Severity High Analysis Summary The following CVEs are being actively exploited in wild by threat actors. Immediate action is suggested. CVE-2021-26855 A server-side request forgery (SSRF) […]

Severity Medium Analysis Summary Konni’s APT Group continues to attack malicious documents written in Russian. Konni’s APT Group conducts attacks with Russian-North Korean trade and economic […]

Severity Medium Analysis Summary CVE-2021-29736 WebSphere Application Server is vulnerable to a privilege escalation vulnerability. Impact Privilege escalation Affected Vendors IBM Affected Products IBM WebSphere Application […]

Severity Medium Analysis Summary CVE-2021-20505 The PowerVM Logical Partition Mobility(LPM) (PowerVM Hypervisor) encryption key exchange protocol can be compromised. If an attacker has the ability to […]

Severity High Analysis Summary CVE-2021-22930 Node.js could allow a remote attacker to bypass security restrictions, caused by a use-after-free on close http2 on stream canceling. An […]

Severity Medium Analysis Summary PetitPotam is an NTLM relay attack, it is a form of manipulator-in-the-middle attack. Microsoft is being vigilant of PetitPotam and its capabilities […]

Severity Medium Analysis Summary Also known as “Racealer,” Racoon is used to steal sensitive and confidential information including login credentials, credit card information, cryptocurrency wallets and […]

Severity High Analysis Summary CVE-2021-32965  Delta Electronics DIAScreen could allow a remote attacker to execute arbitrary code on the system, caused by a type confusion error. […]

Severity High Analysis Summary Dridex is a sophisticated strain of banking malware that targets the Windows platform, delivering spam campaigns to infect computers and steal banking […]