https://blog.dansec.red/cves/cve-2025-5601/Recent content in CVE-2025-5601 on DanSec DailyHugoen-gbSun, 08 Jun 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-06-08-cybersecurity-news/Sun, 08 Jun 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-06-08-cybersecurity-news/<h2 id="major-incidents-or-breaches">Major Incidents or Breaches</h2> <ul> <li>A supply chain attack compromised 15 popular Gluestack NPM packages, which collectively have over 950,000 weekly downloads. The compromised packages were modified to include malicious code functioning as a remote access trojan (RAT).</li> <li>Two malicious NPM packages, disguised as utility tools, were discovered to be destructive data wipers. When installed, these packages delete entire application directories, causing potential data loss for affected users.</li> </ul> <h2 id="newly-discovered-vulnerabilities">Newly Discovered Vulnerabilities</h2> <ul> <li>Wireshark 4.4.7 was released, addressing one security vulnerability (CVE-2025-5601) and resolving eight additional bugs.</li> </ul> <h2 id="notable-threat-actor-activity">Notable Threat Actor Activity</h2> <ul> <li>Ongoing investigations and reporting continue regarding unexplained iPhone crashes that some external sources have linked to Chinese threat actors, though Apple denies any connection to Chinese hacking activity.</li> </ul> <h2 id="trends-tools-or-tactics-of-interest">Trends, Tools, or Tactics of Interest</h2> <ul> <li>The tool pngdump.py has been updated to enhance its capability for extracting chunks and embedded data from PNG images, aiding in malware analysis and forensic investigations.</li> <li>There is a noted trend of malicious actors leveraging NPM packages for both remote access and destructive attacks, with packages either installing RATs or acting as wipers that erase project data.</li> </ul>