{"uuid": "071e0fa4-3e46-419e-8e30-dd507e54004d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40444", "type": "seen", "source": "https://t.me/cissp/4310", "content": "As part of an ongoing campaign, cybercriminals are using traffic exchange networks as a broad and fast way to distribute malware (click fraud bots, information stealers, ransomware) disguised as cracked versions of popular applications.\nRead: https://thehackernews.com/2021/09/traffic-exchange-networks-distributing.html\n\nMicrosoft has issued an advisory WARNING its users about a new actively exploited ZERO-DAY vulnerability (CVE-2021-40444 // CVSS score: 8.8) that attackers are using to hijack Windows systems by leveraging weaponized Office documents.\nDetails: https://thehackernews.com/2021/09/new-0-day-attack-targeting-windows.html\n\nHackers exploited a recently disclosed vulnerability in Atlassian's Confluence to break into a Jenkins project infrastructure server.\nhttps://thehackernews.com/2021/09/latest-atlassian-confluence-flaw.html\n\n\"At this time we have no reason to believe that any Jenkins releases, plugins, or source code have been affected\"\nDespite \"no log\" policy, ProtonMail shares an activist's IP address and device type with law enforcement agencies.\nhttps://thehackernews.com/2021/09/protonmail-shares-activists-ip-address.html\nIf Swiss authorities agree to assist foreign agencies, the company has to comply, and it could even be forced to hand over data.", "creation_timestamp": "2026-09-01T17:00:41.003157Z"}