https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 20 Aug 2026 20:03:40 +0000 https://vulnerability.circl.lu/sighting/aba31054-c2ac-4a47-b5b0-ca0fac1502ed/export {"uuid": "aba31054-c2ac-4a47-b5b0-ca0fac1502ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260812", "content": "", "creation_timestamp": "2026-08-12T04:45:08.000196Z"} {"uuid": "aba31054-c2ac-4a47-b5b0-ca0fac1502ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260812", "content": "", "creation_timestamp": "2026-08-12T04:45:08.000196Z"} https://vulnerability.circl.lu/sighting/aba31054-c2ac-4a47-b5b0-ca0fac1502ed/export Wed, 12 Aug 2026 04:45:08 +0000 https://vulnerability.circl.lu/sighting/f3eee27b-cf88-4c96-bc32-41e92ac0bf20/export {"uuid": "f3eee27b-cf88-4c96-bc32-41e92ac0bf20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/threatclaw.bsky.social/post/3mss2573h3p2t", "content": "Hard-Coded Passwords in Firewalls: SMBs Must Act Now\n\nCVE-2026-20316 exposes Cisco Secure Firewall Management Center via hard-coded credentials. Learn ATT&CK techniques and SMB detection steps.\n\nhttps://threatclaw.io/en/blog/threat-brief-2026-08-04\n\n#infosec #ThreatDetection #DFIR #CVE", "creation_timestamp": "2026-08-11T07:00:24.152204Z"} {"uuid": "f3eee27b-cf88-4c96-bc32-41e92ac0bf20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/threatclaw.bsky.social/post/3mss2573h3p2t", "content": "Hard-Coded Passwords in Firewalls: SMBs Must Act Now\n\nCVE-2026-20316 exposes Cisco Secure Firewall Management Center via hard-coded credentials. Learn ATT&CK techniques and SMB detection steps.\n\nhttps://threatclaw.io/en/blog/threat-brief-2026-08-04\n\n#infosec #ThreatDetection #DFIR #CVE", "creation_timestamp": "2026-08-11T07:00:24.152204Z"} https://vulnerability.circl.lu/sighting/f3eee27b-cf88-4c96-bc32-41e92ac0bf20/export Tue, 11 Aug 2026 07:00:24 +0000 https://vulnerability.circl.lu/sighting/a6cb8c33-89cf-4501-9dc3-4199824f69f1/export {"uuid": "a6cb8c33-89cf-4501-9dc3-4199824f69f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3msjbhocj5y2z", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-20316: Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-20316", "creation_timestamp": "2026-08-07T19:18:28.185354Z"} {"uuid": "a6cb8c33-89cf-4501-9dc3-4199824f69f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3msjbhocj5y2z", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-20316: Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-20316", "creation_timestamp": "2026-08-07T19:18:28.185354Z"} https://vulnerability.circl.lu/sighting/a6cb8c33-89cf-4501-9dc3-4199824f69f1/export Fri, 07 Aug 2026 19:18:28 +0000 https://vulnerability.circl.lu/sighting/4a82c051-a0dc-4bca-b65b-a3a2547361a5/export {"uuid": "4a82c051-a0dc-4bca-b65b-a3a2547361a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29", "content": "Cisco ha rilasciato aggiornamenti di sicurezza che risolvono molteplici vulnerabilit\u00e0, tra cui 5 con gravit\u00e0 \"critica\" e 11 con gravit\u00e0 \u201calta\u201d, riguardanti vari prodotti. In particolare si evidenziano la CVE-2026-20316 che risulta attivamente sfruttata in rete e la CVE-2026-20200 per la quale \u00e8 disponibile un Proof of Concept (PoC).", "creation_timestamp": "2026-08-07T04:00:38.865092Z"} {"uuid": "4a82c051-a0dc-4bca-b65b-a3a2547361a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29", "content": "Cisco ha rilasciato aggiornamenti di sicurezza che risolvono molteplici vulnerabilit\u00e0, tra cui 5 con gravit\u00e0 \"critica\" e 11 con gravit\u00e0 \u201calta\u201d, riguardanti vari prodotti. In particolare si evidenziano la CVE-2026-20316 che risulta attivamente sfruttata in rete e la CVE-2026-20200 per la quale \u00e8 disponibile un Proof of Concept (PoC).", "creation_timestamp": "2026-08-07T04:00:38.865092Z"} https://vulnerability.circl.lu/sighting/4a82c051-a0dc-4bca-b65b-a3a2547361a5/export Fri, 07 Aug 2026 04:00:38 +0000 https://vulnerability.circl.lu/sighting/feb619dc-506a-4f7d-9a16-f984fcbd61de/export {"uuid": "feb619dc-506a-4f7d-9a16-f984fcbd61de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29", "content": "", "creation_timestamp": "2026-08-06T12:15:28.420618Z"} {"uuid": "feb619dc-506a-4f7d-9a16-f984fcbd61de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29", "content": "", "creation_timestamp": "2026-08-06T12:15:28.420618Z"} https://vulnerability.circl.lu/sighting/feb619dc-506a-4f7d-9a16-f984fcbd61de/export Thu, 06 Aug 2026 12:15:28 +0000 https://vulnerability.circl.lu/sighting/aabe34dd-236f-425a-84a6-86f9519d9e98/export {"uuid": "aabe34dd-236f-425a-84a6-86f9519d9e98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117043564090502141", "content": "Broadcom has addressed several vulnerabilities published yesterday, all of them ranked high-severity https://support.broadcom.com/web/ecx/security-advisory #Broadcom \nCisco has a new advisory for a critical vulnerability that was published yesterday:\nCRITICAL: CVE-2026-20079: Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability \nThis addresses a vulnerability that was first published on July 29:\nHigh: CVE-2026-20316: Cisco Secure Firewall Management Center Software Static Credential Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh @TalosSecurity #Cisco #infosec #vulnerability", "creation_timestamp": "2026-08-05T15:17:36.520415Z"} {"uuid": "aabe34dd-236f-425a-84a6-86f9519d9e98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117043564090502141", "content": "Broadcom has addressed several vulnerabilities published yesterday, all of them ranked high-severity https://support.broadcom.com/web/ecx/security-advisory #Broadcom \nCisco has a new advisory for a critical vulnerability that was published yesterday:\nCRITICAL: CVE-2026-20079: Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability \nThis addresses a vulnerability that was first published on July 29:\nHigh: CVE-2026-20316: Cisco Secure Firewall Management Center Software Static Credential Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh @TalosSecurity #Cisco #infosec #vulnerability", "creation_timestamp": "2026-08-05T15:17:36.520415Z"} https://vulnerability.circl.lu/sighting/aabe34dd-236f-425a-84a6-86f9519d9e98/export Wed, 05 Aug 2026 15:17:36 +0000 https://vulnerability.circl.lu/sighting/d586554a-e4f0-4dfa-9cf2-57b97ed60870/export {"uuid": "d586554a-e4f0-4dfa-9cf2-57b97ed60870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3msaae2wvkr26", "content": "Daily IT Security Digest \u2014 2026-08-04\nvulnerabilities: CVE-2026-20316 in Secure Firewall Management Center (FMC) exposes static credentials that could leak sensitive data, and CVE-2026-20262 in Catalyst SD-WAN Manager allows write-access attackers to escalate to root via crafted HTTP requests. Both", "creation_timestamp": "2026-08-04T05:03:41.887207Z"} {"uuid": "d586554a-e4f0-4dfa-9cf2-57b97ed60870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3msaae2wvkr26", "content": "Daily IT Security Digest \u2014 2026-08-04\nvulnerabilities: CVE-2026-20316 in Secure Firewall Management Center (FMC) exposes static credentials that could leak sensitive data, and CVE-2026-20262 in Catalyst SD-WAN Manager allows write-access attackers to escalate to root via crafted HTTP requests. Both", "creation_timestamp": "2026-08-04T05:03:41.887207Z"} https://vulnerability.circl.lu/sighting/d586554a-e4f0-4dfa-9cf2-57b97ed60870/export Tue, 04 Aug 2026 05:03:41 +0000 https://vulnerability.circl.lu/sighting/328b497e-d7b1-4e67-af18-62a8d1b3dd65/export {"uuid": "328b497e-d7b1-4e67-af18-62a8d1b3dd65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "exploited", "source": "https://t.me/kasperskyb2b/2275", "content": "\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83d\udfe2\u0420\u0430\u0437\u0431\u043e\u0440 \u043d\u043e\u0432\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439 APT GOFFEE, \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u0432\u0448\u0435\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0432 \u0420\u0424 \u0438 \u0420\u0411. \u0421\u0440\u0435\u0434\u0438 \u043d\u043e\u0432\u044b\u0445 TTPs: \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 Mythic, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u0432 Linux-\u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u0445, \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 User-Agent (!), \u0438 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 \u0445\u043e\u0441\u0442\u0430\u0445 \u0447\u0435\u0440\u0435\u0437 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (!!). \n\n\ud83d\udd35\u0428\u043f\u0438\u043e\u043d\u0441\u043a\u0430\u044f APT \u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430 Gunra \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 0day \u0432 \u044e\u0436\u043d\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u043e\u043c \u041f\u041e \u0434\u043b\u044f \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0430\u0442\u0430\u043a\u0443\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u0437 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u043a\u0442\u043e\u0440\u0430, \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u0438. \u0427\u0435\u0440\u0435\u0437 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0432\u043e\u0434\u043e\u043f\u043e\u0439 \u0438 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u0431\u044d\u043a\u0434\u043e\u0440\u044b Struggle \u0438 Brandoor. \n\n\ud83d\udfe3\u0414\u0432\u0430 \u043d\u043e\u0432\u044b\u0445 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432, OctLurk \u0438 SilkLurk, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f, \u043f\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u044b, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432 \u0426\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u043e\u0439 \u0410\u0437\u0438\u0438 \u0438 \u043d\u0430 \u0411\u043b\u0438\u0436\u043d\u0435\u043c \u0412\u043e\u0441\u0442\u043e\u043a\u0435. \u041e\u0431\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 DLL sideloading \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u044e\u0442 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0445\u043e\u0441\u0442\u0430 \u043a\u043b\u044e\u0447\u0430\u043c\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0437\u0446\u044b \u043d\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0432\u043d\u0435 \u043c\u0430\u0448\u0438\u043d\u044b \u0436\u0435\u0440\u0442\u0432\u044b. \n\n\ud83d\udfe3\u0413\u0440\u0443\u043f\u043f\u0430 Toy Ghouls \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u043e\u0442 LockBit \u0438 Babuk \u0432 \u043f\u043e\u043b\u044c\u0437\u0443 GenieLocker \u2014 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430 \u0441\u043e \u0441\u0431\u043e\u0440\u043a\u0430\u043c\u0438 \u0434\u043b\u044f Windows, Linux \u0438 ESXi, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043f\u0440\u043e\u0442\u0438\u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u0438, \u0441\u0442\u0440\u043e\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430, \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u043a\u0442\u043e\u0440\u0430, \u0440\u043e\u0437\u043d\u0438\u0446\u044b \u0438 \u0418\u0422. \n\n\ud83d\udd35\u0420\u0430\u0437\u0431\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 APT SilverFox, \u0441\u043b\u0443\u0445\u0438 \u043e \u0441\u043c\u0435\u0440\u0442\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043f\u0440\u0435\u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d\u044b. \u041e\u043d\u0430 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b\u0430 \u0412\u041f\u041e ValleyRAT \u0432 \u044f\u043f\u043e\u043d\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u0412 \u0430\u0442\u0430\u043a\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438\u0441\u044c \u0430\u0436 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u044f\u0434\u0440\u0430 \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f EDR, \u0430 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0446\u0435\u043b\u0438\u043a\u043e\u043c \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0441\u044c \u0432 \u0440\u0435\u0435\u0441\u0442\u0440\u0435. \n\n\ud83d\udfe3\u041d\u0430\u0448\u043b\u043e\u0441\u044c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 (\u043a\u043e\u0441\u0432\u0435\u043d\u043d\u043e\u0435) \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u0441\u0432\u044f\u0437\u0438 \u0437\u0430\u0433\u0430\u0434\u043e\u0447\u043d\u043e\u0433\u043e \u0412\u041f\u041e Angry Spark, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435, \u0441 \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 \u00ab\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0422\u0440\u0438\u0430\u043d\u0433\u0443\u043b\u044f\u0446\u0438\u044f\u00bb (\u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u044b \u0442\u043e\u0436\u0435 \u043f\u0438\u0441\u0430\u043b\u0438, \u043d\u043e \u0432 2023 \u0433\u043e\u0434\u0443).\n\n\ud83d\udd35\u0410\u043d\u0430\u043b\u0438\u0437 \u043d\u043e\u0432\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 APT Mirage Kitten, \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0430\u044d\u0440\u043e\u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0442\u0440\u0430\u0441\u043b\u044c, \u043e\u0431\u043e\u0440\u043e\u043d\u043a\u0443, \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0439 \u0441\u0435\u043a\u0442\u043e\u0440 \u0438 \u0442\u0435\u043b\u0435\u043a\u043e\u043c \u043d\u0430 \u0411\u043b\u0438\u0436\u043d\u0435\u043c \u0412\u043e\u0441\u0442\u043e\u043a\u0435 \u0438 \u0432 \u0410\u0444\u0440\u0438\u043a\u0435. \u0413\u0440\u0443\u043f\u043f\u0430 \u0441\u043e\u0447\u0435\u0442\u0430\u0435\u0442 \u0431\u044d\u043a\u0434\u043e\u0440 NightLedger, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0439 \u0447\u0435\u0440\u0435\u0437 DLL hijacking, \u0441 \u0434\u0432\u0443\u043c\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f WebSocket, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u0432\u043e\u0434\u044f\u0442 \u0442\u0440\u0430\u0444\u0438\u043a \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u043e\u043a\u0441\u0438. \n\n\ud83d\udd35Anthropic \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0432 \u0436\u0430\u043d\u0440\u0435 #metoo \u0438 \u043e\u0442\u0447\u0438\u0442\u0430\u043b\u0430\u0441\u044c \u043e \u0442\u0440\u0451\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445, \u043a\u043e\u0433\u0434\u0430 \u0435\u0451 \u043c\u043e\u0434\u0435\u043b\u0438 \u0432\u044b\u0445\u043e\u0434\u0438\u043b\u0438 \u0438\u0437 \u00ab\u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445\u00bb \u0441\u0440\u0435\u0434 \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u0438\u0441\u043f\u044b\u0442\u0430\u043d\u0438\u0439 \u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439. \u041e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u00ab\u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044f\u00bb \u0441\u0432\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u043a \u043f\u0440\u043e\u043c\u043f\u0442\u0443, \u0441\u043e\u043e\u0431\u0449\u0430\u0432\u0448\u0435\u043c\u0443 \u043c\u043e\u0434\u0435\u043b\u044f\u043c, \u0447\u0442\u043e \u0443 \u043d\u0438\u0445 \u043d\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442. \n\n\ud83d\udfe3\u0420\u0430\u0437\u0431\u043e\u0440 CoreRAT, \u043d\u043e\u0432\u043e\u0433\u043e \u0442\u0440\u043e\u044f\u043d\u0446\u0430 APT Core Werewolf. \n\n\ud83d\udd35\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Azure Cosmos DB Gremlin API \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u0430 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u043b\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c primary key \u0434\u043b\u044f \u043b\u044e\u0431\u043e\u0439 \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Cosmos DB. \ud83e\udd2f\n\n\ud83d\udfe0\u041e\u0431\u0437\u043e\u0440 Vanta Stealer \u2014 Python-\u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440\u0430, \u043f\u043e\u0445\u0438\u0449\u0430\u044e\u0449\u0435\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, cookies, \u043f\u043b\u0430\u0442\u0451\u0436\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u043e\u043a\u0435\u043d\u044b, \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u044b, \u0441\u043d\u0438\u043c\u043a\u0438 \u0441 \u0432\u0435\u0431-\u043a\u0430\u043c\u0435\u0440\u044b \u0438 seed-\u0444\u0440\u0430\u0437\u044b \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432. \n\n\ud83d\udd35CVE-2026-20316 \u2014 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u044b\u0435 \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 Cisco Secure Firewall Management Center, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #APT @\u041f2\u0422", "creation_timestamp": "2026-08-04T00:00:43.393485Z"} {"uuid": "328b497e-d7b1-4e67-af18-62a8d1b3dd65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "exploited", "source": "https://t.me/kasperskyb2b/2275", "content": "\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83d\udfe2\u0420\u0430\u0437\u0431\u043e\u0440 \u043d\u043e\u0432\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439 APT GOFFEE, \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u0432\u0448\u0435\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0432 \u0420\u0424 \u0438 \u0420\u0411. \u0421\u0440\u0435\u0434\u0438 \u043d\u043e\u0432\u044b\u0445 TTPs: \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 Mythic, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u0432 Linux-\u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u0445, \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 User-Agent (!), \u0438 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 \u0445\u043e\u0441\u0442\u0430\u0445 \u0447\u0435\u0440\u0435\u0437 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (!!). \n\n\ud83d\udd35\u0428\u043f\u0438\u043e\u043d\u0441\u043a\u0430\u044f APT \u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430 Gunra \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 0day \u0432 \u044e\u0436\u043d\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u043e\u043c \u041f\u041e \u0434\u043b\u044f \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0430\u0442\u0430\u043a\u0443\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u0437 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u043a\u0442\u043e\u0440\u0430, \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u0438. \u0427\u0435\u0440\u0435\u0437 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0432\u043e\u0434\u043e\u043f\u043e\u0439 \u0438 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u0431\u044d\u043a\u0434\u043e\u0440\u044b Struggle \u0438 Brandoor. \n\n\ud83d\udfe3\u0414\u0432\u0430 \u043d\u043e\u0432\u044b\u0445 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432, OctLurk \u0438 SilkLurk, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f, \u043f\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u044b, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432 \u0426\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u043e\u0439 \u0410\u0437\u0438\u0438 \u0438 \u043d\u0430 \u0411\u043b\u0438\u0436\u043d\u0435\u043c \u0412\u043e\u0441\u0442\u043e\u043a\u0435. \u041e\u0431\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 DLL sideloading \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u044e\u0442 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0445\u043e\u0441\u0442\u0430 \u043a\u043b\u044e\u0447\u0430\u043c\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0437\u0446\u044b \u043d\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0432\u043d\u0435 \u043c\u0430\u0448\u0438\u043d\u044b \u0436\u0435\u0440\u0442\u0432\u044b. \n\n\ud83d\udfe3\u0413\u0440\u0443\u043f\u043f\u0430 Toy Ghouls \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u043e\u0442 LockBit \u0438 Babuk \u0432 \u043f\u043e\u043b\u044c\u0437\u0443 GenieLocker \u2014 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430 \u0441\u043e \u0441\u0431\u043e\u0440\u043a\u0430\u043c\u0438 \u0434\u043b\u044f Windows, Linux \u0438 ESXi, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043f\u0440\u043e\u0442\u0438\u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u0438, \u0441\u0442\u0440\u043e\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430, \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u043a\u0442\u043e\u0440\u0430, \u0440\u043e\u0437\u043d\u0438\u0446\u044b \u0438 \u0418\u0422. \n\n\ud83d\udd35\u0420\u0430\u0437\u0431\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 APT SilverFox, \u0441\u043b\u0443\u0445\u0438 \u043e \u0441\u043c\u0435\u0440\u0442\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043f\u0440\u0435\u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d\u044b. \u041e\u043d\u0430 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b\u0430 \u0412\u041f\u041e ValleyRAT \u0432 \u044f\u043f\u043e\u043d\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u0412 \u0430\u0442\u0430\u043a\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438\u0441\u044c \u0430\u0436 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u044f\u0434\u0440\u0430 \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f EDR, \u0430 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0446\u0435\u043b\u0438\u043a\u043e\u043c \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0441\u044c \u0432 \u0440\u0435\u0435\u0441\u0442\u0440\u0435. \n\n\ud83d\udfe3\u041d\u0430\u0448\u043b\u043e\u0441\u044c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 (\u043a\u043e\u0441\u0432\u0435\u043d\u043d\u043e\u0435) \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u0441\u0432\u044f\u0437\u0438 \u0437\u0430\u0433\u0430\u0434\u043e\u0447\u043d\u043e\u0433\u043e \u0412\u041f\u041e Angry Spark, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435, \u0441 \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 \u00ab\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0422\u0440\u0438\u0430\u043d\u0433\u0443\u043b\u044f\u0446\u0438\u044f\u00bb (\u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u044b \u0442\u043e\u0436\u0435 \u043f\u0438\u0441\u0430\u043b\u0438, \u043d\u043e \u0432 2023 \u0433\u043e\u0434\u0443).\n\n\ud83d\udd35\u0410\u043d\u0430\u043b\u0438\u0437 \u043d\u043e\u0432\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 APT Mirage Kitten, \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0430\u044d\u0440\u043e\u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0442\u0440\u0430\u0441\u043b\u044c, \u043e\u0431\u043e\u0440\u043e\u043d\u043a\u0443, \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0439 \u0441\u0435\u043a\u0442\u043e\u0440 \u0438 \u0442\u0435\u043b\u0435\u043a\u043e\u043c \u043d\u0430 \u0411\u043b\u0438\u0436\u043d\u0435\u043c \u0412\u043e\u0441\u0442\u043e\u043a\u0435 \u0438 \u0432 \u0410\u0444\u0440\u0438\u043a\u0435. \u0413\u0440\u0443\u043f\u043f\u0430 \u0441\u043e\u0447\u0435\u0442\u0430\u0435\u0442 \u0431\u044d\u043a\u0434\u043e\u0440 NightLedger, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0439 \u0447\u0435\u0440\u0435\u0437 DLL hijacking, \u0441 \u0434\u0432\u0443\u043c\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f WebSocket, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u0432\u043e\u0434\u044f\u0442 \u0442\u0440\u0430\u0444\u0438\u043a \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u043e\u043a\u0441\u0438. \n\n\ud83d\udd35Anthropic \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0432 \u0436\u0430\u043d\u0440\u0435 #metoo \u0438 \u043e\u0442\u0447\u0438\u0442\u0430\u043b\u0430\u0441\u044c \u043e \u0442\u0440\u0451\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445, \u043a\u043e\u0433\u0434\u0430 \u0435\u0451 \u043c\u043e\u0434\u0435\u043b\u0438 \u0432\u044b\u0445\u043e\u0434\u0438\u043b\u0438 \u0438\u0437 \u00ab\u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445\u00bb \u0441\u0440\u0435\u0434 \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u0438\u0441\u043f\u044b\u0442\u0430\u043d\u0438\u0439 \u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439. \u041e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u00ab\u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044f\u00bb \u0441\u0432\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u043a \u043f\u0440\u043e\u043c\u043f\u0442\u0443, \u0441\u043e\u043e\u0431\u0449\u0430\u0432\u0448\u0435\u043c\u0443 \u043c\u043e\u0434\u0435\u043b\u044f\u043c, \u0447\u0442\u043e \u0443 \u043d\u0438\u0445 \u043d\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442. \n\n\ud83d\udfe3\u0420\u0430\u0437\u0431\u043e\u0440 CoreRAT, \u043d\u043e\u0432\u043e\u0433\u043e \u0442\u0440\u043e\u044f\u043d\u0446\u0430 APT Core Werewolf. \n\n\ud83d\udd35\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Azure Cosmos DB Gremlin API \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u0430 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u043b\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c primary key \u0434\u043b\u044f \u043b\u044e\u0431\u043e\u0439 \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Cosmos DB. \ud83e\udd2f\n\n\ud83d\udfe0\u041e\u0431\u0437\u043e\u0440 Vanta Stealer \u2014 Python-\u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440\u0430, \u043f\u043e\u0445\u0438\u0449\u0430\u044e\u0449\u0435\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, cookies, \u043f\u043b\u0430\u0442\u0451\u0436\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u043e\u043a\u0435\u043d\u044b, \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u044b, \u0441\u043d\u0438\u043c\u043a\u0438 \u0441 \u0432\u0435\u0431-\u043a\u0430\u043c\u0435\u0440\u044b \u0438 seed-\u0444\u0440\u0430\u0437\u044b \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432. \n\n\ud83d\udd35CVE-2026-20316 \u2014 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u044b\u0435 \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 Cisco Secure Firewall Management Center, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #APT @\u041f2\u0422", "creation_timestamp": "2026-08-04T00:00:43.393485Z"} https://vulnerability.circl.lu/sighting/328b497e-d7b1-4e67-af18-62a8d1b3dd65/export Tue, 04 Aug 2026 00:00:43 +0000 https://vulnerability.circl.lu/sighting/7e3b98c1-140e-465a-b622-8d57bbaa4c84/export {"uuid": "7e3b98c1-140e-465a-b622-8d57bbaa4c84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3ms6wctu75b25", "content": "\ud83d\udce2 CISA WARNING: A static credential flaw in Cisco Secure Firewall Management Center (CVE-2026-20316) is actively exploited. The flaw allows unauthorized access. CISA adds it to KEV catalog, mandating federal action. #CVE202620316 #Cisco #KEV\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-03T16:31:23.358431Z"} {"uuid": "7e3b98c1-140e-465a-b622-8d57bbaa4c84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3ms6wctu75b25", "content": "\ud83d\udce2 CISA WARNING: A static credential flaw in Cisco Secure Firewall Management Center (CVE-2026-20316) is actively exploited. The flaw allows unauthorized access. CISA adds it to KEV catalog, mandating federal action. #CVE202620316 #Cisco #KEV\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-03T16:31:23.358431Z"} https://vulnerability.circl.lu/sighting/7e3b98c1-140e-465a-b622-8d57bbaa4c84/export Mon, 03 Aug 2026 16:31:23 +0000 https://vulnerability.circl.lu/sighting/d9fa7117-2c6a-4a3f-8ffe-9f05e5859d9d/export {"uuid": "d9fa7117-2c6a-4a3f-8ffe-9f05e5859d9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117032526803268090", "content": "\ud83d\udcf0 CISA Warns of Actively Exploited Cisco Firewall Management Flaw\n\ud83d\udce2 CISA WARNING: A static credential flaw in Cisco Secure Firewall Management Center (CVE-2026-20316) is actively exploited. The flaw allows unauthorized access. CISA adds it to KEV catalog, mandating federal action. #CVE202620316 #Cisco #KEV\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-warns-of-actively-exploited-cisco-firewall-management-flaw/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-03T16:30:41.475988Z"} {"uuid": "d9fa7117-2c6a-4a3f-8ffe-9f05e5859d9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117032526803268090", "content": "\ud83d\udcf0 CISA Warns of Actively Exploited Cisco Firewall Management Flaw\n\ud83d\udce2 CISA WARNING: A static credential flaw in Cisco Secure Firewall Management Center (CVE-2026-20316) is actively exploited. The flaw allows unauthorized access. CISA adds it to KEV catalog, mandating federal action. #CVE202620316 #Cisco #KEV\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-warns-of-actively-exploited-cisco-firewall-management-flaw/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-03T16:30:41.475988Z"} https://vulnerability.circl.lu/sighting/d9fa7117-2c6a-4a3f-8ffe-9f05e5859d9d/export Mon, 03 Aug 2026 16:30:41 +0000