Russian BlueDelta (Fancy Bear) Uses PDFs to Steal Logins in Just 2 Seconds

New research from Recorded Future reveals how Russian state hackers BlueDelta are using fake Microsoft and Google login portals to steal credentials. The campaign involves using legitimate PDF lures from GRC and EcoClimate to trick victims...

CVE-2026-22800 PILOS affected by a CSRF via GET request allows unintentional termination of all active video conferences

PILOS Platform for Interactive Live-Online Seminars is a frontend for BigBlueButton. Prior to 4.10.0, Cross-Site Request Forgery CSRF vulnerability exists in an administrative API endpoint responsible for terminating all active video conferences on a single server. The affected endpoint performs ...

CVE-2026-22771

creationtimestamp| type| source ---|---|--- 2026-01-12 20:02:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcatgl2t3b2g 2026-01-12 20:07:23+00:00| seen| Telegram/8sAp-VzdCpmBtZpXHcIlhxzqtmWknERFSKz0UU7al4qy2OU 2026-01-12 21:37:11+00:00| seen|...

CVE-2025-41077

creationtimestamp| type| source ---|---|--- 2026-01-12 15:32:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcaees2xeg2y 2026-01-12 16:02:59+00:00| seen| Telegram/XntR8Q08ItQqPRQ7FMyZvktk-SlD6Wr0fFrSW9Df9BO1jiA...

CVE-2026-0842

creationtimestamp| type| source ---|---|--- 2026-01-11 09:00:43+00:00| published-proof-of-concept| Telegram/tz1jzGmcaokja-BK3N07H3F4dQfL-keBCWn2PTVczlXDBc 2026-01-11 11:35:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mc5gnxzon72y...

CVE-2026-0839

creationtimestamp| type| source ---|---|--- 2026-01-11 06:25:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc4vdwnb372t 2026-01-11 06:25:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc4vedkjop2t 2026-01-11 07:00:35+00:00|...

CVE-2026-22773

creationtimestamp| type| source ---|---|--- 2026-01-10 08:01:06+00:00| published-proof-of-concept| Telegram/WQqRawnFxdQj2C7QSZvJhJYu2ip6AHddUppaVRsAsIpfVRo 2026-01-10 08:35:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mc2m4gyjfm2q...

CVE-2026-22685

creationtimestamp| type| source ---|---|--- 2026-01-10 07:01:39+00:00| seen| Telegram/i2g9ck4oFpG2FQ6NO-wq7UgJ3FLiFKBZXo4--EYsPHmrFO0 2026-01-10 08:00:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mc2k5v3fvc2e 2026-01-10 14:50:36+00:00| seen|...

CVE-2026-22025

creationtimestamp| type| source ---|---|--- 2026-01-10 01:29:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbzue7plpi2y 2026-01-10 02:04:07+00:00| published-proof-of-concept| Telegram/rdcJ-eVVBzDoFwL5TR2qJvsWI6XIYotV57lHh9Pxh3U8ZQE 2026-01-10 02:04:17+00:00|...

CVE-2026-21898

creationtimestamp| type| source ---|---|--- 2026-01-10 01:26:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbzu5dqnhi2q 2026-01-10 01:31:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbzug6qgwq2u 2026-01-10 02:04:07+00:00| published-proof-of-concept|...

CVE-2026-22027

creationtimestamp| type| source ---|---|--- 2026-01-10 01:22:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbztxeohrq22 2026-01-12 08:39:15+00:00| seen| https://gist.github.com/Darkcrai86/b176463f12dc368c9fff6d3cb12db099...

CVE-2026-22612

creationtimestamp| type| source ---|---|--- 2026-01-09 18:13:01+00:00| published-proof-of-concept| https://github.com/trailofbits/fickling/security/advisories/GHSA-h4rm-mm56-xf63 2026-01-10 03:02:28+00:00| seen| Telegram/S2KXutw1drBgRsxEuEIjByNvXPd-WruEjV0wL9OdN7BsNk 2026-01-10 04:01:28+00:00|...

CVE-2026-22194

creationtimestamp| type| source ---|---|--- 2026-01-09 18:06:54+00:00| seen| Telegram/QBOT-ryT9AKKcs7tiHBGvSbmUQX4gh4t9NvXKSyVLhBs9Ow 2026-01-09 18:56:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbz6e4mwvn2x...

CVE-2026-22609

creationtimestamp| type| source ---|---|--- 2026-01-09 18:02:18+00:00| published-proof-of-concept| https://github.com/trailofbits/fickling/security/advisories/GHSA-q5qq-mvfm-j35x 2026-01-10 03:02:28+00:00| seen| Telegram/S2KXutw1drBgRsxEuEIjByNvXPd-WruEjV0wL9OdN7BsNk 2026-01-10 03:58:08+00:00|...

CVE-2025-14338

creationtimestamp| type| source ---|---|--- 2026-01-09 17:19:07+00:00| seen| https://seclists.org/oss-sec/2026/q1/46 2026-01-09 18:40:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mbz5hn6rp72f 2026-01-09 18:41:57+00:00| seen|...

CVE-2023-29757

An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files...

CVE-2023-29758

An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files...

CVE-2026-22082

creationtimestamp| type| source ---|---|--- 2026-01-09 11:55:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbygtha2jd2x 2026-01-09 13:06:01+00:00| seen| Telegram/opgf19ZN09lKMlReRuv4TvW7wrTvF7qnMgMw4geluJ9eZ0 2026-01-09 14:14:28+00:00| seen|...

CVE-2025-64091

creationtimestamp| type| source ---|---|--- 2026-01-09 11:04:13+00:00| seen| Telegram/hGok3FHgWgbXq-4QwRuv2kdh52nqy5VuUREmY2DmSo70XhI 2026-01-09 11:04:23+00:00| seen| Telegram/SPe3XX5iac8UD5LgKKuhpueusGV194808lqCbqtApKnkgWg 2026-01-09 11:54:16+00:00| seen|...

CVE-2019-11875

In AutomateAppCore.dll in Blue Prism Robotic Process Automation 6.4.0.8445, a vulnerability in access control can be exploited to escalate privileges. The vulnerability allows for abusing the application for fraud or unauthorized access to certain information. The attack requires a valid user...