Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Excerpt
Background On the first of July (2025), CISA’s KEV brought a fun little vulnerability to my attention. The alert reports two newly known exploited vulnerabilities: CVE-2025-48927 and CVE-2025-48928 . CVE-2025-48928 requires local exploitation, and so is not “GreyNoiseable” at this time. However, CVE-2025-48927 is remotely exploitable and requires no user interaction. It exists in TeleMessage TM SGNL, a Signal clone that archives copies of all messages passing through it. The…
Read the original report →Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2025-48928 | Medium | Score 51/100 | First seen |
| CVE | CVE-2025-48927 | Medium | Score 54/100 | First seen |
IOC Relationship Graph
Building graph…