Safari Zero-Day Used in Malicious LinkedIn Campaign

🗓️ 15 Jul 2021 11:04:49Reported by Elizabeth MontalbanoType

Safari zero-day flaw used in LinkedIn campaign to target government officials in Western Europe where attackers exploited the vulnerability before it was addressed. Google researchers also linked additional zero-day flaws found in Chrome and Internet Explorer to a commercial surveillance vendor

Reporter	Title	Published	Views	Family All 311
FreeBSD	chromium -- multiple vulnerabilities	10 Jun 202100:00	–	freebsd
FreeBSD	chromium -- multiple vulnerabilities	2 Mar 202100:00	–	freebsd
ATTACKERKB	CVE-2021-33742	8 Jun 202100:00	–	attackerkb
ATTACKERKB	CVE-2021-30551	15 Jun 202100:00	–	attackerkb
ATTACKERKB	CVE-2021-26411	11 Mar 202100:00	–	attackerkb
ATTACKERKB	CVE-2021-21193	16 Mar 202100:00	–	attackerkb
ATTACKERKB	CVE-2021-21166	9 Mar 202100:00	–	attackerkb
ATTACKERKB	CVE-2021-1879	2 Apr 202100:00	–	attackerkb
AlpineLinux	CVE-2021-21166	9 Mar 202117:46	–	alpinelinux
AlpineLinux	CVE-2021-30551	15 Jun 202121:40	–	alpinelinux

Source	Link
blog	www.blog.google/threat-analysis-group/how-we-protect-users-0-day-attacks/
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
support	www.support.apple.com/en-us/HT212256
threatpost	www.threatpost.com/newsletter-sign/
en	www.en.wikipedia.org/wiki/Same-origin_policy
volexity	www.volexity.com/blog/2021/05/27/suspected-apt29-operation-launches-election-fraud-themed-phishing-campaigns/
threatpost	www.threatpost.com/feds-russia-culprit-solarwinds/162785/
twitter	www.twitter.com/ShaneHuntley/status/1415340345500463113
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

15 Jul 2021 11:04Current

8.4High risk

Vulners AI Score8.4

CVSS 26.8

CVSS 3.18.8

EPSS0.80667

SSVC