// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-wedgDTG 0600Z
ColdRecon / Breach Radar / Samsung
Breach Record

Samsung

DISCLOSED 2026-09-25 · UNPATCHED CVE

Huntress identified exploitation of CVE-2025-4632, an unpatched vulnerability in Samsung MagicINFO, leading to SYSTEM-level access on a Windows endpoint. Attackers installed AnyDesk for persistence and deployed a locally compiled Monero cryptocurrency miner. The incident highlights active exploitation of a known vulnerability to compromise endpoints and abuse resources.

The record

What we know

Disclosed
2026-09-25
Attack vector
Unpatched Cve
Sources

Cited reporting

↗ windowsforum.com (2026-09-25)
Similar vector · recent

Other unpatched cve breaches on file

FBI · 2026-09-26 Japan's Digital Agency · 2026-09-18 Gyazo · 2026-09-18 Japan's Digital Agency · 2026-09-17 U.S. government agencies · 2026-09-16 Japan's shared government network · 2026-09-15 PaperCut · 2026-09-11 Gyazo · 2026-09-11

This page is the permanent ColdRecon entry for the Samsung disclosure. It updates if new public reporting emerges. All tracked breaches →

Samsung just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →