Severity High Analysis Summary Two variants of Android spyware connected to pro-India, state-sponsored hacking campaigns have been discovered. Hornbill and SunBird, have been linked to Confucius, an […]

Severity Medium Analysis Summary Loki Bot is a commodity malware sold on underground sites which is designed to steal private data from infected machines, and then […]

Severity High Analysis Summary Solarwinds Orion Platform could allow a remote attacker to gain elevated privileges on the system, caused by improper restriction of the SaveUserSetting […]

Severity High Analysis Summary CVE-2020-13949 Apache Thrift is vulnerable to a denial of service, caused by improper input validation. By sending specially-crafted messages, a remote attacker […]

Severity High Analysis Summary The Iranian APT MuddyWater is targeting multiple Arabic-speaking countries. The APT exploits 2 lures: a report on relations between Arab countries and […]

Severity High Analysis Summary CVE-2021-23876 McAfee Total Protection (MTP) could allow a local authenticated attacker to gain elevated privileges on the system, caused by a bypass […]

Severity High Analysis Summary Some surveillance tools are being used by the advanced persistent threat group (APT) Confucius, which first appeared in 2013 as a state-sponsored, […]

Severity High Analysis Summary CVE-2021-22654 The affected product is vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information. CVE-2021-22658 The affected […]

Severity High Analysis Summary CVE-2021-25251 Trend Micro Security 2020 and 2021 families could allow a local authenticated attacker to execute arbitrary code on the system, caused […]