CVE Tools
Track your stack

Look What You Made Us Patch: 2025 Zero-Days in Review

MandiantBy Google Threat Intelligence Group

Reported exploitedGTIG zero-day trackingUNC5221
Read at Mandiant

Mandiant publishes this story on its own site; we link to it rather than reprint it.

  1. Help Net SecuritySonicWall SMA appliances targeted in zero-day attacks (CVE-2026-15409, CVE-2026-15410)CVE-2025-23006, CVE-2025-40602
  2. Help Net SecurityOracle E-Business Suite Payments flaw under attack (CVE-2026-46817)CVE-2025-61882, CVE-2025-61884
  3. MandiantRansomware Tactics, Techniques, and Procedures in a Shifting Threat LandscapeCVE-2025-61882, CVE-2025-8088
  4. Check Point Research19th October – Threat Intelligence ReportCVE-2025-8088
  5. SecurityWeekChinese APT Exploited BeyondTrust Vulnerability as Zero-DayCVE-2025-0282
  6. The Hacker NewsChina-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support ServersCVE-2025-0282
  7. BleepingComputerBeyondTrust patches zero-day exploited in attacks since AugustCVE-2025-0282
  8. The Hacker NewsSilent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government AttacksCVE-2025-8088
  9. Cisco TalosBreak the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizationsCVE-2025-8088
  10. BleepingComputerCISA warns admins to immediately fix Ivanti flaw exploited as zero-dayCVE-2025-0282

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure