{"vulnerability": "CVE-2026-20133", "sightings": [{"uuid": "fbff76b4-56c9-47ed-8ee0-f8babb321531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/2/kritische-sicherheitslucken-in-cisco-catalyst-sd-wan-aktiv-ausgenutzt-updates-verfugbar", "content": "", "creation_timestamp": "2026-02-26T11:58:53.000000Z"}, {"uuid": "b65d23dc-dcb7-40f0-88f9-2c13e2b42dbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfp5rtagrx26", "content": "", "creation_timestamp": "2026-02-25T17:00:08.855640Z"}, {"uuid": "70a56bc0-383d-491c-ab9d-34572e59a6e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotti-cisco", "content": "", "creation_timestamp": "2026-02-25T17:29:05.000000Z"}, {"uuid": "3140ed89-6205-462d-ba8d-ee7d3b7740b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-cisco-catalyst-sd-wan-tuotteissa", "content": "", "creation_timestamp": "2026-02-25T18:43:06.000000Z"}, {"uuid": "121f4d2b-3518-4234-9d99-062cebed07ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/b24f0b20-207c-4881-af91-eb1d15b224ba", "content": "", "creation_timestamp": "2026-02-25T16:34:22.000000Z"}, {"uuid": "ec543529-b40f-489c-a415-d69e0c25fadf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://t.me/kasperskyb2b/2151", "content": "\ud83d\udd25 \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83e\udeb2 \u0420\u0430\u0437\u0431\u043e\u0440 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439 \u0438 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u043e\u0432 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Geo Likho, \u0441 2024 \u0433\u043e\u0434\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0420\u0424 \u0438 \u0420\u0411 \u0438 \u0444\u043e\u043a\u0443\u0441\u0438\u0440\u0443\u044e\u0449\u0435\u0439\u0441\u044f \u043d\u0430 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u044f\u0445 \u0430\u0432\u0438\u0430\u0446\u0438\u0438 \u0438 \u0432\u043e\u0434\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u0430. \u041f\u043e\u0434 \u043a\u0430\u0436\u0434\u0443\u044e \u0436\u0435\u0440\u0442\u0432\u0443 \u0441\u043e\u0437\u0434\u0430\u044e\u0442\u0441\u044f \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u0446\u0438\u0438 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u043e\u0432, \u0430 \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0438\u0445 \u0447\u0435\u0440\u0435\u0437 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433.\n\n\ud83d\udd35\u0423\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Cisco Firepower \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445 UAT-4356 (Arcanedoor) \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0412\u041f\u041e FIRESTARTER. \u0414\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 CVE-2025-20333 \u0438 -20362, \u0430 \u043d\u0430 \u0440\u0430\u043d\u0435\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0436\u0435\u043b\u0435\u0437\u043a\u0430\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u044e\u0442\u0441\u044f \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043a\u043e \u0445\u043e\u0440\u043e\u0448\u043e, \u0447\u0442\u043e \u0436\u0435\u0440\u0442\u0432\u0430\u043c \u043e\u0434\u043d\u043e\u0437\u043d\u0430\u0447\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043f\u0435\u0440\u0435\u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.  \u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u0438\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u044b\u0439 \u0442\u0440\u0451\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 Cisco SD-WAN \u2014 \u043a \u0441\u043f\u0438\u0441\u043a\u0443 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430\u0441\u044c CVE-2026-20133, \u043d\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b.\n\n\u26a1\ufe0f \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0437\u0430\u0433\u0430\u0434\u043e\u0447\u043d\u043e\u0433\u043e \u0438 \u043e\u0447\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0433\u043e \u0412\u041f\u041e Angry Spark, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u043c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0432 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 \u0438 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u0441 \u0446\u0435\u043b\u044c\u044e \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430. \u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e \u044d\u0442\u043e \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043a\u043e\u043c\u043f\u0430\u043a\u0442\u043d\u044b\u0439 25-\u043a\u0438\u043b\u043e\u0431\u0430\u0439\u0442\u043d\u044b\u0439 \u0438\u043c\u043f\u043b\u0430\u043d\u0442, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u0441\u0442\u0435\u0433\u0430\u043d\u043e\u0433\u0440\u0430\u0444\u0438\u044e, \u0441\u0430\u043c\u043e\u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0435\u043d\u0438\u0435 \u043f\u043e \u0442\u0430\u0439\u043c-\u0430\u0443\u0442\u0443, \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 TLS, \u043e\u0431\u0444\u0443\u0441\u043a\u0430\u0446\u0438\u044e \u043d\u0430 \u0431\u0430\u0437\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0438 \u0432\u0441\u0435 \u043c\u044b\u0441\u043b\u0438\u043c\u044b\u0435 \u0430\u043d\u0442\u0438\u043e\u0442\u043b\u0430\u0434\u043e\u0447\u043d\u044b\u0435 \u0442\u0440\u044e\u043a\u0438, \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0441\u0447\u0451\u0442\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434, \u043f\u0440\u0438\u0441\u043b\u0430\u043d\u043d\u044b\u0439 \u0441 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u043e\u0442\u0434\u0430\u043b.\n\n\ud83d\udfe2 \u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442\u0441\u044f \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u2014 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b Bitwarden CLI \u0438 Docker-\u043e\u0431\u0440\u0430\u0437\u044b Checkmarx KICS. \u0410\u0442\u0430\u043a\u0438 \u0432 \u0441\u0442\u0438\u043b\u0435 TeamPCP \u0438 CanisterWorm \u043c\u043d\u043e\u0436\u0430\u0442\u0441\u044f \u2014 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434 \u0440\u0430\u0437\u0434\u0430\u0447\u0443 \u043f\u043e\u043f\u0430\u043b\u0438 \u043f\u0430\u043a\u0435\u0442\u044b pgserv.\n\n\ud83d\udfe3\u0420\u0430\u0437\u0431\u043e\u0440 \u0434\u0435\u0441\u0442\u0440\u0443\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0412\u041f\u041e LotusWiper, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0431\u044b\u043b\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u043e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0432\u0435\u043d\u0435\u0441\u0443\u044d\u043b\u044c\u0441\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438\u0437 \u0441\u0444\u0435\u0440\u044b \u043a\u043e\u043c\u043c\u0443\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0438 \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u043a\u0438.  \u0421\u0443\u0434\u044f \u043f\u043e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044f\u043c \u041f\u041e, \u043e\u043d\u043e \u0431\u044b\u043b\u043e \u0441\u043e\u0431\u0440\u0430\u043d\u043e \u0441 \u0443\u0447\u0451\u0442\u043e\u043c \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u044b, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443 \u0441 \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35\u0420\u0430\u0437\u0431\u043e\u0440 TTPs \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 UNC6692, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u0441\u043e\u0446\u0438\u043e\u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u044b\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u0442\u0435\u0445\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438. \u0426\u0435\u043b\u044c\u044e \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0430\u0436\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043d\u043e \u043c\u043e\u0442\u0438\u0432\u0430\u0446\u0438\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u043d\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0430.\n\n\ud83d\udd34\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 Linux-\u0432\u0435\u0440\u0441\u0438\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0412\u041f\u041e GoGra, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 Harvester \u0432 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0446\u0435\u043b\u0438 \u0432 \u0418\u043d\u0434\u0438\u0438 \u0438 \u0410\u0444\u0433\u0430\u043d\u0438\u0441\u0442\u0430\u043d\u0435.\n\n\ud83d\udfe3\u0410\u043d\u0430\u043b\u0438\u0437 \u043d\u043e\u0432\u044b\u0445 \u043e\u0431\u0440\u0430\u0437\u0446\u043e\u0432 ValleyRAT/Winos/PoisonMouse, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445  \u043d\u0430 \u043a\u0438\u0442\u0430\u0435\u0433\u043e\u0432\u043e\u0440\u044f\u0449\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \n\n\ud83d\udfe2\u0420\u0430\u0437\u0431\u043e\u0440 \u0442\u0435\u0445\u043d\u0438\u043a \u043f\u0440\u043e\u043c\u043f\u0442-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439, \u0443\u0436\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u043d\u0430 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u0430\u0445 \u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0418\u0418-\u0430\u0433\u0435\u043d\u0442\u043e\u0432, \u0447\u0438\u0442\u0430\u044e\u0449\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\n\ud83c\udf4f \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0412\u041f\u041e FakeWallet, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u043e\u0441\u044c \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0438 \u0432 Apple App Store \u043f\u043e\u0434 \u0432\u0438\u0434\u043e\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432.\n\n\ud83d\udfe1\u0411\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 NFC Relay \u0434\u043e\u0431\u0440\u0430\u043b\u0438\u0441\u044c \u0434\u043e \u0418\u0441\u043f\u0430\u043d\u0438\u0438 \u2014 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u043e\u043e\u0440\u0443\u0436\u0438\u043b\u0438\u0441\u044c MaaS Devil NFC.\n\n\ud83d\udd34\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0430\u044f \u0442\u0430\u043a\u0442\u0438\u043a\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u2014 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0437\u0430\u0448\u0438\u0442\u0430 \u0432 wav-\u0444\u0430\u0439\u043b\u0435. \u0417\u0432\u0443\u0447\u0438\u0442 \u0442\u0430\u043a \u0441\u0435\u0431\u0435 \ud83e\udd2a \n\n\ud83d\udc40 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0434\u0432\u0443\u0445 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 \u0438 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0441\u043b\u0435\u0436\u043a\u0438 \u0437\u0430 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f\u043c\u0438 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u043f\u0435\u0440\u0441\u043e\u043d. \u041f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0430\u0441\u044c \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u0432 \u0430\u0442\u0430\u043a \u2014 \u043e\u0442 SS7 \u0434\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 SMS \u0441 SIM-\u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c\u0438.\n\n\ud83d\udde3 \u0418\u0411-\u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u0434\u0432\u0443\u0445 \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u0441\u0442\u0440\u0430\u043d \u2014 \u043e\u0442 \u042f\u043f\u043e\u043d\u0438\u0438 \u0434\u043e \u0418\u0441\u043f\u0430\u043d\u0438\u0438 \u2014 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e\u0431 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0431\u044b\u0442\u043e\u0432\u044b\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432 \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 IoT \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c\u0438 APT.  \u0421\u0430\u043c\u0430 \u0443\u0433\u0440\u043e\u0437\u0430 \u043d\u0435 \u043d\u043e\u0432\u0430, \u043d\u043e \u0435\u0451 \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u0432\u0438\u0434\u0438\u043c\u043e \u0441\u0442\u0430\u043b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0431\u043e\u043b\u044c\u0448\u0438\u043c. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0435\u043d \u0440\u0430\u0437\u0434\u0435\u043b \u0441 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435, \u0433\u0434\u0435 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442 \u0432 \u0447\u0438\u0441\u043b\u0435 \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u0430\u043c IP, \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0442\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udc7b \u041c\u043e\u0449\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 fast16.sys, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0437\u0430 5 \u043b\u0435\u0442 \u0434\u043e Stuxnet \u0438 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u0442\u043e\u0447\u0435\u0447\u043d\u043e\u0439 \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0439 \u0432 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u043e\u043c \u0441\u043e\u0444\u0442\u0435 \u0434\u043b\u044f \u0433\u0438\u0434\u0440\u043e\u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043c\u043e\u0434\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0442\u043e\u043b\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0439 \u0438 \u0442\u043e\u043c\u0443 \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0433\u043e (\u041f\u041e LS-DYNA 970, PKPM, MOHID).  \u042d\u0442\u043e\u0442 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0435\u0439\u0448\u0438\u0439 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0432 \u0443\u0442\u0435\u0447\u043a\u0435 ShadowBrokers, \u0430 \u0442\u043e\u0447\u043d\u0435\u0435 \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u00ab\u0434\u0440\u0443\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e\u00bb \u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u0410\u041d\u0411 \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u044b \u0442\u0440\u043e\u0433\u0430\u0442\u044c. \u041a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043a fast16 \u0432 \u044d\u0442\u043e\u043c \u0441\u043f\u0438\u0441\u043a\u0435:  \u00abNothing to see here \u2013 carry on\u00bb.\n\n#APT #\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 @\u041f2\u0422", "creation_timestamp": "2026-04-27T07:33:04.000000Z"}, {"uuid": "6d775028-a869-41e1-8f13-ce14955411df", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-20133", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3ce3ea70-a19c-4c91-a7fc-bb080fcc7142", "content": "", "creation_timestamp": "2026-04-20T20:00:03.132286Z"}, {"uuid": "bd40f50c-f4bc-433e-b1dc-5ed777699f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-166", "content": "", "creation_timestamp": "2026-04-20T12:43:40.000000Z"}, {"uuid": "12d58819-3e59-4146-bacb-e4b398d05bf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mjyvkabjuj2b", "content": "", "creation_timestamp": "2026-04-21T11:40:06.254723Z"}, {"uuid": "6fac9694-7053-46aa-af6d-2f3a3184ab24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mjyvqnzivk25", "content": "", "creation_timestamp": "2026-04-21T11:43:45.767381Z"}, {"uuid": "2c740ebd-6d34-4791-84f6-35a45d8ec6e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-several-cisco-products-including-cisco-secure", "content": "", "creation_timestamp": "2026-04-21T06:56:53.000000Z"}, {"uuid": "387ef71f-8c96-41be-955b-f99dc344449d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mk2t5iznhq24", "content": "", "creation_timestamp": "2026-04-22T06:02:31.479587Z"}, {"uuid": "68e8e159-0fce-4ffe-9b08-9a3d6a011ce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mk5m3q6rnv2z", "content": "", "creation_timestamp": "2026-04-23T08:34:14.611976Z"}, {"uuid": "215c1286-a320-4966-8c10-fef569730d91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3mk6qgaxqay24", "content": "", "creation_timestamp": "2026-04-23T19:24:22.687856Z"}, {"uuid": "e68d4fd3-7e36-4df4-a6fd-0780139a986c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mkevo53epc2s", "content": "", "creation_timestamp": "2026-04-26T06:14:17.002474Z"}, {"uuid": "11bbdb3b-0bea-4cb6-9ee0-6867c4699028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://bsky.app/profile/LLMs.activitypub.awakari.com.ap.brid.gy/post/3mkg4vqnxjob2", "content": "", "creation_timestamp": "2026-04-26T17:56:29.915137Z"}, {"uuid": "9750238f-2f85-4ac2-9b51-e7e030a97f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://t.me/CyberDispatch/1348", "content": "CISA Adds 8 Actively Exploited Vulnerabilities to KEV Catalog\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) urgently added eight zero-day vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on April 20, 2026, confirming active exploitation across enterprise tools from Cisco, Quest, PaperCut, TeamCity, Kentico, and Zimbra.\n\nKey flaws include three Cisco SD-WAN vulnerabilities\u2014CVE-2026-20127 (authentication bypass), CVE-2022-20775 (privilege escalation), and CVE-2026-20133 (sensitive info exposure)\u2014plus CVE-2025-32975 (CVSS 10.0) in Quest KACE SMA, enabling full user impersonation without credentials.\n\nOthers: CVE-2023-27351 (PaperCut improper auth, CVSS 8.2); CVE-2024-27199 (TeamCity path traversal, CVSS 7.3); CVE-2025-2749 (Kentico path traversal, CVSS 7.2).", "creation_timestamp": "2026-08-29T20:00:17.237664Z"}, {"uuid": "3473de94-b27f-4074-b710-e1b3a8420c3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-012-critical-vulnerability-affecting-cisco-catalyst-sd-wan-cve-2026-20182", "content": "", "creation_timestamp": "2026-05-15T06:03:19.000000Z"}, {"uuid": "4fd37fec-3f2b-49dd-9d82-3bb9da30532f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://t.me/VulnerabilityNews/42060", "content": "CISA Adds Eight Known Exploited Vulnerabilities to Catalog\n\nCISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\u00a0\nCVE-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability\nCVE-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability\nCVE-2025-2749 Kentico Xperience Path Traversal Vulnerability\nCVE-2025-32975 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability\nCVE-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability\nCVE-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability\nCVE-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability\nCVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability\nThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.\u00a0\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\u00a0\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/04/20/cisa-adds-eight-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-08-18T19:00:04.441839Z"}, {"uuid": "5740fd97-33c3-429f-973a-fa55223437cc", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/22386e29-7d59-4755-a2c9-945e06d5c2b0", "content": "", "creation_timestamp": "2026-06-19T12:45:13.049964Z"}, {"uuid": "d461e597-64f4-4544-8244-c2374c9843d1", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/58137f4e-5c1c-4a1d-be5f-f47b44e04ee6", "content": "", "creation_timestamp": "2026-06-23T14:03:39.388797Z"}, {"uuid": "dbb4563b-e973-43db-a597-e9104dd0b949", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42060", "content": "CISA Adds Eight Known Exploited Vulnerabilities to Catalog\n\nCISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\u00a0\nCVE-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability\nCVE-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability\nCVE-2025-2749 Kentico Xperience Path Traversal Vulnerability\nCVE-2025-32975 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability\nCVE-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability\nCVE-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability\nCVE-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability\nCVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability\nThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.\u00a0\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\u00a0\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/04/20/cisa-adds-eight-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-08-19T00:00:09.382547Z"}]}