Experimental Suspicious Domain Feed

Our new experimental suspicious domain feed uses various criteria to identify domains that may be used for phishing or other malicious purposes.

https://isc.sans.edu/diary/Experimental%20Suspicious%20Domain%20Feed/32102

Wing FTP Server RCE Vulnerability Exploited CVE-2025-47812

Huntress saw active exploitation of Wing FTP Server remote code execution (CVE-2025-47812) on a customer on July 1, 2025. Organizations running Wing FTP Server should update to the fixed version, version 7.4.4, as soon as possible.

https://www.huntress.com/blog/wing-ftp-server-remote-code-execution-cve-2025-47812-exploited-in-wild

https://www.rcesecurity.com/2025/06/what-the-null-wing-ftp-server-rce-cve-2025-47812/

FortiWeb Pre-Auth RCE (CVE-2025-25257)

An exploit for the FortiWeb RCE Vulnerability is now available and is being used in the wild.

https://pwner.gg/blog/2025-07-10-fortiweb-fabric-rce

NVIDIA Vulnerable to Rowhammer

NVIDIA has received new research related to the industry-wide DRAM issue known as Rowhammer . The research demonstrates a potential Rowhammer attack against an NVIDIA A6000 GPU with GDDR6 Memory. The purpose of this notice is to reinforce already known mitigations to Rowhammer attacks.

https://nvidia.custhelp.com/app/answers/detail/a_id/5671/~/security-notice%3A-rowhammer---july-2025