CVE-2022-21874

creationtimestamp| type| source ---|---|--- 2022-01-12 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=715 2022-01-12 13:10:46+00:00| published-proof-of-concept| https://t.me/poxek/449 2022-01-12 14:49:26+00:00| seen| https://t.me/NeKaspersky/1670 2022-01-12 17:30:00+00:00...

CVE-2022-21907

creationtimestamp| type| source ---|---|--- 2022-01-12 00:17:47+00:00| seen| https://t.me/cibsecurity/35291 2022-01-12 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=715 2022-01-12 04:32:14+00:00| seen| Telegram/oWSPkDsJ-y34oQzF9TvATbb9e2xxUgDctwgG7HX7J-WCowF 2022-01-12...

CVE-2021-42392

creationtimestamp| type| source ---|---|--- 2022-01-07 10:33:19+00:00| seen| https://t.me/thehackernews/1774 2022-01-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=714 2022-01-10 16:21:02+00:00| seen| https://t.me/cibsecurity/35165 2022-02-02 03:53:10+00:00|...

Mac Zero Day Targets Apple Devices in Hong Kong

Since at least late August, attackers have been using flaws in macOS and iOS – including in-the-wild use of what was then a zero-day flaw – to install a backdoor on the Apple devices of users who visited Hong Kong-based media and pro-democracy sites. This isn’t a finely targeted campaign, but it’...

MacOS Zero-Day Used against Hong Kong Activists

Google researchers discovered a MacOS zero-day exploit being used against Hong Kong activists. It was a "watering hole" attack, which means the malware was hidden in a legitimate website. Users visiting that website would get infected. From an article: Googles researchers were able to trigger the...

Hackers Exploit macOS Zero-Day to Hack Hong Kong Users with new Implant

Google researchers on Thursday disclosed that it found a watering hole attack in late August exploiting a now-patched zero-day in macOS operating system and targeting Hong Kong websites related to a media outlet and a prominent pro-democracy labor and political group to deliver a never-before-see...

Hackers Targeted Hong Kong Apple Devices in Widespread Attack

Visitors to pro-democracy and media sites in the region were infected with malware that could download files, steal data, and more...

CVE-2021-22947

creationtimestamp| type| source ---|---|--- 2021-09-30 00:37:11+00:00| seen| https://t.me/cibsecurity/29684 2022-01-12 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=715 2022-01-12 13:10:46+00:00| published-proof-of-concept| https://t.me/poxek/449 2022-01-12 14:49:26+00:0...

CVE-2021-36968

creationtimestamp| type| source ---|---|--- 2021-09-15 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=649 2021-09-15 13:29:06+00:00| seen| https://t.me/truesecator/2104 2021-09-15 16:22:42+00:00| seen| https://t.me/cibsecurity/28894...

CVE-2021-23031

creationtimestamp| type| source ---|---|--- 2021-08-26 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=636 2021-08-26 11:47:18+00:00| published-proof-of-concept| https://t.me/CyberSecurityIL/4999 2021-08-29 12:28:19+00:00| seen| https://t.me/CyberGovIL/1320 2021-09-14...

CVE-2021-36947

creationtimestamp| type| source ---|---|--- 2021-08-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=628 2026-09-01 20:02:28+00:00| seen| https://t.me/hackingAttack/19796 2026-09-02 01:03:02+00:00| seen| https://t.me/hackingAttack/19796 2026-09-07 20:00:05+00:00|...

CVE-2021-36936

creationtimestamp| type| source ---|---|--- 2021-08-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=628 2021-08-11 18:46:50+00:00| seen| https://t.me/truesecator/1993 2026-09-01 20:02:28+00:00| seen| https://t.me/hackingAttack/19795 2026-09-01 20:02:28+00:00| seen|...

CVE-2021-33910

creationtimestamp| type| source ---|---|--- 2021-07-21 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=617 2021-07-22 16:23:24+00:00| seen| https://t.me/truesecator/1935 2026-07-24 23:24:27+00:00| seen| https://gist.github.com/tu-trinh-scale/56f8d2ecc5da5c10bf8806441d83d32...

Unauthorized access vulnerability in Tilgin router of Hong Kong Broadband Network Ltd.

Hong Kong Broadband Network Limited is a leading provider of integrated telecommunications and technology solutions. An unauthorized access vulnerability exists in Hong Kong Broadband Network Limited's Tilgin router, which can be exploited by attackers to obtain sensitive information...

CVE-2021-32753

EdgeX Foundry is an open source project for building a common open framework for internet-of-things edge computing. A vulnerability exists in the Edinburgh, Fuji, Geneva, and Hanoi versions of the software. When the EdgeX API gateway is configured for OAuth2 authentication and a proxy user is...

CVE-2021-32753

EdgeX Foundry is an open source project for building a common open framework for internet-of-things edge computing. A vulnerability exists in the Edinburgh, Fuji, Geneva, and Hanoi versions of the software. When the EdgeX API gateway is configured for OAuth2 authentication and a proxy user is...

CVE-2021-32753 Weak password in API gateway in EdgeX Foundry Edinburgh, Fuji, Geneva, and Hanoi releases allows remote attackers to obtain authentication token via dictionary-based password attack when OAuth2 authentication method is enabled.

EdgeX Foundry is an open source project for building a common open framework for internet-of-things edge computing. A vulnerability exists in the Edinburgh, Fuji, Geneva, and Hanoi versions of the software. When the EdgeX API gateway is configured for OAuth2 authentication and a proxy user is...

Unauthorized Access Vulnerability in Hong Kong Broadband Network Limited IAD601D

Hong Kong Broadband Network Limited is a leading provider of integrated telecommunications and technology solutions. An unauthorized access vulnerability exists in IAD601D of Hong Kong Broadband Network Limited, which can be exploited by attackers to obtain sensitive information...

Akamai’s DDoS Mitigation Service Triggers Outages

UPDATE Major financial institutions, airlines and the Hong Kong stock exchange were knocked offline by a backfiring distributed denial-of-service DDoS mitigation service Thursday. The hour-long outage, which was triggered at approximately 1 a.m. EST Thursday, is tied to Akamai Technology’s...

Command Execution Vulnerability in TOTOLINK T10 Router (CNVD-2021-43461)

TOTOLINK is a brand held by Gion Electronics Shenzhen Co., Ltd, founded in 1999, is a Hong Kong-listed high-tech foreign-funded enterprises stock code: HK.8287, one of the world's leading network equipment suppliers. A command execution vulnerability exists in the TOTOLINK T10 router, which can b...