u041f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0412 Linux \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u0442\u043e\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0447\u0435\u0440\u043d\u0430\u044f \u043f\u043e\u043b\u043e\u0441\u0430. \u0422\u0430\u043a, \u0431\u044b\u043b \u0440\u0430\u0441\u043a\u0440\u044b\u0442 \u043a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Dirty Frag, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432\u043d\u0443\u0442\u0440\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430, \u0442\u0430\u043a \u0438\u043b\u0438 \u0438\u043d\u0430\u0447\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u043b\u0438\u0441\u044c \u043a \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Linux.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435: CVE-2026-31431 (Copy Fail), CVE-2026-43284, CVE-2026-43500 (Dirty Frag), CVE-2026-46300 (Fragnesia), CVE-2026-31635 (DirtyDecrypt), CVE-2026-43494 (PinTheft) \u0438 CVE-2026-46331 (pedit COW).\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u0441\u0440\u0430\u0437\u0443 \u0441\u0442\u0430\u043b\u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u041b\u041a \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0442\u0430\u043a\u0436\u0435 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2022-0847 (Dirty Pipe), CVE-2019-13272, CVE-2021-22555, CVE-2023-32233.\n\n\u0412 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043f\u043e \u0442\u0438\u043f\u0430\u043c \u041f\u041e \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0430\u0432\u043d\u043e \u043d\u0435 \u043f\u043e\u043f\u0430\u0434\u0430\u043b\u0438 \u0432 \u0432\u044b\u0431\u043e\u0440\u043a\u0443. \u0422\u0430\u043a, \u043c\u044b \u0441\u043d\u043e\u0432\u0430 \u0432\u0438\u0434\u0438\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0442\u0430\u043a\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b, \u043a\u0430\u043a SharePoint.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u0432 APT-\u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430\u043c\u0435\u0442\u0438\u043b\u0441\u044f \u0442\u0440\u0435\u043d\u0434 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0440\u0430\u0437\u0443 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c, \u043a\u0430\u043a \u0438 \u0440\u0430\u043d\u044c\u0448\u0435, \u0432 \u041b\u041a \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438 \u043c\u043d\u043e\u0433\u043e 0-day. \u0421\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u043e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Langflow - \u044d\u0442\u043e \u043e\u0434\u0438\u043d \u0438\u0437 \u043f\u0435\u0440\u0432\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u0435\u0432, \u043a\u043e\u0433\u0434\u0430 APT \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0418\u0418, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0435\u0439\u0447\u0430\u0441 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c.\n\n\u0421\u0430\u043c\u044b\u043c\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u043c\u0438 C2-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430\u043c\u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f Sliver, Havoc, Adaptix\u04212 \u0438 Metasploit.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0433\u0440\u0430\u0444\u0438\u043a\u0430 - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "creation_timestamp": "2026-08-27T00:00:08.978381Z"}, {"uuid": "285f124e-b55e-4388-9451-267776a3a1a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/ZerodayAlert/539", "content": "CVE-2025-8088: WinRAR \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u2014 \u0431\u043e\u043c\u0431\u0430 \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\n\n\ud83c\udfaf \u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0435 WinRAR \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0443\u044e \u0434\u044b\u0440\u0443 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u043e \u0445\u0443\u0434\u0448\u0430\u044f \u043d\u043e\u0432\u043e\u0441\u0442\u044c \u2014 \u0445\u0430\u043a\u0435\u0440\u044b \u0443\u0436\u0435 \u0437\u043d\u0430\u043b\u0438 \u043e \u043d\u0435\u0439 \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-8088 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043a\u043e\u0432\u0430\u0440\u043d\u044b\u0435 \u0430\u0440\u0445\u0438\u0432\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 \u043f\u043e\u0434\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u044e\u0442 \u0444\u0430\u0439\u043b\u044b \u043d\u0435 \u0442\u0443\u0434\u0430, \u043a\u0443\u0434\u0430 \u0432\u044b\u0431\u0440\u0430\u043b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0430 \u0432 \u0430\u0432\u0442\u043e\u0437\u0430\u0433\u0440\u0443\u0437\u043e\u0447\u043d\u044b\u0435 \u043f\u0430\u043f\u043a\u0438 Windows. \u0422\u0430\u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043a\u0430\u0436\u0434\u043e\u043c \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430.\n\n\ud83d\udca3 \u0413\u0440\u0443\u043f\u043f\u0430 RomCom \u0443\u0436\u0435 \u0432\u043e\u0432\u0441\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u044d\u0442\u0443 \u0444\u0438\u0448\u043a\u0443 \u0432 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u0430\u0445 \u2014 \u043f\u0440\u0438\u0441\u044b\u043b\u0430\u044e\u0442 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \"\u0431\u0435\u0437\u043e\u0431\u0438\u0434\u043d\u044b\u043c\u0438\" RAR-\u0430\u0440\u0445\u0438\u0432\u0430\u043c\u0438, \u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u0441\u0438\u0434\u0438\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0434\u0443\u043c\u0430\u0435\u0442, \u0447\u0442\u043e \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u0432 \u0432\u044b\u0431\u0440\u0430\u043d\u043d\u0443\u044e \u043f\u0430\u043f\u043a\u0443, \u0430 \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u0442\u0438\u0445\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u0430\u0432\u0442\u043e\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443. \u041f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430 \u2014 \u0441\u044e\u0440\u043f\u0440\u0438\u0437, \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0443\u0436\u0435 \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\ud83d\udd27 \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0443\u0433\u0443\u0431\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u0435\u043c, \u0447\u0442\u043e WinRAR \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0443\u043c\u0435\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438. \u041c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043c\u043e\u0433\u0443\u0442 \u043c\u0435\u0441\u044f\u0446\u0430\u043c\u0438 \u0441\u0438\u0434\u0435\u0442\u044c \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445, \u0434\u0430\u0436\u0435 \u043d\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u044f \u043e\u0431 \u0443\u0433\u0440\u043e\u0437\u0435. \u0415\u0441\u043b\u0438 \u0443 \u0432\u0430\u0441 \u0441\u0442\u043e\u0438\u0442 WinRAR \u0441\u0442\u0430\u0440\u0448\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 7.13 \u2014 \u0441\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0432\u0440\u0443\u0447\u043d\u0443\u044e, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0441\u0442\u0430\u043b\u0438 \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439.\n\n#winrar #cve20258088 #romcom #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #malware #\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:12.462840Z"}, {"uuid": "3051e4eb-3bb4-491a-9246-7f3179c56817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/ZerodayAlert/539", "content": "CVE-2025-8088: WinRAR \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u2014 \u0431\u043e\u043c\u0431\u0430 \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\n\n\ud83c\udfaf \u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0435 WinRAR \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0443\u044e \u0434\u044b\u0440\u0443 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u043e \u0445\u0443\u0434\u0448\u0430\u044f \u043d\u043e\u0432\u043e\u0441\u0442\u044c \u2014 \u0445\u0430\u043a\u0435\u0440\u044b \u0443\u0436\u0435 \u0437\u043d\u0430\u043b\u0438 \u043e \u043d\u0435\u0439 \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-8088 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043a\u043e\u0432\u0430\u0440\u043d\u044b\u0435 \u0430\u0440\u0445\u0438\u0432\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 \u043f\u043e\u0434\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u044e\u0442 \u0444\u0430\u0439\u043b\u044b \u043d\u0435 \u0442\u0443\u0434\u0430, \u043a\u0443\u0434\u0430 \u0432\u044b\u0431\u0440\u0430\u043b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0430 \u0432 \u0430\u0432\u0442\u043e\u0437\u0430\u0433\u0440\u0443\u0437\u043e\u0447\u043d\u044b\u0435 \u043f\u0430\u043f\u043a\u0438 Windows. \u0422\u0430\u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043a\u0430\u0436\u0434\u043e\u043c \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430.\n\n\ud83d\udca3 \u0413\u0440\u0443\u043f\u043f\u0430 RomCom \u0443\u0436\u0435 \u0432\u043e\u0432\u0441\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u044d\u0442\u0443 \u0444\u0438\u0448\u043a\u0443 \u0432 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u0430\u0445 \u2014 \u043f\u0440\u0438\u0441\u044b\u043b\u0430\u044e\u0442 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \"\u0431\u0435\u0437\u043e\u0431\u0438\u0434\u043d\u044b\u043c\u0438\" RAR-\u0430\u0440\u0445\u0438\u0432\u0430\u043c\u0438, \u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u0441\u0438\u0434\u0438\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0434\u0443\u043c\u0430\u0435\u0442, \u0447\u0442\u043e \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u0432 \u0432\u044b\u0431\u0440\u0430\u043d\u043d\u0443\u044e \u043f\u0430\u043f\u043a\u0443, \u0430 \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u0442\u0438\u0445\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u0430\u0432\u0442\u043e\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443. \u041f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430 \u2014 \u0441\u044e\u0440\u043f\u0440\u0438\u0437, \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0443\u0436\u0435 \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\ud83d\udd27 \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0443\u0433\u0443\u0431\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u0435\u043c, \u0447\u0442\u043e WinRAR \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0443\u043c\u0435\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438. \u041c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043c\u043e\u0433\u0443\u0442 \u043c\u0435\u0441\u044f\u0446\u0430\u043c\u0438 \u0441\u0438\u0434\u0435\u0442\u044c \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445, \u0434\u0430\u0436\u0435 \u043d\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u044f \u043e\u0431 \u0443\u0433\u0440\u043e\u0437\u0435. \u0415\u0441\u043b\u0438 \u0443 \u0432\u0430\u0441 \u0441\u0442\u043e\u0438\u0442 WinRAR \u0441\u0442\u0430\u0440\u0448\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 7.13 \u2014 \u0441\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0432\u0440\u0443\u0447\u043d\u0443\u044e, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0441\u0442\u0430\u043b\u0438 \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439.\n\n#winrar #cve20258088 #romcom #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #malware #\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:31.250406Z"}, {"uuid": "51fa58b7-b28f-46d3-98e8-f7b12f7c710e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/Positive_Technologies/3851", "content": "\u0413\u0440\u0443\u043f\u043f\u0430 \u043a\u0438\u0431\u0435\u0440\u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 PT ESC \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0431\u0437\u043e\u0440 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a \u0437\u0430 III \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2025 \u0433\u043e\u0434\u0430 \u270d\ufe0f\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u044b \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0438 \u0442\u0438\u043f\u043e\u0432\u044b\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043e\u043a \u2014 \u043e\u0442 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043e \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f.\n\n\ud83d\ude45\u200d\u2642\ufe0f \u0417\u0430 \u043f\u0435\u0440\u0438\u043e\u0434 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0438\u0445 \u0433\u0440\u0443\u043f\u043f, \u043a\u0430\u043a PseudoGamaredon, TA Tolik, XDSpy, PhantomCore, Rare Werewolf, Goffee, IAmTheKing, Telemancon, DarkWatchman \u0438 Black Owl.\n\n\u2709\ufe0f \u0424\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0448\u043b\u0438 \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e \u0438 \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0434 \u0434\u0435\u043b\u043e\u0432\u0443\u044e \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c:\n\n\u2022 \u0417\u0430\u043f\u0430\u0440\u043e\u043b\u0435\u043d\u043d\u044b\u0435 \u0430\u0440\u0445\u0438\u0432\u044b \u0441 LNK-, SCR-, COM-\u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430\u043c\u0438 \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438-\u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0430\u043c\u0438; fake-CAPTCHA c \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u043c PowerShell.\n\n\u2022 RMM \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f (UltraVNC, AnyDesk), REST-C2 \u0438 \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u044b\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0438. \n\n\u2022 \u0420\u0435\u0434\u0438\u0440\u0435\u043a\u0442-\u043b\u043e\u0433\u0438\u043a\u0430: \u043f\u0440\u043e\u0448\u0435\u043b \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u2014 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430; \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u043b \u2014 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u0435\u0440\u0435\u0430\u0434\u0440\u0435\u0441\u0430\u0446\u0438\u044f \u043d\u0430 \u0437\u0430\u0433\u043b\u0443\u0448\u043a\u0443 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430.\n\n\u2022 Zero-day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2025-8088 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 Goffee.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u043e\u0442\u0447\u0435\u0442 \u2014 \u043d\u0430 \u043d\u0430\u0448\u0435\u043c \u0441\u0430\u0439\u0442\u0435.\n\n#TI #APT #Malware #Phishing\n@ptescalator", "creation_timestamp": "2026-07-26T02:03:00.965566Z"}, {"uuid": "e8dd622d-ac94-410c-9cde-6a6cf8c31dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/Positive_Technologies/3779", "content": "\ud83c\udfb1 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Positive Technologies \u043e\u0442\u043d\u0435\u0441\u043b\u0438 \u043a \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u043c \u0435\u0449\u0435 \u0432\u043e\u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0430\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 WinRAR \u0438 7-Zip, \u0441\u0435\u0440\u0432\u0438\u0441\u0435 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439 TrueConf Server \u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 SAP NetWeaver. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u044f \u043a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043c\u0435\u0440.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 MaxPatrol VM \u0443\u0436\u0435 \u0432 \u043a\u0443\u0440\u0441\u0435 \u044d\u0442\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432: \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u0435\u0442 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 12 \u0447\u0430\u0441\u043e\u0432 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0438\u0445 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\ud83d\uddc4 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 WinRAR\nPT-2025-26225 (CVE-2025-6218, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 7,8) \u0438 PT-2025-32352 (CVE-2025-8088, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 8,8)\n\n\u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Windows \u0441 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 WinRAR \u0434\u043e 7.13. \u0427\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 WinRAR (\u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0431\u043e\u043b\u0435\u0435 500 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0440\u0430\u0437 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443) \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043f\u0443\u0442\u0435\u0439 \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0432\u043d\u0443\u0442\u0440\u0438 \u0430\u0440\u0445\u0438\u0432\u043e\u0432 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u0440\u0438 \u0440\u0430\u0437\u0430\u0440\u0445\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0438\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0439 \u043f\u0430\u043f\u043a\u0438. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043f\u0430\u043f\u043a\u0443 \u0430\u0432\u0442\u043e\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Windows. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u043f\u043e\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0439 \u0432 \u043d\u0435\u0435, \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u0441\u044f \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0432\u0445\u043e\u0434\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0432\u0448\u0438\u0441\u044c \u0441 \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0445\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 c\u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0432 \u0441\u0435\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0432\u043d\u0443\u0442\u0440\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\ud83d\udcc1 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0435 7-Zip\nPT-2025-32410 (CVE-2025-55188, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 3,6)\n\n\u0412 \u043c\u0438\u0440\u0435 \u0441\u043a\u0430\u0447\u0430\u043d\u043e \u043e\u043a\u043e\u043b\u043e 430 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043a\u043e\u043f\u0438\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b. \u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0432\u0435\u0440\u0441\u0438\u0438 7-Zip \u0434\u043e 25.01 (\u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0434\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u043f\u0440\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 \u0430\u0440\u0445\u0438\u0432\u043e\u0432 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u041e\u0421 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 Linux, \u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 Windows.\n\n\ud83d\udcbb \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 Visual Composer, SAP NetWeaver\nPT-2025-20812 (CVE-2025-42999, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 9,1) \u0438 PT-2025-17845 (CVE-2025-31324, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 10,0)\n\nVisual Composer \u0432 SAP NetWeaver \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0431\u0435\u0437 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0430\u043c \u00ab\u04221 \u0418\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438\u00bb, \u043e\u043a\u043e\u043b\u043e 2000 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b SAP.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-42999 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-31324 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Onapsis, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u044b, \u043d\u043e \u0438 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0427\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\ud83c\udfa6 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439 TrueConf Server\nPT-2025-36231 (BDU:2025-10114, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 7,5), PT-2025-36232 (BDU:2025-10115, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 7,5), PT-2025-36233 (BDU:2025-10116, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 9,8)\n\n\u0412\u0441\u0435 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u044d\u043a\u0441\u043f\u0435\u0440\u0442 PT SWARM \u041d\u0438\u043a\u0438\u0442\u0430 \u041f\u0435\u0442\u0440\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043e \u043d\u0438\u0445 \u043c\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u0440\u0430\u043d\u0435\u0435 \u0432 \u043d\u0430\u0448\u0435\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udcd6 \u0414\u0435\u0442\u0430\u043b\u044c\u043d\u0435\u0435 \u043e \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442\u0435.\n\n\u0423\u0437\u043d\u0430\u0432\u0430\u0442\u044c \u043e\u0431 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u043d\u0430 \u043d\u0430\u0448\u0435\u0439 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043d\u0430 \u043f\u043e\u0440\u0442\u0430\u043b\u0435 dbugs.\n\n#\u0432\u0442\u0440\u0435\u043d\u0434\u0435VM\n@Positive_Technologies", "creation_timestamp": "2026-07-26T02:03:02.109160Z"}, {"uuid": "d64cd2ac-d30a-49ff-9520-342f540ea98c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/Positive_Technologies/3851", "content": "\u0413\u0440\u0443\u043f\u043f\u0430 \u043a\u0438\u0431\u0435\u0440\u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 PT ESC \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0431\u0437\u043e\u0440 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a \u0437\u0430 III \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2025 \u0433\u043e\u0434\u0430 \u270d\ufe0f\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u044b \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0438 \u0442\u0438\u043f\u043e\u0432\u044b\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043e\u043a \u2014 \u043e\u0442 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043e \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f.\n\n\ud83d\ude45\u200d\u2642\ufe0f \u0417\u0430 \u043f\u0435\u0440\u0438\u043e\u0434 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0438\u0445 \u0433\u0440\u0443\u043f\u043f, \u043a\u0430\u043a PseudoGamaredon, TA Tolik, XDSpy, PhantomCore, Rare Werewolf, Goffee, IAmTheKing, Telemancon, DarkWatchman \u0438 Black Owl.\n\n\u2709\ufe0f \u0424\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0448\u043b\u0438 \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e \u0438 \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0434 \u0434\u0435\u043b\u043e\u0432\u0443\u044e \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c:\n\n\u2022 \u0417\u0430\u043f\u0430\u0440\u043e\u043b\u0435\u043d\u043d\u044b\u0435 \u0430\u0440\u0445\u0438\u0432\u044b \u0441 LNK-, SCR-, COM-\u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430\u043c\u0438 \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438-\u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0430\u043c\u0438; fake-CAPTCHA c \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u043c PowerShell.\n\n\u2022 RMM \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f (UltraVNC, AnyDesk), REST-C2 \u0438 \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u044b\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0438. \n\n\u2022 \u0420\u0435\u0434\u0438\u0440\u0435\u043a\u0442-\u043b\u043e\u0433\u0438\u043a\u0430: \u043f\u0440\u043e\u0448\u0435\u043b \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u2014 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430; \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u043b \u2014 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u0435\u0440\u0435\u0430\u0434\u0440\u0435\u0441\u0430\u0446\u0438\u044f \u043d\u0430 \u0437\u0430\u0433\u043b\u0443\u0448\u043a\u0443 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430.\n\n\u2022 Zero-day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2025-8088 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 Goffee.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u043e\u0442\u0447\u0435\u0442 \u2014 \u043d\u0430 \u043d\u0430\u0448\u0435\u043c \u0441\u0430\u0439\u0442\u0435.\n\n#TI #APT #Malware #Phishing\n@ptescalator", "creation_timestamp": "2026-07-27T00:01:24.526475Z"}, {"uuid": "355793c1-c70b-454e-8d6f-399b17e646c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/Positive_Technologies/3779", "content": "\ud83c\udfb1 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Positive Technologies \u043e\u0442\u043d\u0435\u0441\u043b\u0438 \u043a \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u043c \u0435\u0449\u0435 \u0432\u043e\u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0430\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 WinRAR \u0438 7-Zip, \u0441\u0435\u0440\u0432\u0438\u0441\u0435 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439 TrueConf Server \u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 SAP NetWeaver. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u044f \u043a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043c\u0435\u0440.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 MaxPatrol VM \u0443\u0436\u0435 \u0432 \u043a\u0443\u0440\u0441\u0435 \u044d\u0442\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432: \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u0435\u0442 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 12 \u0447\u0430\u0441\u043e\u0432 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0438\u0445 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\ud83d\uddc4 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 WinRAR\nPT-2025-26225 (CVE-2025-6218, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 7,8) \u0438 PT-2025-32352 (CVE-2025-8088, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 8,8)\n\n\u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Windows \u0441 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 WinRAR \u0434\u043e 7.13. \u0427\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 WinRAR (\u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0431\u043e\u043b\u0435\u0435 500 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0440\u0430\u0437 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443) \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043f\u0443\u0442\u0435\u0439 \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0432\u043d\u0443\u0442\u0440\u0438 \u0430\u0440\u0445\u0438\u0432\u043e\u0432 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u0440\u0438 \u0440\u0430\u0437\u0430\u0440\u0445\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0438\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0439 \u043f\u0430\u043f\u043a\u0438. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043f\u0430\u043f\u043a\u0443 \u0430\u0432\u0442\u043e\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Windows. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u043f\u043e\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0439 \u0432 \u043d\u0435\u0435, \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u0441\u044f \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0432\u0445\u043e\u0434\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0432\u0448\u0438\u0441\u044c \u0441 \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0445\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 c\u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0432 \u0441\u0435\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0432\u043d\u0443\u0442\u0440\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\ud83d\udcc1 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0435 7-Zip\nPT-2025-32410 (CVE-2025-55188, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 3,6)\n\n\u0412 \u043c\u0438\u0440\u0435 \u0441\u043a\u0430\u0447\u0430\u043d\u043e \u043e\u043a\u043e\u043b\u043e 430 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043a\u043e\u043f\u0438\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b. \u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0432\u0435\u0440\u0441\u0438\u0438 7-Zip \u0434\u043e 25.01 (\u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0434\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u043f\u0440\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 \u0430\u0440\u0445\u0438\u0432\u043e\u0432 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u041e\u0421 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 Linux, \u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 Windows.\n\n\ud83d\udcbb \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 Visual Composer, SAP NetWeaver\nPT-2025-20812 (CVE-2025-42999, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 9,1) \u0438 PT-2025-17845 (CVE-2025-31324, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 10,0)\n\nVisual Composer \u0432 SAP NetWeaver \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0431\u0435\u0437 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0430\u043c \u00ab\u04221 \u0418\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438\u00bb, \u043e\u043a\u043e\u043b\u043e 2000 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b SAP.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-42999 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-31324 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Onapsis, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u044b, \u043d\u043e \u0438 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0427\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\ud83c\udfa6 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439 TrueConf Server\nPT-2025-36231 (BDU:2025-10114, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 7,5), PT-2025-36232 (BDU:2025-10115, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 7,5), PT-2025-36233 (BDU:2025-10116, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 9,8)\n\n\u0412\u0441\u0435 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u044d\u043a\u0441\u043f\u0435\u0440\u0442 PT SWARM \u041d\u0438\u043a\u0438\u0442\u0430 \u041f\u0435\u0442\u0440\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043e \u043d\u0438\u0445 \u043c\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u0440\u0430\u043d\u0435\u0435 \u0432 \u043d\u0430\u0448\u0435\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udcd6 \u0414\u0435\u0442\u0430\u043b\u044c\u043d\u0435\u0435 \u043e \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442\u0435.\n\n\u0423\u0437\u043d\u0430\u0432\u0430\u0442\u044c \u043e\u0431 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u043d\u0430 \u043d\u0430\u0448\u0435\u0439 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043d\u0430 \u043f\u043e\u0440\u0442\u0430\u043b\u0435 dbugs.\n\n#\u0432\u0442\u0440\u0435\u043d\u0434\u0435VM\n@Positive_Technologies", "creation_timestamp": "2026-07-27T00:01:24.602749Z"}, {"uuid": "e528e72e-b85b-4259-b8c7-beb250688212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/Positive_Technologies/3851", "content": "\u0413\u0440\u0443\u043f\u043f\u0430 \u043a\u0438\u0431\u0435\u0440\u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 PT ESC \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0431\u0437\u043e\u0440 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a \u0437\u0430 III \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2025 \u0433\u043e\u0434\u0430 \u270d\ufe0f\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u044b \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0438 \u0442\u0438\u043f\u043e\u0432\u044b\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043e\u043a \u2014 \u043e\u0442 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043e \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f.\n\n\ud83d\ude45\u200d\u2642\ufe0f \u0417\u0430 \u043f\u0435\u0440\u0438\u043e\u0434 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0438\u0445 \u0433\u0440\u0443\u043f\u043f, \u043a\u0430\u043a PseudoGamaredon, TA Tolik, XDSpy, PhantomCore, Rare Werewolf, Goffee, IAmTheKing, Telemancon, DarkWatchman \u0438 Black Owl.\n\n\u2709\ufe0f \u0424\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0448\u043b\u0438 \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e \u0438 \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0434 \u0434\u0435\u043b\u043e\u0432\u0443\u044e \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c:\n\n\u2022 \u0417\u0430\u043f\u0430\u0440\u043e\u043b\u0435\u043d\u043d\u044b\u0435 \u0430\u0440\u0445\u0438\u0432\u044b \u0441 LNK-, SCR-, COM-\u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430\u043c\u0438 \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438-\u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0430\u043c\u0438; fake-CAPTCHA c \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u043c PowerShell.\n\n\u2022 RMM \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f (UltraVNC, AnyDesk), REST-C2 \u0438 \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u044b\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0438. \n\n\u2022 \u0420\u0435\u0434\u0438\u0440\u0435\u043a\u0442-\u043b\u043e\u0433\u0438\u043a\u0430: \u043f\u0440\u043e\u0448\u0435\u043b \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u2014 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430; \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u043b \u2014 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u0435\u0440\u0435\u0430\u0434\u0440\u0435\u0441\u0430\u0446\u0438\u044f \u043d\u0430 \u0437\u0430\u0433\u043b\u0443\u0448\u043a\u0443 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430.\n\n\u2022 Zero-day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2025-8088 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 Goffee.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u043e\u0442\u0447\u0435\u0442 \u2014 \u043d\u0430 \u043d\u0430\u0448\u0435\u043c \u0441\u0430\u0439\u0442\u0435.\n\n#TI #APT #Malware #Phishing\n@ptescalator", "creation_timestamp": "2026-07-28T16:00:09.825141Z"}, {"uuid": "25c1081c-34a7-4d33-bc86-2844af6ee4dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/Positive_Technologies/3779", "content": "\ud83c\udfb1 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Positive Technologies \u043e\u0442\u043d\u0435\u0441\u043b\u0438 \u043a \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u043c \u0435\u0449\u0435 \u0432\u043e\u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0430\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 WinRAR \u0438 7-Zip, \u0441\u0435\u0440\u0432\u0438\u0441\u0435 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439 TrueConf Server \u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 SAP NetWeaver. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u044f \u043a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043c\u0435\u0440.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 MaxPatrol VM \u0443\u0436\u0435 \u0432 \u043a\u0443\u0440\u0441\u0435 \u044d\u0442\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432: \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u0435\u0442 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 12 \u0447\u0430\u0441\u043e\u0432 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0438\u0445 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\ud83d\uddc4 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 WinRAR\nPT-2025-26225 (CVE-2025-6218, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 7,8) \u0438 PT-2025-32352 (CVE-2025-8088, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 8,8)\n\n\u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Windows \u0441 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 WinRAR \u0434\u043e 7.13. \u0427\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 WinRAR (\u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0431\u043e\u043b\u0435\u0435 500 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0440\u0430\u0437 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443) \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043f\u0443\u0442\u0435\u0439 \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0432\u043d\u0443\u0442\u0440\u0438 \u0430\u0440\u0445\u0438\u0432\u043e\u0432 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u0440\u0438 \u0440\u0430\u0437\u0430\u0440\u0445\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0438\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0439 \u043f\u0430\u043f\u043a\u0438. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043f\u0430\u043f\u043a\u0443 \u0430\u0432\u0442\u043e\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Windows. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u043f\u043e\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0439 \u0432 \u043d\u0435\u0435, \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u0441\u044f \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0432\u0445\u043e\u0434\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0432\u0448\u0438\u0441\u044c \u0441 \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0445\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 c\u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0432 \u0441\u0435\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0432\u043d\u0443\u0442\u0440\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\ud83d\udcc1 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0435 7-Zip\nPT-2025-32410 (CVE-2025-55188, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 3,6)\n\n\u0412 \u043c\u0438\u0440\u0435 \u0441\u043a\u0430\u0447\u0430\u043d\u043e \u043e\u043a\u043e\u043b\u043e 430 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043a\u043e\u043f\u0438\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b. \u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0432\u0435\u0440\u0441\u0438\u0438 7-Zip \u0434\u043e 25.01 (\u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0434\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u043f\u0440\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 \u0430\u0440\u0445\u0438\u0432\u043e\u0432 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u041e\u0421 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 Linux, \u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 Windows.\n\n\ud83d\udcbb \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 Visual Composer, SAP NetWeaver\nPT-2025-20812 (CVE-2025-42999, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 9,1) \u0438 PT-2025-17845 (CVE-2025-31324, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 10,0)\n\nVisual Composer \u0432 SAP NetWeaver \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0431\u0435\u0437 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0430\u043c \u00ab\u04221 \u0418\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438\u00bb, \u043e\u043a\u043e\u043b\u043e 2000 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b SAP.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-42999 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-31324 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Onapsis, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u044b, \u043d\u043e \u0438 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0427\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\ud83c\udfa6 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439 TrueConf Server\nPT-2025-36231 (BDU:2025-10114, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 7,5), PT-2025-36232 (BDU:2025-10115, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 7,5), PT-2025-36233 (BDU:2025-10116, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 9,8)\n\n\u0412\u0441\u0435 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u044d\u043a\u0441\u043f\u0435\u0440\u0442 PT SWARM \u041d\u0438\u043a\u0438\u0442\u0430 \u041f\u0435\u0442\u0440\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043e \u043d\u0438\u0445 \u043c\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u0440\u0430\u043d\u0435\u0435 \u0432 \u043d\u0430\u0448\u0435\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udcd6 \u0414\u0435\u0442\u0430\u043b\u044c\u043d\u0435\u0435 \u043e \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442\u0435.\n\n\u0423\u0437\u043d\u0430\u0432\u0430\u0442\u044c \u043e\u0431 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u043d\u0430 \u043d\u0430\u0448\u0435\u0439 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043d\u0430 \u043f\u043e\u0440\u0442\u0430\u043b\u0435 dbugs.\n\n#\u0432\u0442\u0440\u0435\u043d\u0434\u0435VM\n@Positive_Technologies", "creation_timestamp": "2026-07-28T16:00:09.940527Z"}, {"uuid": "ce271353-b70c-4c8a-ad10-a5b6370c1de9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/cve0day/312", "content": "CVE-2025-8088\n\nA path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by\u00a0Anton Cherepanov, Peter Ko\u0161in\u00e1r, and Peter Str\u00fd\u010dek\n     from ESET.\n\nGitHub Link:\nhttps://github.com/lennertdefauw/CVE-2025-8088", "creation_timestamp": "2026-08-29T00:00:30.723431Z"}, {"uuid": "b70f72de-0549-4755-9b80-89a562cb176a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/Positive_Technologies/3851", "content": "\u0413\u0440\u0443\u043f\u043f\u0430 \u043a\u0438\u0431\u0435\u0440\u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 PT ESC \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0431\u0437\u043e\u0440 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a \u0437\u0430 III \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2025 \u0433\u043e\u0434\u0430 \u270d\ufe0f\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u044b \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0438 \u0442\u0438\u043f\u043e\u0432\u044b\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043e\u043a \u2014 \u043e\u0442 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043e \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f.\n\n\ud83d\ude45\u200d\u2642\ufe0f \u0417\u0430 \u043f\u0435\u0440\u0438\u043e\u0434 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0438\u0445 \u0433\u0440\u0443\u043f\u043f, \u043a\u0430\u043a PseudoGamaredon, TA Tolik, XDSpy, PhantomCore, Rare Werewolf, Goffee, IAmTheKing, Telemancon, DarkWatchman \u0438 Black Owl.\n\n\u2709\ufe0f \u0424\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0448\u043b\u0438 \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e \u0438 \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0434 \u0434\u0435\u043b\u043e\u0432\u0443\u044e \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c:\n\n\u2022 \u0417\u0430\u043f\u0430\u0440\u043e\u043b\u0435\u043d\u043d\u044b\u0435 \u0430\u0440\u0445\u0438\u0432\u044b \u0441 LNK-, SCR-, COM-\u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430\u043c\u0438 \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438-\u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0430\u043c\u0438; fake-CAPTCHA c \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u043c PowerShell.\n\n\u2022 RMM \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f (UltraVNC, AnyDesk), REST-C2 \u0438 \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u044b\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0438. \n\n\u2022 \u0420\u0435\u0434\u0438\u0440\u0435\u043a\u0442-\u043b\u043e\u0433\u0438\u043a\u0430: \u043f\u0440\u043e\u0448\u0435\u043b \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u2014 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430; \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u043b \u2014 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u0435\u0440\u0435\u0430\u0434\u0440\u0435\u0441\u0430\u0446\u0438\u044f \u043d\u0430 \u0437\u0430\u0433\u043b\u0443\u0448\u043a\u0443 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430.\n\n\u2022 Zero-day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2025-8088 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 Goffee.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u043e\u0442\u0447\u0435\u0442 \u2014 \u043d\u0430 \u043d\u0430\u0448\u0435\u043c \u0441\u0430\u0439\u0442\u0435.\n\n#TI #APT #Malware #Phishing\n@ptescalator", "creation_timestamp": "2026-07-29T00:00:32.994182Z"}, {"uuid": "92ffaa67-6e03-42b7-b959-9044f325bf23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/Positive_Technologies/3779", "content": "\ud83c\udfb1 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Positive Technologies \u043e\u0442\u043d\u0435\u0441\u043b\u0438 \u043a \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u043c \u0435\u0449\u0435 \u0432\u043e\u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0430\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 WinRAR \u0438 7-Zip, \u0441\u0435\u0440\u0432\u0438\u0441\u0435 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439 TrueConf Server \u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 SAP NetWeaver. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u044f \u043a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043c\u0435\u0440.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 MaxPatrol VM \u0443\u0436\u0435 \u0432 \u043a\u0443\u0440\u0441\u0435 \u044d\u0442\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432: \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u0435\u0442 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 12 \u0447\u0430\u0441\u043e\u0432 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0438\u0445 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\ud83d\uddc4 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 WinRAR\nPT-2025-26225 (CVE-2025-6218, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 7,8) \u0438 PT-2025-32352 (CVE-2025-8088, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 8,8)\n\n\u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Windows \u0441 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 WinRAR \u0434\u043e 7.13. \u0427\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 WinRAR (\u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0431\u043e\u043b\u0435\u0435 500 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0440\u0430\u0437 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443) \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043f\u0443\u0442\u0435\u0439 \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0432\u043d\u0443\u0442\u0440\u0438 \u0430\u0440\u0445\u0438\u0432\u043e\u0432 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u0440\u0438 \u0440\u0430\u0437\u0430\u0440\u0445\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0438\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0439 \u043f\u0430\u043f\u043a\u0438. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043f\u0430\u043f\u043a\u0443 \u0430\u0432\u0442\u043e\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Windows. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u043f\u043e\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0439 \u0432 \u043d\u0435\u0435, \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u0441\u044f \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0432\u0445\u043e\u0434\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0432\u0448\u0438\u0441\u044c \u0441 \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0445\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 c\u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0432 \u0441\u0435\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0432\u043d\u0443\u0442\u0440\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\ud83d\udcc1 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0435 7-Zip\nPT-2025-32410 (CVE-2025-55188, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 3,6)\n\n\u0412 \u043c\u0438\u0440\u0435 \u0441\u043a\u0430\u0447\u0430\u043d\u043e \u043e\u043a\u043e\u043b\u043e 430 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043a\u043e\u043f\u0438\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b. \u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0432\u0435\u0440\u0441\u0438\u0438 7-Zip \u0434\u043e 25.01 (\u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0434\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u043f\u0440\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 \u0430\u0440\u0445\u0438\u0432\u043e\u0432 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u041e\u0421 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 Linux, \u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 Windows.\n\n\ud83d\udcbb \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 Visual Composer, SAP NetWeaver\nPT-2025-20812 (CVE-2025-42999, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 9,1) \u0438 PT-2025-17845 (CVE-2025-31324, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 10,0)\n\nVisual Composer \u0432 SAP NetWeaver \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0431\u0435\u0437 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0430\u043c \u00ab\u04221 \u0418\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438\u00bb, \u043e\u043a\u043e\u043b\u043e 2000 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b SAP.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-42999 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-31324 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Onapsis, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u044b, \u043d\u043e \u0438 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0427\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\ud83c\udfa6 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439 TrueConf Server\nPT-2025-36231 (BDU:2025-10114, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 7,5), PT-2025-36232 (BDU:2025-10115, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 7,5), PT-2025-36233 (BDU:2025-10116, \u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS \u2014 9,8)\n\n\u0412\u0441\u0435 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u044d\u043a\u0441\u043f\u0435\u0440\u0442 PT SWARM \u041d\u0438\u043a\u0438\u0442\u0430 \u041f\u0435\u0442\u0440\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043e \u043d\u0438\u0445 \u043c\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u0440\u0430\u043d\u0435\u0435 \u0432 \u043d\u0430\u0448\u0435\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udcd6 \u0414\u0435\u0442\u0430\u043b\u044c\u043d\u0435\u0435 \u043e \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442\u0435.\n\n\u0423\u0437\u043d\u0430\u0432\u0430\u0442\u044c \u043e\u0431 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u043d\u0430 \u043d\u0430\u0448\u0435\u0439 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043d\u0430 \u043f\u043e\u0440\u0442\u0430\u043b\u0435 dbugs.\n\n#\u0432\u0442\u0440\u0435\u043d\u0434\u0435VM\n@Positive_Technologies", "creation_timestamp": "2026-07-29T00:00:33.068515Z"}, {"uuid": "3a78c479-f093-4f76-8aa0-e7f950efda10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "Telegram/33wI6hTdRPTMjTktW9SDe_zsSUkms1LkDkg1JmZWoCiszA", "content": "", "creation_timestamp": "2026-08-29T03:00:04.379174Z"}, {"uuid": "081a097a-6333-440f-be4f-2f052f20259c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-66d81917-442e1a3db5444e7f", "content": "Exploits and vulnerabilities in Q2 2026\nThe vulnerability landscape shifted significantly in Q2 2026. First, the number of registered CVEs reached an unprecedented level. This is driven primarily by the widespread adoption of AI, both for application development and search for security flaws. This resulted in entire new classes of vulnerabilities emerging, particularly in the Linux networking subsystem.\nSecond, security researchers have been publishing exploits for unpatched vulnerabilities more frequently. Publications like these can generate significant fallout, since they potentially open the door for attackers to target unprotected systems.\nStatistics on registered vulnerabilities\nThis section provides statistical data on registered vulnerabilities. The data comes from Kaspersky\u2019s vulnerability knowledge base, which draws on the CVE database as well as the Russian BDU database and GitHub Advisory (GHSA). As a result, the figures for previous reporting periods may differ from those published in earlier reports.\nWe examine the number of registered vulnerabilities for each month over the last five years. As the chart below shows, this number continues to surge, a trend reflected across all the databases we track. It\u2019s driven primarily by the widespread adoption of AI tools: as we predicted in our previous report, these tools have played a major role in the discovery of vulnerabilities in third-party software. Meanwhile, these tools often contain security issues of their own. For example, OpenClaw, a popular AI project, ranked 12th among those with the highest number of vulnerabilities discovered and published in Q2, with over 200 CVEs registered during the reporting period. Finally, AI development tools are also contributing to the vulnerability landscape, since the quality of the code they produce can vary widely. Therefore, the rate at which new vulnerabilities are discovered will inevitably keep growing.\nTotal published vulnerabilities per month from 2022 through 2026 (download)\nNext, we analyze the number of new critical vulnerabilities (CVSS > 9.0) over the same period.\nTotal critical vulnerabilities published per month from 2022 through 2026 (download)\nAs the chart shows, the number of published critical vulnerabilities jumped sharply in Q2. This is because using AI for vulnerability research makes it possible to analyze massive amounts of previously unexamined code, uncover new attack surfaces, and identify entire classes of vulnerabilities that have gone unnoticed for decades. In particular, AI was used to find a series of Dirty Frag vulnerabilities in the Linux kernel.\nExploitation statistics\nThis section presents statistics on vulnerability exploitation for Q2 2026. The data draws on open sources and our telemetry.\nWindows and Linux vulnerability exploitation\nQ2 2026 saw a new precedent in the publication of vulnerabilities in Windows components and exploits for these: researchers no longer waiting for CVE registration, let alone patches. A case in point: a researcher who goes by Nightmare Eclipse (also known as Chaotic Eclipse) published a list of new \u201cnamed\u201d vulnerabilities across various Windows subsystems. At the time the technical details were published, none of the vulnerabilities had been assigned a CVE identifier:\n\nBlueHammer: a local privilege escalation vulnerability in Windows Defender. During signature database updates, a time-of-check to time-of-use (TOCTOU) race condition occurs, allowing an attacker to substitute the directory where temporary update files are written. The researcher published a fully functional exploit for the vulnerability.\nRedSun: another logical vulnerability in Windows Defender with a working exploit. Suspicious and malicious files marked as \u201ccloud\u201d can be overwritten or restored to their original directory with elevated privileges. The exploit incorporates fragments of algorithms that make it possible to leverage various logical vulnerabilities in Windows, effectively combining a large number of popular exploitation techniques.\nYellowKey: a vulnerability that lets the user bypass BitLocker full-disk encryption and access system data through the Windows Recovery Environment (WinRE). A fully functional exploit was also published.\nGreenPlasma: a vulnerability that enables system object injection via the CTF loader for the Collaborative Translation Framework (CTFMON) service in Windows. The original publication included an exploit with limited functionality.\nRougePlanet: yet another Windows Defender vulnerability that, like BlueHammer, stems from a TOCTOU issue, this time in the engine responsible for real-time system scanning. The published exploit uses the vulnerability to overwrite the system file wermgr.exe with a malicious one.\nUnDefend: another vulnerability in the Windows Defender service. This time, the exploit causes a denial of service and blocks updates.\nEven though such cases remain isolated for now, we believe they\u2019ll grow into a full-fledged trend. Early publication of exploits gives attackers an advantage over software developers, who are left with no time to fix the issues.\nVeteran vulnerabilities in Windows software also remain relevant. These are the ones our solutions most frequently detect exploits for:\n\nCVE-2018-0802: a remote code execution (RCE) vulnerability in the Equation Editor component\nCVE-2017-11882: another RCE vulnerability also affecting Equation Editor\nCVE-2017-0199: a vulnerability in Microsoft Office and WordPad that allows an attacker to gain control over the system\nCVE-2023-38831: a vulnerability in WinRAR that involves improper handling of objects within an archive\nCVE-2025-6218 (formerly ZDI-CAN-27198): another WinRAR vulnerability allowing the specification of relative paths to extract files into arbitrary directories, potentially leading to malicious command execution\nCVE-2025-8088: a vulnerability similar in exploitation method to CVE-2025-6218. The attackers used NTFS Streams to circumvent controls on the directory into which files are being unpacked\nThe vulnerabilities listed here can be leveraged to gain initial access to a vulnerable system and for privilege escalation. This underscores the critical importance of timely software updates.\nThat said, the number of Windows users who encountered exploits declined slightly in Q2, hitting an 18-month low.\nDynamics of the number of Windows users encountering exploits, Q1 2025 \u2013 Q2 2026. The number of users who encountered exploits in Q1 2025 is taken as 100% (download)\nLinux also hit a rough patch in Q2 2026. Specifically, the period saw the disclosure of the Dirty Frag family of vulnerabilities, which lets an attacker reliably escalate privileges within the operating system.\nAll the vulnerabilities published in Q2 2026 were, in one way or another, related to the Linux caching subsystem. Here are the ones being most actively exploited:\n\nCVE-2026-31431 (Copy Fail): a local privilege escalation vulnerability in the Linux kernel that lets an unprivileged user modify the page cache and gain root privileges. Especially dangerous for cloud and containerized environments\nCVE-2026-43284, CVE-2026-43500 (Dirty Frag): a family of vulnerabilities in the Linux networking subsystem (IPsec ESP and RxRPC) that lets a local user overwrite the page cache and escalate privileges to root\nCVE-2026-46300 (Fragnesia): a local privilege escalation vulnerability in the Linux kernel related to packet fragment handling and the page cache mechanism. It lets an unprivileged user gain root privileges and is also classified as part of the Dirty Frag family\nCVE-2026-31635 (DirtyDecrypt): a Linux kernel vulnerability that lets a local attacker escalate privileges due to improper handling of decryption operations and page cache data modification\nCVE-2026-43494 (PinTheft): a Linux kernel vulnerability that lets a local user gain elevated privileges due to errors in the memory page pinning mechanism\nCVE-2026-46331 (pedit COW): a vulnerability in the Linux kernel\u2019s traffic control subsystem (tc-pedit) that exploits a flaw in copy-on-write to modify the page cache and subsequently escalate privileges to root\nThe vulnerabilities described above were quickly embraced by attackers. At the same time, our solutions continue to detect exploitation attempts targeting older vulnerabilities as well:\n\nCVE-2022-0847: a vulnerability known as Dirty Pipe, which enables privilege escalation and the hijacking of running applications\nCVE-2019-13272: a vulnerability caused by improper handling of privilege inheritance, which can be exploited to achieve privilege escalation\nCVE-2021-22555: a heap out-of-bounds write vulnerability in the Netfilter kernel subsystem\nCVE-2023-32233: another Netfilter subsystem vulnerability that allows for Use-After-Free conditions and privilege escalation through improper processing of network requests\nDynamics of the number of Linux users encountering exploits, Q1 2025 \u2013 Q2 2026. The number of users who encountered exploits in Q1 2025 is taken as 100% (download)\nIn Q2 2026, the number of Linux users who encountered exploits declined slightly compared to Q1. Given that a significant share of new vulnerabilities are tied to the operating system\u2019s caching subsystem, we recommend installing patches as quickly as possible, or disabling vulnerable kernel modules if patching isn\u2019t an option.\nMost common published exploits\nThe distribution of published exploits by software type in Q2 2026 includes categories that haven\u2019t appeared in the sample for a long time. For instance, we\u2019re once again seeing exploits targeting SharePoint. It\u2019s worth noting that while several vulnerability write-ups for Exchange and SharePoint were published during the quarter, most turned out to be fake, AI-generated research. While the articles and exploit source code themselves look fairly polished, they describe nonexistent problems in the software or its components \u2014 often close to genuinely vulnerable mechanisms \u2014 in order to mislead researchers. This type of attack is aimed at increasing the time it takes to detect real vulnerabilities. In some cases, the description of a nonexistent vulnerability came bundled with completely unrelated malware.\nDistribution of published exploits by platform, Q1 2026 (download)\nDistribution of published exploits by platform, Q2 2026 (download)\nVulnerability exploitation in APT attacks\nWe analyzed which vulnerabilities were exploited in APT attacks during Q2 2026. The rankings provided below include data based on our telemetry, research, and open sources.\nTOP 10 vulnerabilities exploited in APT attacks, Q2 2026 (download)\nIn Q2 2026, a trend emerged in APT attacks toward exploiting new vulnerabilities right from the moment they\u2019re published. As before, we\u2019re also seeing a large number of zero-day vulnerabilities. The Langflow vulnerability deserves particular attention: it\u2019s one of the first cases of an APT group exploiting AI technology, which many organizations are only just beginning to integrate. Because most of this tech is proprietary, it has a considerable number of security blind spots. Therefore, given the growing number of AI-based automation tools, we strongly recommend going beyond the usual patching and developing secure procedures for credential use and sensitive data handling in systems that rely on agents and LLMs.\nC2 frameworks\nIn this section, we examine the most popular C2 frameworks used by APT groups and analyze the vulnerabilities targeted by the exploits that interacted with C2 agents in APT attacks.\nThe chart below shows the frequency of known C2 framework usage in attacks during Q2 2026, according to open sources.\nTOP 10 C2 frameworks used by APTs to compromise user systems, Q2 2026 (download)\nSliver, Havoc, AdaptixC2, and Metasploit remain the most widely used C2 frameworks. After studying open sources and analyzing samples of malicious C2 agents that contained exploits, we determined that the following vulnerabilities were utilized in APT attacks involving the C2 frameworks mentioned above:\n\nCVE-2026-35273: a vulnerability in Oracle PeopleSoft PeopleTools that security vendors classify as server-side request forgery (SSRF). The details of the vulnerability have never been disclosed, although some research covers the post-exploitation steps\nCVE-2023-46604: an insecure deserialization vulnerability in Apache ActiveMQ that allows arbitrary code execution in the context of the service process\nCVE-2024-12356 and CVE-2026-1731: command injection vulnerabilities in BeyondTrust software that allow an attacker to send malicious commands even without system authentication\nCVE-2023-36884: a vulnerability in the Windows Search component that allows commands to be run on the system, bypassing the mark-of-the-web (MoTW) mechanism\nCVE-2025-53770: an insecure deserialization vulnerability in Microsoft SharePoint that allows for unauthenticated command execution on the server\nCVE-2025-8088 and CVE-2025-6218: similar directory traversal vulnerabilities in WinRAR that allow files to be extracted from an archive to a predetermined path, potentially without the archiving utility displaying any alerts to the user\nThese vulnerabilities show that attackers used them for initial access and privilege escalation on vulnerable systems, setting the stage for launching a C2 agent. They include both zero-day vulnerabilities and fairly well-known security issues.\nLLM/AI tool vulnerabilities\nThis section analyzes data published in Kaspersky\u2019s vulnerability knowledge base. We reviewed the Q2 2026 version of the knowledge base.\nAs mentioned above, AI tools, plugins, and technologies have proven fairly effective at automating the search for problematic code and anomalous behavior. The high speed at which new vulnerabilities are being discovered has naturally created a need to fix them just as quickly. AI is often used for this too, which increases the volume of code being generated. However, neither code written without human involvement nor AI-generated advice is always correct.\nThe chart below covers registered vulnerabilities in AI tools for 2025\u20132026.\nNumber of published vulnerabilities in LLMs, AI tools, and plugins with similar functionality, 2025\u20132026 (download)\nAs the charts show, AI tools are racking up a substantial number of registered vulnerabilities, and that number keeps growing quarter over quarter. It\u2019s also worth looking at how AI tool vulnerabilities break down by type, according to the CWE system:\nTOP 6 vulnerability types in products that implement or use AI/LLM logic, 2025\u20132026\nInterestingly, vulnerabilities of an undetermined type have ranked first in every quarter since the start of 2025. Traditionally-made software has the same issue, and it doesn\u2019t look like the growing number of AI tools will fix it. It\u2019s also notable that the list includes classes CWE developers themselves don\u2019t recommend using for vulnerability classification, since they lump together a whole range of more specific types. CWE-284 is an example of this.\nLooking at the most common classes, the key issues found in AI-related software can be summed up as follows:\n\nInadequate access control over critical system objects\nImproper implementation of authentication and authorization mechanisms\nInjections\nIt\u2019s worth noting that injection-related vulnerabilities were relatively rare before AI agents took off (previously, they mostly affected web apps). Recently, though, these security issues have become relevant again.\nLooking back at a year and a half of the AI boom, one conclusion stands out regarding registered vulnerabilities: AI tool developers are more focused on expanding functionality than on security. This is worth keeping in mind when using these tools. Let\u2019s look at the projects and applications that either integrated AI tools or offered them as the core product. Below is a list of the those with the highest number of registered vulnerabilities for 2025\u20132026.\nTOP AI/LLM-related projects by number of published vulnerabilities, 2025\u20132026 (download)\nNotable vulnerabilities\nThis section highlights the most significant vulnerabilities published in Q2 2026 that have publicly available descriptions. Since the above already covers several significant vulnerabilities published during the reporting period, this section consists mainly of LLM/AI tool vulnerabilities.\nCVE-2026-25253: a gatewayUrl vulnerability in OpenClaw\nThe issue stems from the fact that the OpenClaw user interface trusts the value of the gatewayUrl parameter passed in the URL and automatically establishes a WebSocket connection to the specified address. During this connection process, it sends an authentication token without any additional user confirmation.\nThe attack algorithm exploiting this vulnerability works as follows:\n\nThe application obtains a critical connection address from an external source (the gatewayUrl URL parameter), which is controlled by the attacker.\nThere is no validation before use.\nThe client automatically initiates a connection to the address specified in the parameter, which belongs to the attacker.\nWhile connected, the application sends credentials (an access token) to the specified address.\nIf the attacker obtains a valid token, the consequences depend on that token\u2019s level of access within the system. In general, this could lead to:\n\nUser session compromise\nExecution of operations on the user\u2019s behalf\nModification of the AI agent configuration\nUnauthorized access to tools and resources connected to the agent\nUnder certain OpenClaw configurations, further compromise of the host running the agent\nIt\u2019s worth noting that the risk of exploitation arises from a combination of several factors: the automatic connection and token transmission, the lack of address trust verification, and the high privileges granted to the local AI agent.\nCVE-2026-41948: a path traversal vulnerability in the Dify AI platform\nThe vulnerability lets an authenticated user craft a request that enables the application to escape its permitted tenant and gain access to internal REST APIs that weren\u2019t meant for that user. The root cause is insufficient normalization and validation of the URL path before it\u2019s passed to the internal service.\nDepending on the Dify configuration, the consequences can include:\n\nUnauthorized access to internal service interfaces\nBreach of isolation between workspaces\nExposure of internal service information\nConditions favorable to further attacks when combined with other vulnerabilities\nThe use of Dify in enterprise AI platforms is particularly risky, since internal services there tend to hold elevated privileges.\nCVE-2026-45386: an improper access control vulnerability in Open WebUI\nIn Open WebUI, pin/unpin operations on messages are write operations, since they modify that message\u2019s metadata (is_pinned, pinned_by, pinned_at). In vulnerable versions, however, before performing these actions, the API only checked for read access to the channel (a chat between a user or group and the AI) containing the message, not permission to modify its content. As a result, a user with a role limited to viewing messages could still change a message\u2019s pinned status.\nThe vulnerability\u2019s mechanism works as follows:\n\nThe user initiates an action that changes the state of an object.\nThe application treats this action as a regular read request.\nOnly channel view permission is checked.\nThe application performs a write without verifying the required user authorization.\nThis violates one of the fundamental principles of access control models \u2014 namely, that any operation that changes the state of data must be checked for the appropriate write or moderation permissions, regardless of whether the object itself is readable.\nAlthough the vulnerability doesn\u2019t lead to arbitrary code execution or compromise of sensitive data, it can affect data integrity and collaborative workflows. Potential consequences of exploitation include unauthorized pinning or unpinning of messages, disruption of channel moderators\u2019 and administrators\u2019 activities, changes to the display order of important information, and even the potential spread of false or misleading information by altering the channel containing a pinned message.\nOpen WebUI is widely used as an interface for interacting with local and enterprise LLMs. In these systems, pinned messages often contain important instructions, announcements, or tips for users. The ability to modify them with minimal privileges can disrupt collaborative workflows, cause confusion, and undermine trust in information published by administrators and moderators.\nCVE-2026-45501: a vulnerability in Microsoft Exchange\nThe vulnerability stems from improper neutralization of user input when generating Exchange web pages. As a result, the browser may interpret specially crafted data as active content instead of plain text.\nAlthough Microsoft categorizes the potential impact of exploiting this vulnerability as spoofing, flaws like this can lead to alteration of displayed content, imitation of trusted interfaces, actions on behalf of the user within an active session, and abuse of user trust.\nIt\u2019s worth noting that issues like this are still relevant in modern software, given that mechanisms like Content Security Policy and various parsers were specifically created to help developers neutralize dangerous parts of user page content.\nConclusion and advice\nQ2 brought the first significant results of AI automation adoption in software development and vulnerability hunting tools. This research shows that beyond traditional patch management, organizations now need real-time monitoring of systems and access controls, since infrastructure and everyday applications now contain far more AI functionality that could lead to compromise.\nAccordingly, besides quickly detecting infrastructure vulnerabilities and managing security patches, modern enterprise-grade security solutions need to provide a broad range of preventive measures for tracking the overall health of systems and workstations. Kaspersky Next meets these requirements by combining proactive mechanisms with the ability to respond promptly to emerging threats. \nsecurelist.com/vulnerabilities\u2026", "creation_timestamp": "2026-08-26T10:30:35.734335Z"}, {"uuid": "c3f36952-335a-46cc-8555-928029da9e3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "Telegram/33wI6hTdRPTMjTktW9SDe_zsSUkms1LkDkg1JmZWoCiszA", "content": "", "creation_timestamp": "2026-08-30T00:00:55.664104Z"}, {"uuid": "b6674985-7c09-47cc-9039-34fde0c0384c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/CyberDispatch/711", "content": "Amaranth-Dragon targeted Southeast Asian government and law enforcement networks in 2025, with links to the APT41 ecosystem.\n\nCampaigns leveraged political lures and the WinRAR CVE-2025-8088 RCE flaw, using cloud delivery and geo-fenced infrastructure for stealth.", "creation_timestamp": "2026-08-31T00:00:12.966320Z"}, {"uuid": "b883ddb8-51b6-4cf8-b6ae-5414c2cef4b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/CyberDispatch/662", "content": "China-linked Amaranth-Dragon targeted Southeast Asian government and law enforcement networks in 2025, with links to the APT41 ecosystem.\n\nCampaigns leveraged political lures and the WinRAR CVE-2025-8088 RCE flaw, using cloud delivery and geo-fenced infrastructure for stealth.", "creation_timestamp": "2026-08-31T00:00:12.462257Z"}, {"uuid": "faa2a4c1-9d90-4cca-b03a-926b92b53893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/S_E_Reborn/6571", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u043b\u0430\u043d\u0434\u0448\u0430\u0444\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u0437\u0430 \u0432\u0442\u043e\u0440\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2026 \u0433\u043e\u0434\u0430.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c \u043a\u043e\u043d\u0441\u0442\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f. \u0412\u043e-\u043f\u0435\u0440\u0432\u044b\u0445, \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 CVE \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u043e \u0431\u0435\u0441\u043f\u0440\u0435\u0446\u0435\u0434\u0435\u043d\u0442\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u043e \u0447\u0430\u0441\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u042d\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u043f\u043e\u0432\u0441\u0435\u043c\u0435\u0441\u0442\u043d\u044b\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u0418\u0418 \u043a\u0430\u043a \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0442\u0430\u043a \u0438 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435, \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u0446\u0435\u043b\u044b\u0435 \u043a\u043b\u0430\u0441\u0441\u044b \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Linux.\n\n\u0412\u043e-\u0432\u0442\u043e\u0440\u044b\u0445, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u0430\u043b\u0438 \u0447\u0430\u0449\u0435 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u043a \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u044b\u0439 \u043f\u0440\u0435\u0446\u0435\u0434\u0435\u043d\u0442 \u0432 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 Windows \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043a \u043d\u0438\u043c: \u043d\u0435 \u0434\u043e\u0436\u0438\u0434\u0430\u0442\u044c\u0441\u044f, \u043f\u043e\u043a\u0430 \u0438\u0445 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0442, \u043d\u0435 \u0433\u043e\u0432\u043e\u0440\u044f \u0443\u0436\u0435 \u043e \u043f\u0430\u0442\u0447\u0430\u0445.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Nightmare Eclipse (\u0438\u043b\u0438 Chaotic Eclipse) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0441\u043f\u0438\u0441\u043e\u043a \u043d\u043e\u0432\u044b\u0445 \u00ab\u0438\u043c\u0435\u043d\u043d\u044b\u0445\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows (BlueHammer, RedSun, YellowKey, GreenPlasma, RougePlanet, UnDefend).\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0441\u043b\u0443\u0447\u0430\u0438 \u043f\u043e\u043a\u0430 \u0435\u0434\u0438\u043d\u0438\u0447\u043d\u044b, \u0432 \u041b\u041a \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u043d\u0438 \u043f\u0435\u0440\u0435\u0440\u0430\u0441\u0442\u0443\u0442 \u0432 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 \u0442\u0440\u0435\u043d\u0434. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0430\u043d\u043d\u044f\u044f \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u043e \u043f\u0435\u0440\u0435\u0434 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0422\u0430\u043a\u0436\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u00ab\u0437\u0430\u0441\u043b\u0443\u0436\u0435\u043d\u043d\u044b\u0435\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041f\u041e \u0434\u043b\u044f Windows, \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u041b\u041a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u044e\u0442 \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u044d\u0442\u043e CVE-2018-0802 \u0438 CVE-2017-11882 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Equation Editor; CVE-2017-0199 \u0432 Microsoft Office \u0438 WordPad; CVE-2023-38831 \u0438 CVE-2025-6218 (ZDI-CAN-27198) \u0432 WinRAR; CVE-2025-8088 \u043f\u043e \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430\u044f CVE-2025-6218.\n\n\u041f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0412 Linux \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u0442\u043e\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0447\u0435\u0440\u043d\u0430\u044f \u043f\u043e\u043b\u043e\u0441\u0430. \u0422\u0430\u043a, \u0431\u044b\u043b \u0440\u0430\u0441\u043a\u0440\u044b\u0442 \u043a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Dirty Frag, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432\u043d\u0443\u0442\u0440\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430, \u0442\u0430\u043a \u0438\u043b\u0438 \u0438\u043d\u0430\u0447\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u043b\u0438\u0441\u044c \u043a \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Linux.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435: CVE-2026-31431 (Copy Fail), CVE-2026-43284, CVE-2026-43500 (Dirty Frag), CVE-2026-46300 (Fragnesia), CVE-2026-31635 (DirtyDecrypt), CVE-2026-43494 (PinTheft) \u0438 CVE-2026-46331 (pedit COW).\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u0441\u0440\u0430\u0437\u0443 \u0441\u0442\u0430\u043b\u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u041b\u041a \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0442\u0430\u043a\u0436\u0435 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2022-0847 (Dirty Pipe), CVE-2019-13272, CVE-2021-22555, CVE-2023-32233.\n\n\u0412 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043f\u043e \u0442\u0438\u043f\u0430\u043c \u041f\u041e \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0430\u0432\u043d\u043e \u043d\u0435 \u043f\u043e\u043f\u0430\u0434\u0430\u043b\u0438 \u0432 \u0432\u044b\u0431\u043e\u0440\u043a\u0443. \u0422\u0430\u043a, \u043c\u044b \u0441\u043d\u043e\u0432\u0430 \u0432\u0438\u0434\u0438\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0442\u0430\u043a\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b, \u043a\u0430\u043a SharePoint.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u0432 APT-\u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430\u043c\u0435\u0442\u0438\u043b\u0441\u044f \u0442\u0440\u0435\u043d\u0434 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0440\u0430\u0437\u0443 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c, \u043a\u0430\u043a \u0438 \u0440\u0430\u043d\u044c\u0448\u0435, \u0432 \u041b\u041a \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438 \u043c\u043d\u043e\u0433\u043e 0-day. \u0421\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u043e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Langflow - \u044d\u0442\u043e \u043e\u0434\u0438\u043d \u0438\u0437 \u043f\u0435\u0440\u0432\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u0435\u0432, \u043a\u043e\u0433\u0434\u0430 APT \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0418\u0418, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0435\u0439\u0447\u0430\u0441 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c.\n\n\u0421\u0430\u043c\u044b\u043c\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u043c\u0438 C2-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430\u043c\u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f Sliver, Havoc, Adaptix\u04212 \u0438 Metasploit.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0433\u0440\u0430\u0444\u0438\u043a\u0430 - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "creation_timestamp": "2026-08-31T00:00:48.988130Z"}, {"uuid": "1cb40880-7d3a-4ded-93ed-84abca7022f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "exploited", "source": "https://t.me/CyberDispatch/1798", "content": "Russian hackers \"Gamaredon\" are exploiting a critical WinRAR vulnerability to attack Ukraine.\n\nThey\u2019re weaponizing CVE-2025-8088 with GammaPhish HTA files.", "creation_timestamp": "2026-08-31T00:00:38.917334Z"}, {"uuid": "d01b61ba-32fc-44be-8061-f3a984545915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/hacking_Attack/167752", "content": "CVE-2025\u20138088 (WinRar Zero-Day)\nhttps://medium.com/@hackson/cve-2025-8088-winrar-zero-day-2e5407fcca0b?source=rss------bug_bounty-5\n\nIts been a loooonngggggg since i made a detailed writeup, but this time its something different from my favorite gravvyyy!Continue reading on Medium \u00bb (https://medium.com/@hackson/cve-2025-8088-winrar-zero-day-2e5407fcca0b?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:19.460397Z"}, {"uuid": "167fd236-1cc1-49ce-aa31-2bd008130f0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://t.me/hacking_Attack/167752", "content": "CVE-2025\u20138088 (WinRar Zero-Day)\nhttps://medium.com/@hackson/cve-2025-8088-winrar-zero-day-2e5407fcca0b?source=rss------bug_bounty-5\n\nIts been a loooonngggggg since i made a detailed writeup, but this time its something different from my favorite gravvyyy!Continue reading on Medium \u00bb (https://medium.com/@hackson/cve-2025-8088-winrar-zero-day-2e5407fcca0b?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:36.827077Z"}, {"uuid": "bd944950-4f04-4dcc-b556-86cb4dc3801f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/167752", "content": "CVE-2025\u20138088 (WinRar Zero-Day)\nhttps://medium.com/@hackson/cve-2025-8088-winrar-zero-day-2e5407fcca0b?source=rss------bug_bounty-5\n\nIts been a loooonngggggg since i made a detailed writeup, but this time its something different from my favorite gravvyyy!Continue reading on Medium \u00bb (https://medium.com/@hackson/cve-2025-8088-winrar-zero-day-2e5407fcca0b?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T06:00:05.442871Z"}, {"uuid": "f2d52d37-0830-41ef-9746-097f5838881c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/167752", "content": "CVE-2025\u20138088 (WinRar Zero-Day)\nhttps://medium.com/@hackson/cve-2025-8088-winrar-zero-day-2e5407fcca0b?source=rss------bug_bounty-5\n\nIts been a loooonngggggg since i made a detailed writeup, but this time its something different from my favorite gravvyyy!Continue reading on Medium \u00bb (https://medium.com/@hackson/cve-2025-8088-winrar-zero-day-2e5407fcca0b?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:59.920278Z"}]}