CTI status
As of:
Last pipeline run:
Source reliability
Information credibility
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
An unusual warning: Kiteworks urges customers to avoid the platform after government agencies warned of an attacker , an indication of a targeted APT campaign against file transfer services.
The report shows that automated, agentic attacks specifically abuse Azure service principals for privilege escalation, resource destruction and credential collection , a new attack vector beyond classic ransomware.
The quarterly report shows that ICS/OT environments are increasingly targeted with spyware, ransomware and nation-state backdoors (e.g. NightLedger, CoolClient) , a strategic view of the OT threat landscape that goes beyond pure patch information.
The advisory bundles vulnerabilities across numerous Windows and Exchange versions without naming individual CVEs, CVSS scores, or an exploitation status.
The report does not name CVE IDs, severity scores, or exploitation evidence, so it is only a general vulnerability warning for PRTG.
Without a CVE number and attack details, it remains unclear which sudo version is affected and whether the flaw is already actively exploited.
The report describes a race condition caused by uninitialized memory in the cpufreq subsystem, occurring only with CONFIG_CPUMASK_OFFSTACK=y during sysfs publication.
The report contains no indication of active exploitation or attacker TTPs and does not go beyond patch information.
Beyond the pure patch information, the report provides no indications of active exploitation or attacker TTPs.
The update reports several unspecified vulnerabilities in the Linux kernel that enable local attacks.
The advisory updates a previously known vulnerability in util-linux that allows a locally logged-in attacker to escalate privileges on Linux systems; a CVE number or details on active exploitation are missing.