CVE Tools
Track your stack

Look What You Made Us Patch: 2025 Zero-Days in Review

MandiantBy Google Threat Intelligence Group

Reported exploitedGTIG zero-day trackingUNC5221
Read at Mandiant

Mandiant publishes this story on its own site; we link to it rather than reprint it.

  1. Help Net SecuritySonicWall SMA appliances targeted in zero-day attacks (CVE-2026-15409, CVE-2026-15410)CVE-2025-23006, CVE-2025-40602
  2. Help Net SecurityOracle E-Business Suite Payments flaw under attack (CVE-2026-46817)CVE-2025-61882, CVE-2025-61884
  3. MandiantRansomware Tactics, Techniques, and Procedures in a Shifting Threat LandscapeCVE-2025-61882, CVE-2025-8088
  4. Dark ReadingShinyHunters Hacked Clop. Now What About Clop's Victims?CVE-2025-61882
  5. Хакер (xakep.ru)Группировка ShinyHunters взломала сайт хак-группы ClopCVE-2025-61882
  6. BleepingComputerShinyHunters hacks Clop leak site, threatens to extort ransomware gangCVE-2025-61882
  7. Help Net SecuritySonicWall SMA 1000 appliances under attack via zero-day flawsCVE-2025-40602
  8. BleepingComputerSonicWall warns of actively exploited SMA1000 zero-day flawsCVE-2025-40602
  9. Kaspersky SecurelistExploits and vulnerabilities in Q2 2026CVE-2025-8088
  10. Dark ReadingCoruna, DarkSword iOS Exploits Proliferate GloballyCVE-2025-14174

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store