Severity High Analysis Summary (APT28, Fancy Bear, Pawn Storm, Sofacy Group, Sednit, STIONTIUM, etc.), is an Russian backed APT organization with a military intelligence agency background. […]

Severity Medium Analysis Summary CVE-2020-25239 The webserver could allow unauthorized actions via special URLs for unprivileged users. The settings of the Unified Management Component (UMC) authorization […]

Severity Medium Analysis Summary CVE-2021-21366 Node.js xmldom module could allow a remote attacker to bypass security restrictions, caused by improper preserve of system identifiers, FPIs or […]

Severity High Analysis Summary TrickBot is a banking Trojan which targets sensitive information and acts as a dropper for other malware. Trickbot is usually spread via […]

Severity High Analysis Summary CVE-2021-21192 Google Chrome is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by tab groups. By persuading a victim […]

Severity Medium Analysis Summary A ZIPX attachment with spam messages is detected distributing malicious file that ultimately led to a NanoCore infection. In earlier campaigns, same […]

Severity Medium Analysis Summary CVE-2021-25673 An attacker with local access to the system could cause a denial-of-service condition in the application when it is used to […]

Severity High Analysis Summary CVE-2021-22709  This vulnerability could result in loss of data or remote code execution when a malicious CGF (configuration group file) file is […]

Severity High Analysis Summary Threat actors are now installing a new ransomware called ‘DEARCRY’ after hacking into Microsoft Exchange servers using the recently disclosed ProxyLogon vulnerabilities. […]