{"vulnerability": "CVE-2025-68947", "sightings": [{"uuid": "fcb53f3f-1c53-43d7-ae92-be2ac063426b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-68947", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcdj3hxcph2g", "content": "", "creation_timestamp": "2026-01-13T21:34:50.294907Z"}, {"uuid": "382245be-131b-48ab-95b3-6d93052b5a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-68947", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mcg2r5k6yw2g", "content": "", "creation_timestamp": "2026-01-14T21:56:31.530444Z"}, {"uuid": "fde6710c-a580-4bbc-a2c7-456ea2e0c19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-68947", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3me7siiyeik2c", "content": "", "creation_timestamp": "2026-02-06T21:02:58.534465Z"}, {"uuid": "fd723d25-2f6c-4aeb-9a20-db71ea1a52e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-68947", "type": "exploited", "source": "https://t.me/thehackernews/8386", "content": "\u26a0\ufe0f\ud83d\udee0\ufe0f Reynolds ransomware embeds its own BYOVD evasion, bundling a vulnerable driver to disable EDR before encryption.\n\nIt drops the NSecKrnl driver (CVE-2025-68947) to kill security tools, reducing detection and affiliate effort.\n\n\ud83d\udd17 Read full attack chain and defense insights \u2192 https://thehackernews.com/2026/02/reynolds-ransomware-embeds-byovd-driver.html", "creation_timestamp": "2026-02-10T14:44:42.000000Z"}, {"uuid": "2304e57e-23c8-44d8-a3b1-33357f7a5eb2", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-68947", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/99d9dd96-5456-4ef9-9fcc-8432b99d274f", "content": "", "creation_timestamp": "2026-06-19T12:42:35.926063Z"}, {"uuid": "b2a0e878-caf1-4ad5-bd91-9511fe8b3523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-68947", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mumtq4z6mw2w", "content": "", "creation_timestamp": "2026-09-03T16:12:47.872432Z"}, {"uuid": "8db10656-fc94-4c84-86b7-089e130023b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-68947", "type": "exploited", "source": "https://t.me/CyberDispatch/729", "content": "", "creation_timestamp": "2026-08-31T00:00:13.239823Z"}, {"uuid": "bddd4c71-5112-4dae-879b-559e487702d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-68947", "type": "seen", "source": "https://t.me/CyberDispatch/729", "content": "", "creation_timestamp": "2026-08-29T20:00:21.759610Z"}, {"uuid": "3afef5d4-dc15-4641-b590-da185e46edd1", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-68947", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d4ee705f-2642-4632-923f-a6446310d558", "content": "", "creation_timestamp": "2026-06-19T12:45:40.943095Z"}]}