A3
20 [UPDATE] systemd: Multiple Vulnerabilities
High
Archive view — this data may be outdated.
CTI status
Joel Traber AG
As of:
Last pipeline run:
Status Elevated
All threats
Sorted by KEV · Risk · EPSSAdmiralty grading (A–F · 1–6)
Source reliability
- A Completely reliable
- B Usually reliable
- C Fairly reliable
- D Not usually reliable
- E Unreliable
- F Cannot be judged
Information credibility
- 1 Confirmed
- 2 Probably true
- 3 Possibly true
- 4 Doubtful
- 5 Improbable
- 6 Cannot be judged
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
NEW C3
20 Attacks on Microsoft SharePoint vulnerability
CISA confirms actively exploited attacks against a high-risk SharePoint flaw; this goes beyond a mere patch recommendation and demonstrates an ongoing, real threat to exposed SharePoint instances.
High
NEW JADEPUFFER (Storm-3168) C3
20 JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources
The report shows that compromised service principals in Entra ID are no longer used merely for data theft but deliberately for destructive deletion operations in Azure , a TTP shift that goes beyond standard patch information.
High
NEW JadePuffer C3
20 JadePuffer agentic AI attacks target Azure, destroy cloud resources
The report describes an active, agent-driven ransomware campaign against Azure tenants with credential theft and resource destruction , i.e., new TTPs rather than a patch vulnerability.
High
NEW JadePuffer C3
20 JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack
An AI-driven attacker was able to take over an Azure tenant using compromised credentials and destructively delete data , a reminder of the risk of credential leaks in cloud environments.
High
NEW A3
0 Linux Kernel: Multiple Vulnerabilities
Medium
A3
0 [UPDATE] Linux Kernel: Multiple Vulnerabilities
The advisory remains generic at kernel level and provides neither CVE IDs nor affected subsystems, so targeted prioritisation is not possible.
Medium