Severity High Analysis Summary Gamaredon is a Russia-backed advanced persistent threat (APT) that has been operating since at least 2013. The main goal of this APT […]

Severity High Analysis Summary APT-17 group aka BITTER APT group has been recently active and targeting sectors in South Asia for information theft and espionage. This […]

Severity High Analysis Summary LockBit ransomware takes as little as five minutes to deploy the encryption routine on target systems once it lands on the victim […]

Severity High Analysis Summary CVE-2022-45401 Jenkins Associated Files Plugin is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote authenticated attacker could […]

Severity High Analysis Summary GootLoader – a multi-staged JavaScript malware package, has been seen in the wild since late 2020. It initially gained popularity as a […]

Severity High Analysis Summary CVE-2022-45400 Jenkins JAPEX Plugin could allow a remote authenticated attacker to obtain sensitive information, caused by improper handling of XML external entity […]

Severity Medium Analysis Summary CVE-2022-45397 Jenkins OSF Builder Suite :: XML Linter Plugin could allow a remote authenticated attacker to obtain sensitive information, caused by improper […]

Severity Medium Analysis Summary CVE-2022-45396 Node.js is vulnerable to HTTP request smuggling, caused by the failure to correctly handle header fields that are not terminated with […]

Severity High Analysis Summary CVE-2022-45395 Jenkins CCCC Plugin could allow a remote authenticated attacker to obtain sensitive information, caused by improper handling of XML external entity […]