NEW Armored Likho B3
85 Armored Likho expands its cyber-espionage toolkit
The campaign uses fundraising and Starlink lures as bait and delivers a new toolkit generation that steals Telegram data and eavesdrops on victims.
Critical
Archive view — this data may be outdated.
CTI status
Joel Traber AG
As of:
Last pipeline run:
Status Moderate
All threats
Sorted by KEV · Risk · EPSSAdmiralty grading (A–F · 1–6)
Source reliability
- A Completely reliable
- B Usually reliable
- C Fairly reliable
- D Not usually reliable
- E Unreliable
- F Cannot be judged
Information credibility
- 1 Confirmed
- 2 Probably true
- 3 Possibly true
- 4 Doubtful
- 5 Improbable
- 6 Cannot be judged
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
NEW B2
62 ZDI-26-571: Linux Kernel Net Scheduler Packet Classifier API Use-After-Free Local Privilege Escalation Vulnerability
The flaw allows local attackers to escalate privileges in the Linux kernel and affects unpatched Ubuntu systems.
Medium
CVSS
9.8
EPSS
1%
NEW C3
17 BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days
Bundling several already-patched zero-days into a circulating exploit kit lets even less skilled espionage-motivated actors exploit them, making the window between patch availability and patch deployment the decisive risk factor.
High
NEW Armored Likho, Mirage Kitten (UNC1549, Smoke Sandstorm, Nimbus Manticore) B3
0 Threat landscape for industrial automation systems. Q2 2026
The report provides a quarterly overview of the threat landscape for industrial automation systems and documents new APT malware attributed to Mirage Kitten, which is strategically relevant for production environments.
Medium
NEW A3
0 Google Chrome: Multiple Vulnerabilities
The report summarizes multiple vulnerabilities in Google Chrome without specific CVEs or exploit details; timely patch management remains necessary.
Medium
A3
0 7-Zip: Vulnerability allows code execution
The vulnerability requires user interaction and affects widely used compression software installed in many corporate environments; a CVE ID is not yet available.
Medium
A3
0 Microsoft Edge: Multiple Vulnerabilities
This BSI advisory lists multiple Edge vulnerabilities without CVE references and without indication of active exploitation.
Medium
NEW B3
0 Benchmaxxing: When the Benchmark Becomes the Target
The report describes a novel attack technique (Benchmaxxing) that goes beyond pure patch information and provides new TTPs for defense.
Medium
NEW A3
0 [UPDATE] Linux Kernel: Multiple Vulnerabilities Allow Denial of Service
The advisory summarises multiple Linux kernel vulnerabilities without providing specific CVEs or evidence of active exploitation.
Medium
NEW A3
0 Microsoft Edge: Multiple vulnerabilities enable information disclosure and spoofing attacks
Medium