Posts by Spartech Software

Iran has recently slowed and, in some areas, nearly shut off internet access across the country in what officials describe as a “temporary, targeted, and controlled” measure to prevent cyberattacks, particularly from Israel, as regional tensions escalate. The move follows a series of missile exchanges and cyber operations between Israel and Iran, with both sides engaging in digital warfare alongside physical military actions.

Cybersecurity firm Qualys has published technical details and proof-of-concept (PoC) code for two newly discovered Linux vulnerabilities—CVE-2025-6018 and CVE-2025-6019—that, when chained together, allow an unprivileged local attacker to escalate privileges and gain full root access on most Linux distributions.

In June 2025, a significant cyberattack targeted organizations using SimpleHelp’s Remote Monitoring and Management (RMM) software. The attack exploited unpatched vulnerabilities in SimpleHelp, most notably CVE-2024-57727, a path traversal flaw that allowed ransomware actors to compromise systems, steal sensitive data, and deploy ransomware in double extortion schemes.

Cybercriminals are using a black-market SEO platform called Hacklink to manipulate search engine rankings and promote malicious content through compromised websites. Hacklink serves as a marketplace where attackers can purchase access to thousands of compromised sites, often targeting high-reputation domains such as .gov, .edu, or country-code TLDs. These domains are highly valued for their trustworthiness in search algorithms.

A critical vulnerability in Langflow (CVE-2025-3248) is being actively exploited to deploy the Flodrix botnet, marking a significant threat to AI development infrastructure based on the popular product.