ID | Type | Votes | Profile Description |
---|---|---|---|
APT40 | Unspecified | 2 | APT40 is a China-attributed cyber espionage group known for targeting countries strategically significant to the Belt and Road Initiative. The group has been linked to at least 51 different code families, exhibiting a broad range of capabilities. APT40 typically employs spear-phishing emails, often |
ID | Type | Votes | Profile Description |
---|---|---|---|
CVE-2021-31207 | Unspecified | 3 | CVE-2021-31207 is a significant software vulnerability that has been exploited by APT40, a group known for rapidly taking advantage of newly public vulnerabilities in widely used software. This particular vulnerability affects Atlassian Confluence and Microsoft Exchange, among other platforms, and a |
CVE-2021-44228 | Unspecified | 3 | CVE-2021-44228, also known as the Log4Shell vulnerability, is a significant flaw in Apache's Log4j software. Disclosed in December 2021, it quickly became one of the most severe bugs due to its widespread usage and potential for exploitation. Various Advanced Persistent Threat (APT) actors attempted |
Follina | Unspecified | 2 | Follina, also known as CVE-2022-30190, is a notable software vulnerability that was discovered and exploited in the first half of 2022. This flaw, found in the Microsoft Windows Support Diagnostic Tool (MSDT), was weaponized by TA413, a cyber threat actor group with suspected ties to China. The grou |
Log4Shell | Unspecified | 2 | Log4Shell is a significant software vulnerability that exists within the Log4j Java-based logging utility. The vulnerability, officially designated as CVE-2021-44228, allows potential attackers to execute arbitrary code on targeted systems. Advanced Persistent Threat (APT) actors, including LockBit |
Proxyshell | Unspecified | 2 | ProxyShell is a series of vulnerabilities affecting Microsoft Exchange email servers. These flaws in software design or implementation have been exploited by threat actors to gain unauthorized access and control over targeted systems. The ProxyShell vulnerability, officially tracked as CVE-2021-3447 |
Preview | Source Link | CreatedAt | Title |
---|---|---|---|
Securityaffairs | 2 months ago | Cybersecurity agencies warn of China-linked APT40 's capabilities | |
CISA | 2 months ago | People’s Republic of China (PRC) Ministry of State Security APT40 Tradecraft in Action | CISA | |
CERT-EU | 7 months ago | Sensor Intel Series: Top CVEs in December 2023 | |
CERT-EU | 9 months ago | Sensor Intel Series: Top CVEs in October 2023 | |
CERT-EU | 10 months ago | Critical Atlassian Confluence bug exploited in Cerber ransomware attacks | |
Malwarebytes | a year ago | Update now! Atlassian Confluence vulnerability is being actively exploited | |
CERT-EU | a year ago | Sensor Intel Series: Top CVEs in August 2023 | F5 Labs | |
CERT-EU | a year ago | Cyber Group 'Gold Melody' Selling Compromised Access to Ransomware Attackers | |
CERT-EU | a year ago | Qualys Top 20 Exploited Vulnerabilities | Qualys Security Blog | |
Malwarebytes | a year ago | 2022's most routinely exploited vulnerabilities—history repeats | |
CERT-EU | a year ago | Unmasking the top exploited vulnerabilities of 2022 – GIXtools | |
BankInfoSecurity | a year ago | Patching Conundrum: 5-Year Old Flaw Again Tops Most-Hit List | |
CERT-EU | a year ago | Five Eyes Agencies Call Attention to Most Frequently Exploited Vulnerabilities | |
CERT-EU | a year ago | FBI, CISA, and NSA reveal top exploited vulnerabilities of 2022 | |
CERT-EU | a year ago | Most exploited cyber vulnerabilities of 2022 revealed | |
CERT-EU | a year ago | CISA Advisory of Top 42 Frequently Exploited Flaws of 2022 | |
BankInfoSecurity | a year ago | Patching Conundrum: 4-Year Old Flaw Again Tops Most-Hit List | |
Securityaffairs | a year ago | CISA, FBI, and NSA published the list of 12 most exploited vulnerabilities of 2022 | |
CERT-EU | a year ago | Old vulnerabilities, major vendors dominate list of most-exploited flaws of 2022 | |
CERT-EU | a year ago | FBI, CISA, and NSA reveal top exploited vulnerabilities of 2022 |