Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
|
Description: A new phishing campaign has been observed employing tax-themed lures to deliver a stealthy backdoor payload as part of attacks targeting Pakistan.
Cybersecurity company Securonix, which is tracking the activity under the name FLUX#CONSOLE, said it likely starts with a phishing email link or attachment, although it said it couldn't obtain the original email used to launch the attack.
"One of the
December 18th, 2024 (6 months ago)
|
|
|
Description: A new social engineering campaign has leveraged Microsoft Teams as a way to facilitate the deployment of a known malware called DarkGate.
"An attacker used social engineering via a Microsoft Teams call to impersonate a user's client and gain remote access to their system," Trend Micro researchers Catherine Loveria, Jovit Samaniego, and Gabriel Nicoleta said.
"The attacker failed to install a
December 18th, 2024 (6 months ago)
|
|
|
Description: CISA has issued this year's first binding operational directive (BOD 25-01), ordering federal civilian agencies to secure their Microsoft 365 cloud environments by implementing a list of required configuration baselines. [...]
December 18th, 2024 (6 months ago)
|
|
|
Description: Vulnerabilities in Microsoft Azure Data Factory's integration with Apache Airflow can lead to unauthorized access and control over cloud resources.
The post Dirty DAG: New Vulnerabilities in Azure Data Factory’s Apache Airflow Integration appeared first on Unit 42.
December 18th, 2024 (6 months ago)
|
CVE-2024-35250 |
Description: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVSS: HIGH (7.8) EPSS Score: 0.12%
December 17th, 2024 (6 months ago)
|
|
CVE-2024-49090 |
Description: Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS: HIGH (7.8) EPSS Score: 0.05%
December 14th, 2024 (6 months ago)
|
|
CVE-2024-49088 |
Description: Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS: HIGH (7.8) EPSS Score: 0.05%
December 14th, 2024 (6 months ago)
|
|
CVE-2024-49074 |
Description: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVSS: HIGH (7.8) EPSS Score: 0.05%
December 14th, 2024 (6 months ago)
|
|
CVE-2024-49073 |
Description: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
CVSS: MEDIUM (6.8) EPSS Score: 0.05%
December 14th, 2024 (6 months ago)
|
|
CVE-2024-49138 |
🚨 Marked as known exploited on December 10th, 2024 (6 months ago).
Description: Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS: HIGH (7.8) EPSS Score: 0.05%
December 12th, 2024 (6 months ago)
|