Daily CVE report with the latest security vulnerabilities and exploits. Stay informed with real-time updates and expert insights on emerging cyber threats.

Red Dog Security

13 Aug 2025 — 1 min read

Vulnerability Details : CVE-2025-8088
Path traversal vulnerability in WinRAR
A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strý?ek
from ESET.

Vulnerability Details : CVE-2025-4609
Chromium/Google Chrome is vulnerable to an incorrect handle provided in unspecified circumstances in Mojo.

Vulnerability Details : CVE-2025-53786
Microsoft Exchange Server Hybrid Deployment Elevation of Privilege Vulnerability
On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix. Microsoft made these changes in the general interest of improving the security of hybrid Exchange deployments. Following further investigation, Microsoft identified specific security implications tied to the guidance and configuration steps outlined in the April announcement. Microsoft is issuing CVE-2025-53786 to document a vulnerability that is addressed by taking the steps documented with the April 18th announcement. Microsoft strongly recommends reading the information, installing the April 2025 (or later) Hot Fix and implementing the changes in your Exchange Server and hybrid environment.

Law Enforcement Shuts Down Fake Identity Creation Service VerifTools

The FBI and Dutch police have announced the takedown of VerifTools, an underground marketplace that specialized in producing fake identity documents. During the operation, authorities seized both physical and virtual servers located in Amsterdam. A Marketplace for Fake IDs VerifTools operated as a large-scale platform for creating and selling fraudulent

NX Falls Victim to Supply Chain Attack: Hackers Steal Thousands of Secrets

The maintainers of NX have disclosed a major supply chain attack, dubbed s1ngularity, which occurred on August 26, 2025. The compromise of a developer’s token allowed attackers to publish malicious versions of the popular npm package and related tools, enabling them to steal user data on a large scale.

Government Institutions in Nevada Closed Due to Cyberattack

The U.S. state of Nevada has suffered a large-scale cyberattack, forcing the temporary closure of government institutions and disrupting multiple state services. The incident, which began last weekend, has left authorities working for days to restore operations. Scope of the Disruption The attack affected government websites, telephone systems, and

Anthropic: Hackers Used Claude in a Large-Scale Cyber Operation

Anthropic reports that it has disrupted a large-scale malicious campaign in which attackers used its AI model, Claude, to steal personal data and extort ransoms that sometimes exceeded $500,000. In its published report, the company warns that AI-powered tools are increasingly being weaponized for cybercrime and fraud. To counter

Read more

Law Enforcement Shuts Down Fake Identity Creation Service VerifTools

NX Falls Victim to Supply Chain Attack: Hackers Steal Thousands of Secrets

Government Institutions in Nevada Closed Due to Cyberattack

Anthropic: Hackers Used Claude in a Large-Scale Cyber Operation