Gnark Security Update Advisory (CVE-2025-57801)
Overview We have released a security update to address a vulnerability in GNARK. Users of affected products are advised to update to the latest version. Affected Products CVE-2025-57801 GNARK Versions: 0.14.0 and earlier Resolved Vulnerabilities Signature malleability vulnerability in gnark (CVE-2025-57801)
Samba Security Update Advisory (CVE-2025-10230)
Overview We have released a security update to address a vulnerability in Samba. Users of affected products are advised to update to the latest version. Affected Products CVE-2025-10230 Samba Version: 4.0 and later Resolved Vulnerabilities Command injection vulnerability in the Samba WINS server
Distribution of Malware Abusing LogMeIn and PDQ Connect
AhnLab SEcurity intelligence Center (ASEC) recently identified cases of attacks abusing the RMM (Remote Monitoring and Management) tools LogMeIn Resolve (GoTo Resolve) and PDQ Connect. While the initial distribution method is unknown, the attacks involve a legitimate-looking website that disguises the malware as a normal program. When a user downloads
Distribution of Backdoor Malware with Legitimate Signature, Disguised as Steam Cleanup Tool
Multiple cases have been reported where malware disguised as the “SteamCleaner” tool for cleaning the popular game platform Steam client is being distributed. When a system is infected with this malware, a malicious Node.js script resides on the user’s PC and communicates with the C2 server periodically, allowing threat actors
