Privacy predictions 2022

We no longer rely on the Internet just for entertainment or chatting with friends. Global connectivity underpins the most basic functions of our society, such as logistics, government services and banking. Consumers connect to businesses via instant messengers and order food delivery instead of...

Dell Technologies Dell PowerScale OneFS 日志信息泄露漏洞

Dell PowerScale OneFS is an operating system from Dell Technologies, Inc. Dell EMC PowerScale OneFS version 8.1.2 contains an information disclosure vulnerability that could be exploited by an attacker with ISIPRIVLOGINSSH and ISIPRIVLOGINCONSOLE privileges to access sensitive information in log...

CVE-2020-4545

creationtimestamp| type| source ---|---|--- 2021-11-19 09:41:16+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1724 2026-09-01 17:01:11+00:00| seen| https://t.me/cissp/1534 2026-09-02 01:05:01+00:00| seen| https://t.me/cissp/1534 2026-09-12 01:00:05+00:00|...

AI-driven adaptive protection against human-operated ransomware

In human-operated ransomware attacks, threat actors use predictable methods to enter a device but eventually rely on hands-on-keyboard activities to move inside a network. To fortify our existing cloud-delivered automated protection against complex attacks like human-operated ransomware, we...

Dell Technologies Dell PowerScale OneFS 安全漏洞

Dell Technologies Dell PowerScale OneFS is an operating system from Dell Technologies, Inc. Dell EMC PowerScale OneFS versions 9.1.0, 9.2.0.0, 9.2.1.0 contain a security vulnerability that could be exploited by an attacker to gain access to information via directory listings...

Invest in These 3 Key Security Technologies to Fight Ransomware

A recent survey by Fortinet revealed that two-thirds of organizations had been the target of at least one ransomware attack – and 85 percent are more concerned about a ransomware attack than any other form of cyberattack. And, the evolving threat landscape is cited as one of the top challenges in...

HTML smuggling surges: Highly evasive loader technique increasingly used in banking malware, targeted attacks

HTML smuggling, a highly evasive malware delivery technique that leverages legitimate HTML5 and JavaScript features, is increasingly used in email campaigns that deploy banking malware, remote access Trojans RATs, and other payloads related to targeted attacks. Notably, this technique was observe...

SSL/TLS: Known Compromised/Static Certificate Detection

The remote SSL/TLS service is using an SSL/TLS certificate which is known to be compromised/static e.g. known private keys, used by malware, etc. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Threat actor DEV-0322 exploiting ZOHO ManageEngine ADSelfService Plus

Microsoft has detected exploits being used to compromise systems running the ZOHO ManageEngine ADSelfService Plus software versions vulnerable to CVE-2021-40539 in a targeted campaign. Microsoft Threat Intelligence Center MSTIC attributes this campaign with high confidence to DEV-0322, a group...

Threat actor DEV-0322 exploiting ZOHO ManageEngine ADSelfService Plus

Microsoft has detected exploits being used to compromise systems running the ZOHO ManageEngine ADSelfService Plus software versions vulnerable to CVE-2021-40539 in a targeted campaign. Microsoft Threat Intelligence Center MSTIC attributes this campaign with high confidence to DEV-0322, a group...

CVE-2022-1337

creationtimestamp| type| source ---|---|--- 2021-11-08 11:07:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4701...

US Bans Trade With Pegasus Spyware Maker

NSO Group – the Israeli-based maker of the notorious, military-grade Pegasus spyware that’s been linked to cyberattacks against dissidents, activists and NGOs and murders of journalists at the hands of repressive regimes – has been blacklisted by the United States. NSO Group is one of four spywar...

CVE-2021-30864

creationtimestamp| type| source ---|---|--- 2021-11-04 11:12:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4675 2026-07-29 12:02:51+00:00| seen| https://t.me/reverseame/1757 2026-07-30 00:02:41+00:00| seen| https://t.me/reverseame/1757 2026-08-03 05:00:04+00:00|...

US Sanctions Pegasus-maker NSO Group and 3 Others For Selling Spyware

The U.S. Commerce Department on Wednesday added four companies, including Israel-based spyware companies NSO Group and Candiru, to a list of entities engaging in "malicious cyber activities." The agency said the two companies were added to the list based on evidence that "these entities developed...

Lark Technologies: Able to steal private files by manipulating response using Auto Reply function of Lark

A IDOR Insecure Direct Object Reference vulnerability was found within the "AutoReply" functions of Lark. This vulnerability could have allowed malicious users to fetch the files of other users if they knew the specific file ID which was an alphanumeric value. We thank @imrannisar for reporting...

CVE-2021-35218

creationtimestamp| type| source ---|---|--- 2021-10-30 14:25:18+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4633 2026-09-01 17:00:37+00:00| seen| https://t.me/cissp/4702 2026-09-02 01:04:21+00:00| seen| https://t.me/cissp/4702 2026-09-10 16:00:05+00:00|...

mercurytechnologies-mn.com Improper Access Control vulnerability OBB-2206794

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2020-36489

Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting XSS vulnerability in the devicename parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the devicename information...

CVE-2020-36489

Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting XSS vulnerability in the devicename parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the devicename information...

CVE-2020-23041

Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting XSS vulnerability in the path parameter of the list and download exception-handling. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted GET request...