CTI status
As of:
Last pipeline run:
Source reliability
Information credibility
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
Prior BeyondTrust flaws have been actively exploited for web shell and backdoor deployment, justifying urgent patch prioritization for these critical authentication bypass vulnerabilities.
ToddyCat APT exploits OAuth token hijacking against Gmail and targets corporate email; spyware remains second-most common threat category in ICS environments.
The alert mentions critical flaws in BeyondTrust software but provides no details on CVE numbers, attack scenarios, or active exploitation , the article appears incomplete or is a preview lacking substantive technical information.
A use-after-free vulnerability in Adobe Acrobat Reader DC enables remote code execution upon user interaction with CVSS 7.8; no public exploitation known, but timely patching required.
A use-after-free vulnerability in Adobe Acrobat Reader DC enables remote code execution when a user interacts with malicious documents or web pages.
The BSI warns of multiple unspecified vulnerabilities in Chrome and Edge; without CVE numbers, precise risk assessment is currently not possible.
BSI warning on critical vulnerabilities in Ubiquiti UniFi OS with RCE and privilege escalation potential requires prompt patch review in network infrastructure.
BSI warns of multiple unspecified vulnerabilities in 7-Zip with code execution potential; specific CVE numbers and technical details are missing from this advisory.
A long-overlooked KVM vulnerability allows attackers within virtual machines to escape their isolated environment and gain kernel privileges on the host system.
The BSI warns of multiple OpenSSL vulnerabilities without specific CVE references in this notice; this indicates a summary or update of multiple already-known vulnerabilities.
The campaign abuses legitimate Microsoft authentication mechanisms instead of fake login pages, combining collaboration-themed lures with OAuth Device-Flow exploitation to bypass MFA and gain persistent account access.
Januscape is the first known KVM vulnerability that can be exploited on both Intel and AMD architectures, enabling direct guest-to-host escape.
BSI advisory on multiple Linux Kernel DoS vulnerabilities without specific CVE references or exploitation details; urgency and affected versions remain unclear.