{"vulnerability": "cve-2021-3011", "sightings": [{"uuid": "4ad10e3e-93af-479d-8fb6-c13c09bbcefb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30116", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:18.000000Z"}, {"uuid": "859011f0-494c-4aba-bc49-00ad6c9b880e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30116", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "ff6b9aeb-f4df-435a-b3de-913e417bb869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30116", "type": "seen", "source": "MISP/db76bf95-0304-4947-9c92-059abd2d8112", "content": "", "creation_timestamp": "2024-11-14T06:09:15.000000Z"}, {"uuid": "f18e71c5-94de-433d-bea4-a9939bfb9ec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30116", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971053", "content": "", "creation_timestamp": "2024-12-24T20:23:36.080316Z"}, {"uuid": "03507cf1-e231-48aa-85cb-f8c9efce7211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30116", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:54.000000Z"}, {"uuid": "eabf8111-03cc-4059-8251-7dde2ab38f08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30116", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3npnfhd2z2j", "content": "", "creation_timestamp": "2025-10-20T21:02:30.979435Z"}, {"uuid": "e8db29ce-cd05-4f4b-99f3-4766a0fcdd94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30118", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2zlw2gajw2a", "content": "", "creation_timestamp": "2025-10-12T21:02:30.763471Z"}, {"uuid": "299fc1d4-3329-441c-a89c-cb72ecd8ac0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30118", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-30118.yaml", "content": "", "creation_timestamp": "2025-10-11T05:03:59.000000Z"}, {"uuid": "f1f55dd6-fb52-43ce-8353-0aa05e3496e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30118", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-12)", "content": "", "creation_timestamp": "2025-10-12T00:00:00.000000Z"}, {"uuid": "8e42ead5-dd69-4b13-ae70-4316effdd552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30116", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:39.000000Z"}, {"uuid": "2afe882d-1e84-43e1-b0f7-8126ae93d11d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30116", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:00:48.000000Z"}, {"uuid": "3e8a58f1-7149-4e71-81c9-488cb4c957f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30116", "type": "seen", "source": "https://gist.github.com/bhargav-nebulock/a23897d2199bc16d9e67b777e001fda2", "content": "", "creation_timestamp": "2025-12-03T18:59:57.000000Z"}, {"uuid": "1bacadc5-6a04-4631-ae3b-3702e483a14a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30118", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-16)", "content": "", "creation_timestamp": "2025-12-16T00:00:00.000000Z"}, {"uuid": "ae642603-9f64-4331-89d7-7ad02ae1138f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30118", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-18)", "content": "", "creation_timestamp": "2025-12-18T00:00:00.000000Z"}, {"uuid": "2a5fd510-9c83-41df-b6cc-7b99c7ac6c37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30118", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-18)", "content": "", "creation_timestamp": "2025-12-18T00:00:00.000000Z"}, {"uuid": "b2bb7c0d-a1f8-4381-8574-81ef8de9c8d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30118", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-23)", "content": "", "creation_timestamp": "2026-03-23T00:00:00.000000Z"}, {"uuid": "96131411-97e3-4496-ab1e-7dacbf78474f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30118", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-13)", "content": "", "creation_timestamp": "2026-03-13T00:00:00.000000Z"}, {"uuid": "1c6e3f36-23b8-450e-a46a-99aa8b3f851d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30118", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-21)", "content": "", "creation_timestamp": "2026-03-21T00:00:00.000000Z"}, {"uuid": "eaa0e656-5e27-4b00-9c0a-f1b1543e8221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30118", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-19)", "content": "", "creation_timestamp": "2026-01-19T00:00:00.000000Z"}, {"uuid": "212577b7-0986-47d6-b06e-cd1f55cc745c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-30116", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e046f4c1-fd5e-4103-9e5e-a18ad095e1f2", "content": "", "creation_timestamp": "2026-02-02T12:28:47.815852Z"}, {"uuid": "b784c042-76d9-4b76-81de-5cade4786ba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30118", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-30)", "content": "", "creation_timestamp": "2026-03-30T00:00:00.000000Z"}, {"uuid": "9cb45d0c-fda7-434a-87e1-f289df140a86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30118", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-14)", "content": "", "creation_timestamp": "2026-04-14T00:00:00.000000Z"}, {"uuid": "9099e00e-379c-4762-99b6-c8ab12727d22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30118", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-19)", "content": "", "creation_timestamp": "2026-04-19T00:00:00.000000Z"}, {"uuid": "2c3d1288-fd39-41f3-b9a2-f71430ba3a18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3011", "type": "published-proof-of-concept", "source": "https://t.me/Yemen_Shield/693", "content": "\ud83d\udd25 \u0642\u062f \u064a\u0633\u0645\u062d \u0647\u062c\u0648\u0645 \u0627\u0644\u0642\u0646\u0627\u0629 \u0627\u0644\u062c\u0627\u0646\u0628\u064a\u0629 \u0627\u0644\u062c\u062f\u064a\u062f (CVE-2021-3011) \u0644\u0644\u0645\u062a\u0633\u0644\u0644\u064a\u0646 \u0628\u0627\u0633\u062a\u062e\u0631\u0627\u062c \u0645\u0641\u0627\u062a\u064a\u062d \u062a\u0634\u0641\u064a\u0631 \u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629 \u0627\u0644\u062b\u0646\u0627\u0626\u064a\u0629 \u0627\u0644\u0633\u0631\u064a\u0629 \u0645\u0646 Google Titan \u060c \u0623\u0648 \u063a\u064a\u0631\u0647\u0627 \u0645\u0646 \u0645\u0641\u0627\u062a\u064a\u062d \u0623\u0645\u0627\u0646 \u0627\u0644\u0623\u062c\u0647\u0632\u0629 \u0627\u0644\u062a\u064a \u062a\u062f\u0639\u0645 FIDO \u060c \u0648\u0627\u0633\u062a\u0646\u0633\u0627\u062e\u0647\u0627 \u0644\u0644\u0648\u0635\u0648\u0644 \u063a\u064a\u0631 \u0627\u0644\u0645\u0635\u0631\u062d \u0628\u0647.\n\n___________________________\n\n\n\n\n\n\ud83d\udd25 A new side-channel attack (CVE-2021-3011) could let hackers extract your secret 2-factor authentication encryption keys from Google Titan, or other FIDO-enabled hardware security keys, and clone them for unauthorized access.\n\nRead details \u2014 https://thehackernews.com/2021/01/new-attack-could-let-hackers-clone-your.html", "creation_timestamp": "2021-01-08T19:45:35.000000Z"}, {"uuid": "f4792667-bb71-4a66-bd8a-10ae86a380d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30116", "type": "exploited", "source": "https://t.me/arpsyndicate/1318", "content": "#ExploitObserverAlert\n\nCVE-2021-30116\n\nDESCRIPTION: Exploit Observer has 8 entries related to CVE-2021-30116. Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is https://x.x.x.x/dl.asp When an attacker download a client for Windows and installs it, the file KaseyaD.ini is generated (C:\\Program Files (x86)\\Kaseya\\XXXXXXXXXX\\KaseyaD.ini) which contains an Agent_Guid and AgentPassword This Agent_Guid and AgentPassword can be used to log in on dl.asp (https://x.x.x.x/dl.asp?un=840997037507813", "creation_timestamp": "2023-12-04T22:12:22.000000Z"}, {"uuid": "e5e4756e-c2c7-4b57-ab9c-e9e01d318b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30116", "type": "exploited", "source": "https://t.me/CyberSecurityIL/4145", "content": "\u05e2\u05d3\u05db\u05d5\u05df \u05e7\u05e6\u05e8 \u05dc\u05d2\u05d1\u05d9 \u05d4\u05de\u05ea\u05e7\u05e4\u05d4 \u05e2\u05dc Kaseya \u05d5\u05d3\u05e8\u05d9\u05e9\u05ea \u05d4\u05db\u05d5\u05e4\u05e8 \u05e9\u05dc REvil:\n\n\u05d4\u05d7\u05d1\u05e8\u05d4 \u05d9\u05d3\u05e2\u05d4 \u05e2\u05dc \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d1\u05de\u05e2\u05e8\u05db\u05ea \u05dc\u05d0\u05d7\u05e8 \u05e9\u05d7\u05d5\u05e7\u05e8 \u05d0\u05d1\u05d8\"\u05de \u05d3\u05d9\u05d5\u05d5\u05d7 \u05dc\u05d4 \u05e2\u05dc \u05db\u05da, \u05de\u05ea\u05d1\u05e8\u05e8 \u05e9\u05e2\u05d3 \u05e9\u05d1-Kaseya \u05d4\u05e1\u05e4\u05d9\u05e7\u05d5 \u05dc\u05d5\u05d5\u05d3\u05d0 \u05d0\u05ea \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d5\u05dc\u05d4\u05d5\u05e6\u05d9\u05d0 \u05ea\u05d9\u05e7\u05d5\u05df \u05d2\u05dd \u05e7\u05d1\u05d5\u05e6\u05ea REvil \u05d6\u05d9\u05d4\u05ea\u05d4 \u05d0\u05ea \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d5\u05e0\u05d9\u05e6\u05d7\u05d4 \u05d1\u05de\u05d9\u05e8\u05d5\u05e5 \u05db\u05da \u05e9\u05d4\u05e1\u05e4\u05d9\u05e7\u05d4 \u05dc\u05e0\u05e6\u05dc \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05dc\u05e4\u05e0\u05d9 \u05e9-Kaseya \u05d4\u05d5\u05e6\u05d9\u05d0\u05d5 \u05ea\u05d9\u05e7\u05d5\u05df.\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05d0\u05d2\u05d1 \u05e7\u05d9\u05d1\u05dc\u05d4 \u05d0\u05ea \u05d4\u05de\u05e1\u05e4\u05e8 CVE-2021-30116.\n\n\u05d1\u05e0\u05d5\u05d2\u05e2 \u05dc\u05d3\u05e8\u05d9\u05e9\u05ea \u05d4\u05db\u05d5\u05e4\u05e8, \u05d1\u05d4\u05ea\u05d7\u05dc\u05d4 \u05d3\u05d5\u05d5\u05d7 \u05db\u05d9 \u05de\u05d4\u05e1\u05e4\u05e7\u05d9\u05dd \u05d4\u05d2\u05d3\u05d5\u05dc\u05d9\u05dd \u05d3\u05d5\u05e8\u05e9\u05ea REvil \u05d3\u05de\u05d9 \u05db\u05d5\u05e4\u05e8 \u05e9\u05dc 5 \u05de\u05d9\u05dc\u05d9\u05d5\u05df \u05d3\u05d5\u05dc\u05e8 \u05d1\u05e2\u05d5\u05d3 \u05de\u05d4\u05d7\u05d1\u05e8\u05d5\u05ea \u05d4\u05e7\u05d8\u05e0\u05d5\u05ea \u05d9\u05d5\u05ea\u05e8 \u05e9\u05e0\u05e4\u05d2\u05e2\u05d5 \u05d4\u05d9\u05d0 \u05d3\u05d5\u05e8\u05e9\u05ea 45,000 \u05d3\u05d5\u05dc\u05e8, \u05db\u05e2\u05ea, \u05dc\u05d0\u05d7\u05e8 \u05e9\u05e0\u05d7\u05e9\u05e4\u05d5 \u05d4\u05ea\u05db\u05ea\u05d1\u05d5\u05d9\u05d5\u05ea \u05d1\u05d9\u05df \u05e7\u05d1\u05d5\u05e6\u05ea REvil \u05dc\u05e7\u05e8\u05d1\u05e0\u05d5\u05ea \u05de\u05ea\u05d1\u05e8\u05e8 \u05db\u05d9 \u05d4\u05e1\u05db\u05d5\u05dd \u05e9\u05dc 45,000 \u05d3\u05d5\u05dc\u05e8 \u05d4\u05d5\u05d0 \u05e2\u05d1\u05d5\u05e8 \u05e1\u05d9\u05d5\u05de\u05ea \u05d0\u05d7\u05ea \u05e9\u05dc \u05e7\u05d1\u05e6\u05d9\u05dd (File Extension), \u05d0\u05e8\u05d2\u05d5\u05df \u05e9\u05e8\u05d5\u05e6\u05d4 \u05dc\u05e7\u05d1\u05dc \u05de\u05e4\u05ea\u05d7 \u05d4\u05e6\u05e4\u05e0\u05d4 \u05e2\u05d1\u05d5\u05e8 \u05de\u05e1\u05e4\u05e8 \u05e1\u05d9\u05d5\u05de\u05d5\u05ea \u05d9\u05d9\u05d0\u05dc\u05e5 \u05dc\u05e9\u05dc\u05dd \u05d3\u05de\u05d9 \u05db\u05d5\u05e4\u05e8 \u05e9\u05dc \u05de\u05d0\u05d5\u05ea \u05d0\u05dc\u05e4\u05d9 \u05d3\u05d5\u05dc\u05e8\u05d9\u05dd.\n\u05db\u05de\u05d5 \u05db\u05df \u05de\u05d4\u05d4\u05ea\u05db\u05ea\u05d1\u05d5\u05d9\u05d5\u05ea \u05e2\u05d5\u05dc\u05d4 \u05e9\u05e7\u05d1\u05d5\u05e6\u05ea REvil \u05dc\u05d0 \u05d2\u05e0\u05d1\u05d4 \u05de\u05d9\u05d3\u05e2 \u05de\u05d4\u05e7\u05e8\u05d1\u05e0\u05d5\u05ea \u05d0\u05dc\u05d0 \u05e8\u05e7 \u05d4\u05e6\u05e4\u05d9\u05e0\u05d4 \u05d0\u05ea \u05d4\u05de\u05d9\u05d3\u05e2. \n\n\u05e0\u05e8\u05d0\u05d4 \u05e9\u05d4\u05e4\u05e2\u05dd \u05de\u05d3\u05d5\u05d1\u05e8 \u05d1\u05e9\u05d9\u05d8\u05ea \u05d4\u05e6\u05e4\u05e0\u05d4 \u05e9\u05d5\u05e0\u05d4, \u05dc\u05d0 \u05d6\u05db\u05d5\u05e8 \u05dc\u05d9 \u05e9\u05d1\u05e2\u05d1\u05e8 \u05e8\u05d0\u05d9\u05e0\u05d5 \u05e7\u05d1\u05d5\u05e6\u05d5\u05ea \u05ea\u05e7\u05d9\u05e4\u05d4 \u05e9\u05d4\u05e6\u05e4\u05d9\u05e0\u05d5 \u05db\u05dc \u05e1\u05d9\u05d5\u05de\u05ea \u05d1\u05de\u05e4\u05ea\u05d7 \u05d4\u05e6\u05e4\u05e0\u05d4 \u05e9\u05d5\u05e0\u05d4 (\u05ea\u05e7\u05e0\u05d5 \u05d0\u05d5\u05ea\u05d9 \u05d0\u05dd \u05d0\u05e0\u05d9 \u05d8\u05d5\u05e2\u05d4) \ud83e\uddd0\n\n\u05e2\u05d3\u05db\u05d5\u05df \u05e0\u05d5\u05e1\u05e3: \u05e7\u05d1\u05d5\u05e6\u05ea REvil \u05de\u05e6\u05d9\u05e2\u05d9\u05dd \u05e9\u05d7\u05e8\u05d5\u05e8 \u05e9\u05dc \u05de\u05e4\u05ea\u05d7\u05d5\u05ea \u05d4\u05d4\u05e6\u05e4\u05e0\u05d4 \u05e2\u05d1\u05d5\u05e8 \u05db\u05dc \u05d4\u05dc\u05e7\u05d5\u05d7\u05d5\u05ea \u05e9\u05e0\u05e4\u05d2\u05e2\u05d5 \u05d1\u05d1\u05ea \u05d0\u05d7\u05ea \u05ea\u05de\u05d5\u05e8\u05ea 70 \u05de\u05d9\u05dc\u05d9\u05d5\u05df \u05d3\u05d5\u05dc\u05e8. \n\n\u05ea\u05de\u05d5\u05e0\u05d5\u05ea \u05de\u05e6\"\u05d1 \u05d1\u05ea\u05d2\u05d5\u05d1\u05d5\u05ea.\n\nhttps://t.me/CyberSecurityIL/1142", "creation_timestamp": "2021-07-05T13:46:20.000000Z"}, {"uuid": "3ecb8e92-61fd-4f04-8432-5e54f8c4f9af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3011", "type": "published-proof-of-concept", "source": "Telegram/dje5F_U4goS_4liR6PjDUuSSTR_sdyiEjt_VHRHPW2M0nQ", "content": "", "creation_timestamp": "2021-01-11T04:01:35.000000Z"}, {"uuid": "c9dd9763-65fe-408d-8ae2-ba829465551e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30119", "type": "exploited", "source": "https://t.me/true_secator/1905", "content": "\u041d\u0430\u0448 \u0441\u043a\u0435\u043f\u0442\u0438\u0446\u0438\u0437\u043c \u043e\u043f\u0440\u0430\u0432\u0434\u0430\u043b\u0441\u044f: \u0432 \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u0435 \u0432\u043e\u0441\u043a\u0440\u0435\u0441\u0435\u043d\u044c\u0435 Kaseya \u0442\u0430\u043a \u0438 \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 SaaS, \u043d\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u043f\u043e\u0434\u0432\u0438\u0436\u043a\u0438 \u043d\u0430\u043c\u0435\u0442\u0438\u043b\u0438\u0441\u044c.\n\n\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 9.5.7a (9.5.7.2994) \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Virtual System Administrator: CVE-2021-30116 (\u0443\u0442\u0435\u0447\u043a\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445), CVE-2021-30119 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430) \u0438 CVE-2021-30120 (\u043e\u0431\u0445\u043e\u0434 2FA), \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u043f\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c REvil \u0432 \u0445\u043e\u0434\u0435 \u043d\u0430\u0448\u0443\u043c\u0435\u0432\u0448\u0435\u0439 \u0430\u0442\u0430\u043a\u0438.\n\n\u0422\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0433\u0438\u0433\u0430\u043d\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u043b, \u0447\u0442\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0438\u0434\u0435\u0442 \u00ab\u043f\u043e \u043f\u043b\u0430\u043d\u0443\u00bb, 95%\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 SaaS \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u044b, \u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u00ab\u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0435 \u0447\u0430\u0441\u044b \u0432\u044b\u0439\u0434\u0443\u0442 \u0432 \u0441\u0435\u0442\u044c \u0434\u043b\u044f \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0445 \u043d\u0430\u0448\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432\u00bb.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0430\u043a\u043e\u043d\u0435\u0446-\u0442\u043e \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u043e\u0442 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 API \u0442\u0435\u043f\u0435\u0440\u044c \u0431\u0443\u0434\u0435\u0442 \u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u0430\u0440\u043e\u043b\u044f: \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0442\u0432\u0435\u0442\u044b API \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0438 \u0435\u0433\u043e \u0445\u044d\u0448. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0444\u043b\u0430\u0433\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0440\u0442\u0430\u043b\u0430, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 VSA.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u0435\u0440\u0435\u0434 \u043d\u0430\u0447\u0430\u043b\u043e\u043c \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0438 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0441\u043a\u0430\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Compromise Detection Tool \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 agent.crt \u0438 agent.exe, \u0430 \u0432 \u0445\u043e\u0434\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 VSA.\n\n\u0412\u0441\u044f \u044d\u0442\u0430 \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0441 Kaseya - \u043f\u0440\u0438\u043c\u0435\u0440 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043c\u043d\u043e\u0433\u0438\u0435 \u0433\u043e\u0434\u044b \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u0432 \u043f\u043e\u0433\u043e\u043d\u0435 \u0437\u0430 \u0432\u044b\u0440\u0443\u0447\u043a\u043e\u0439 \u0438 \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438, \u0434\u043e\u043b\u0433\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435 \u0443\u0434\u0435\u043b\u044f\u043b\u0430 \u0434\u043e\u043b\u0436\u043d\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043d\u0430\u0431\u043e\u043b\u0435\u0432\u0448\u0438\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c \u0432 \u0441\u0444\u0435\u0440\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0439 \u043a\u043e\u0434, \u0441\u043b\u0430\u0431\u043e\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439. \u0422\u0430\u043a, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Bloomberg, \u0432 2018 \u0438 2019 \u0445\u0430\u043a\u0435\u0440\u044b \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Kaseya \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f ransomware.\n\n\u041d\u0430 \u0434\u0435\u043b\u0435 \u044d\u043a\u043e\u043d\u043e\u043c\u0438\u044f \u043e\u0431\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c\u0438 \u0443\u0431\u044b\u0442\u043a\u0430\u043c\u0438.", "creation_timestamp": "2021-07-12T12:51:43.000000Z"}, {"uuid": "23dd7ce8-12d5-4595-a1be-0631e2eda653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30116", "type": "exploited", "source": "https://t.me/true_secator/1905", "content": "\u041d\u0430\u0448 \u0441\u043a\u0435\u043f\u0442\u0438\u0446\u0438\u0437\u043c \u043e\u043f\u0440\u0430\u0432\u0434\u0430\u043b\u0441\u044f: \u0432 \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u0435 \u0432\u043e\u0441\u043a\u0440\u0435\u0441\u0435\u043d\u044c\u0435 Kaseya \u0442\u0430\u043a \u0438 \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 SaaS, \u043d\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u043f\u043e\u0434\u0432\u0438\u0436\u043a\u0438 \u043d\u0430\u043c\u0435\u0442\u0438\u043b\u0438\u0441\u044c.\n\n\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 9.5.7a (9.5.7.2994) \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Virtual System Administrator: CVE-2021-30116 (\u0443\u0442\u0435\u0447\u043a\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445), CVE-2021-30119 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430) \u0438 CVE-2021-30120 (\u043e\u0431\u0445\u043e\u0434 2FA), \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u043f\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c REvil \u0432 \u0445\u043e\u0434\u0435 \u043d\u0430\u0448\u0443\u043c\u0435\u0432\u0448\u0435\u0439 \u0430\u0442\u0430\u043a\u0438.\n\n\u0422\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0433\u0438\u0433\u0430\u043d\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u043b, \u0447\u0442\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0438\u0434\u0435\u0442 \u00ab\u043f\u043e \u043f\u043b\u0430\u043d\u0443\u00bb, 95%\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 SaaS \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u044b, \u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u00ab\u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0435 \u0447\u0430\u0441\u044b \u0432\u044b\u0439\u0434\u0443\u0442 \u0432 \u0441\u0435\u0442\u044c \u0434\u043b\u044f \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0445 \u043d\u0430\u0448\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432\u00bb.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0430\u043a\u043e\u043d\u0435\u0446-\u0442\u043e \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u043e\u0442 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 API \u0442\u0435\u043f\u0435\u0440\u044c \u0431\u0443\u0434\u0435\u0442 \u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u0430\u0440\u043e\u043b\u044f: \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0442\u0432\u0435\u0442\u044b API \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0438 \u0435\u0433\u043e \u0445\u044d\u0448. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0444\u043b\u0430\u0433\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0440\u0442\u0430\u043b\u0430, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 VSA.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u0435\u0440\u0435\u0434 \u043d\u0430\u0447\u0430\u043b\u043e\u043c \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0438 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0441\u043a\u0430\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Compromise Detection Tool \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 agent.crt \u0438 agent.exe, \u0430 \u0432 \u0445\u043e\u0434\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 VSA.\n\n\u0412\u0441\u044f \u044d\u0442\u0430 \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0441 Kaseya - \u043f\u0440\u0438\u043c\u0435\u0440 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043c\u043d\u043e\u0433\u0438\u0435 \u0433\u043e\u0434\u044b \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u0432 \u043f\u043e\u0433\u043e\u043d\u0435 \u0437\u0430 \u0432\u044b\u0440\u0443\u0447\u043a\u043e\u0439 \u0438 \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438, \u0434\u043e\u043b\u0433\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435 \u0443\u0434\u0435\u043b\u044f\u043b\u0430 \u0434\u043e\u043b\u0436\u043d\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043d\u0430\u0431\u043e\u043b\u0435\u0432\u0448\u0438\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c \u0432 \u0441\u0444\u0435\u0440\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0439 \u043a\u043e\u0434, \u0441\u043b\u0430\u0431\u043e\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439. \u0422\u0430\u043a, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Bloomberg, \u0432 2018 \u0438 2019 \u0445\u0430\u043a\u0435\u0440\u044b \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Kaseya \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f ransomware.\n\n\u041d\u0430 \u0434\u0435\u043b\u0435 \u044d\u043a\u043e\u043d\u043e\u043c\u0438\u044f \u043e\u0431\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c\u0438 \u0443\u0431\u044b\u0442\u043a\u0430\u043c\u0438.", "creation_timestamp": "2021-07-12T12:51:43.000000Z"}, {"uuid": "6f207f7e-0df8-4d33-a3e0-660552a6d816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30116", "type": "exploited", "source": "https://t.me/true_secator/1884", "content": "\u200b\u200b\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 \u0432\u0435\u0447\u0435\u0440\u043e\u043c \u0431\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 REvil (\u0438\u043b\u0438 \u043a\u0442\u043e-\u0442\u043e \u0438\u0437 \u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432) \u0443\u0441\u0442\u0440\u043e\u0438\u043b\u0430 \u0434\u0435\u0431\u043e\u0448 \u0438 \u043f\u0440\u043e\u0432\u043e\u043a\u0430\u0446\u0438\u044e. \u041f\u0435\u0440\u0432\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430, \u0447\u0442\u043e \u043e\u043d\u0438 \u0441\u043b\u043e\u043c\u0430\u043b\u0438 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 Kaseya (\u043a\u0442\u043e \u0441\u043a\u0430\u0437\u0430\u043b SolarWinds?) \u0438 \u0441\u0442\u0430\u043b\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0435\u0433\u043e VSA (Virtual System Administrator) \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0432 \u0441\u0435\u0442\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043b\u043e\u0441\u044c \u0441\u0430\u043c\u043e ransomware.\n\n\u0423\u0436\u0435 \u0432 \u044d\u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u043e\u043a\u043e\u043b\u043e 40 VSA \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0435\u0441\u044f MSP (Manage Service Provider), \u0430 \u0447\u0435\u0440\u0435\u0437 \u043d\u0438\u0445 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u044b \u0441\u0435\u0442\u0438 \u043e\u0442 200 \u0434\u043e 10000 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0439. \u041f\u0440\u0435\u0434\u044a\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0441\u0443\u043c\u043c\u0430 \u0432\u044b\u043a\u0443\u043f\u0430 - \u043e\u0442 50 \u0442\u044b\u0441. \u0434\u043e 5 \u043c\u043b\u043d. \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432. Kaseya \u043f\u0440\u0438\u0437\u0432\u0430\u043b\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c VSA \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u0437\u0430\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u043e\u0435 \u043e\u0431\u043b\u0430\u043a\u043e. \n\n\u0412\u0447\u0435\u0440\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0413\u043e\u043b\u043b\u0430\u043d\u0434\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (DIVD) \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e Kaseya \u043a\u0430\u043a \u0440\u0430\u0437 \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438\u0441\u044c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2021-30116, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0433\u043e\u043b\u043b\u0430\u043d\u0434\u0446\u044b \u043d\u0430\u0448\u043b\u0438 \u0437\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0435\u043b\u044c \u0434\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430. \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b DIVD \u043d\u0435 \u0431\u044b\u043b\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043e, \u043d\u043e \u0432 \u0441\u0435\u0442\u0438 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0434\u044b\u0440\u043a\u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 VSA. \u041a\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e CVE-2021-30116 \u043f\u043e\u043f\u0430\u043b\u0430 \u0432 \u0440\u0443\u043a\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f\u043c - \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442. \n\n\u041f\u043e\u0441\u043b\u0435 \u0442\u0430\u043a\u0438\u0445 \u043e\u0442\u043a\u0440\u043e\u0432\u0435\u043d\u0438\u0439 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043e\u0431 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a, \u044f\u0441\u043d\u043e\u0435 \u0434\u0435\u043b\u043e, \u043c\u043e\u0436\u043d\u043e \u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u0434 \u0441\u043e\u043c\u043d\u0435\u043d\u0438\u0435. \u0410 Kaseya \u0442\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u043d\u0430\u043d\u044f\u043b\u0438 FireEye, \u0447\u0442\u043e\u0431\u044b \u0442\u0435 \u043f\u043e\u043c\u043e\u0433\u043b\u0438 \u0438\u043c \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442.\n\n\u0418 \u0432\u0447\u0435\u0440\u0430 \u0436\u0435 REvil \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u041f\u041e Kaseya \u0431\u044b\u043b\u043e \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043e \u0431\u043e\u043b\u0435\u0435 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c (\u0442\u0443\u0442 \u043e\u043d\u0438 \u0441\u0447\u0438\u0442\u0430\u044e\u0442, \u0438\u043c\u0445\u043e, \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0442\u0438, \u043d\u043e \u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b, \u043e\u0442\u0441\u044e\u0434\u0430 \u0442\u0430\u043a\u043e\u0435 \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u0447\u0438\u0441\u043b\u043e). \u0418 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0438 70 \u043c\u043b\u043d. \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0437\u0430 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u0435\u0448\u0438\u0444\u0440\u0430\u0442\u043e\u0440.\n\n\u0417\u0430\u043f\u043b\u0430\u0442\u044f\u0442 \u0438\u043c \u0442\u0430\u043a\u0443\u044e \u0441\u0443\u043c\u043c\u0443 \u0438\u043b\u0438 \u043d\u0435\u0442 \u043c\u044b \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u044c \u043d\u0435 \u0431\u0435\u0440\u0435\u043c\u0441\u044f, \u043d\u043e, \u043a\u0430\u043a \u043d\u0430\u043c \u043a\u0430\u0436\u0435\u0442\u0441\u044f, \u0431\u0435\u0437\u044b\u043c\u044f\u043d\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438\u0437 DIVD \u0438\u043b\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a Kaseya, \u0441\u043b\u0438\u0432\u0448\u0438\u0439 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0441\u0442\u0430\u043b \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432\u044b\u043c \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0435\u0440\u043e\u043c.", "creation_timestamp": "2021-07-05T10:55:17.000000Z"}, {"uuid": "a8962b56-47e9-4567-8d4d-e8b9af6e31a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30116", "type": "exploited", "source": "https://t.me/cibsecurity/25930", "content": "\u274c Kaseya Patches Imminent After Zero-Day Exploits, 1,500 Impacted \u274c\n\nREvil ransomware gang lowers price for universal decryptor after massive worldwide ransomware push against Kaseya security vulnerability CVE-2021-30116.\n\n\ud83d\udcd6 Read\n\nvia \"Threat Post\".", "creation_timestamp": "2021-07-06T18:02:59.000000Z"}, {"uuid": "f67fb6f4-0580-45ba-a06c-b505674ce9a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30117", "type": "seen", "source": "https://t.me/cibsecurity/26034", "content": "\u203c CVE-2021-30117 \u203c\n\nSQL injection exists in Kaseya VSA before 9.5.6.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-07-09T18:14:57.000000Z"}, {"uuid": "d6ea69b5-7a9c-4824-a44c-209a16f13574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30110", "type": "seen", "source": "https://t.me/cibsecurity/26377", "content": "\u203c CVE-2021-30110 \u203c\n\ndttray.exe in Greyware Automation Products Inc Domain Time II before 5.2.b.20210331 allows remote attackers to execute arbitrary code via a URL to a malicious update in a spoofed response to the UDP query used to check for updates.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-07-22T16:36:25.000000Z"}, {"uuid": "a01be79f-8869-491d-a037-5071f5598386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3011", "type": "seen", "source": "https://t.me/cibsecurity/21753", "content": "\u203c CVE-2021-3011 \u203c\n\nAn electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security microcontrollers and A7x secure authentication microcontrollers, with CryptoLib through v2.9. It allows attackers to extract the ECDSA private key after extensive physical access (and consequently produce a clone). This was demonstrated on the Google Titan Security Key, based on an NXP A7005a chip. Other FIDO U2F security keys are also impacted (Yubico YubiKey Neo and Feitian K9, K13, K21, and K40) as well as several NXP JavaCard smartcards (J3A081, J2A081, J3A041, J3D145_M59, J2D145_M59, J3D120_M60, J3D082_M60, J2D120_M60, J2D082_M60, J3D081_M59, J2D081_M59, J3D081_M61, J2D081_M61, J3D081_M59_DF, J3D081_M61_DF, J3E081_M64, J3E081_M66, J2E081_M64, J3E041_M66, J3E016_M66, J3E016_M64, J3E041_M64, J3E145_M64, J3E120_M65, J3E082_M65, J2E145_M64, J2E120_M65, J2E082_M65, J3E081_M64_DF, J3E081_M66_DF, J3E041_M66_DF, J3E016_M66_DF, J3E041_M64_DF, and J3E016_M64_DF).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-07T18:40:35.000000Z"}, {"uuid": "c98d63a5-bbb8-4c81-a08b-4fc00c0027c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3011", "type": "seen", "source": "https://t.me/thehackernews/973", "content": "\ud83d\udd25 A new side-channel attack (CVE-2021-3011) could let hackers extract your secret 2-factor authentication encryption keys from Google Titan, or other FIDO-enabled hardware security keys, and clone them for unauthorized access.\n\nRead details \u2014 https://thehackernews.com/2021/01/new-attack-could-let-hackers-clone-your.html", "creation_timestamp": "2021-01-08T18:02:41.000000Z"}, {"uuid": "620d4d5e-e094-4387-80d6-490db1cafb67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3011", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/2605", "content": "#Analytics\nTop 10 Most Used Vulnerabilities of the Month (january 1-31)\nCVE-2021-3156:\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2020-16875:\nhttps://t.me/cybersecuritytechnologies/1751\nCVE-2020-29583:\nhttps://t.me/cybersecuritytechnologies/2386\nCVE-2021-2109:\nhttps://t.me/cybersecuritytechnologies/2540\nCVE-2020-17519:\nhttps://t.me/cybersecuritytechnologies/2473\nCVE-2020-25684/25685/25686:\nhttps://t.me/cybersecuritytechnologies/2534\nCVE-2021-3011:\nhttps://t.me/cybersecuritytechnologies/2447", "creation_timestamp": "2025-01-04T20:01:45.000000Z"}, {"uuid": "c320ce29-3446-4388-9561-622c8c69644c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3011", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2447", "content": "#Research\nCVE-2021-3011.\n\"A Side Journey to Titan. Side-Channel Attack on the Google Titan Security Key (Revealing and Breaking NXP\u2019s P5x ECDSA Implementation on the Way)\", 2021.\n]-> https://ninjalab.io/a-side-journey-to-titan", "creation_timestamp": "2021-01-11T06:21:55.000000Z"}, {"uuid": "06f95f75-1046-4346-ac39-debdb4f4e789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3011", "type": "seen", "source": "https://t.me/hn_best_comments/7269", "content": "Re: CVE-2021-3011: Key recovery on Google Titan Key\n        \nNote, Google in typical fashion has named 6+ products \"Titan.\" (Titan M, Titan C, Titan Security Key (available in USB A, C, Bluetooth versions), Titan Security Module, OpenTitan, and maybe a few more if you count the old Bluetooth versions that were recalled that look identical to the new Bluetooth version).\n\nThe various Titan Security Keys are also made by Feitian who sometimes use the same auth chip and sometimes don't but externally look identical.\n\nThe products sole purpose is to establish a secure chain of trust and starts out the gate broken with ambiguous or misleading claims for verifying exactly which Titan it is.\n\nGoogle will pay you $1 million to hack the Titan but not the Titan hacked here - the other Titan[1]. Furthermore they are happy to tell you that their products, like Google Cloud Platform, are \"Secured by Titan\" but not which Titan [2].\n\nThis is frustrating because the Titan M is an absolutely brilliant device, with some real advancements to normalize embedded security, including an SPI interposer to monitor communications (a real leap forward) - and should not at all be conflated with a generic, whitelabeled, non-hsm product that makes no claims whatsoever and has been broken at least twice before [3] [4]. The Titan C is an even bigger improvement over the Titan M but not in anyway they care to disclose which may or may not indicate weaknesses in Titan M [5]. Likewise, OpenTitan[6] is crashing through barriers others didn't even know were there in establishing verifiable silicon roots of trust but is ambiguously different than Titan M because of various foundry and PDK issues which may be as innocuous as having to run the chips through at different process sizes but who knows because while OpenTitan is verifiable; Titan M/C aren't.\n\n[1] https://duo.com/decipher/hack-the-titan-m-get-usd1-million\n\n[2] https://cloud.google.com/blog/products/gcp/titan-in-depth-security-in-plaintext\n\n[3] http://www.hexview.com/~scl/titan/ - note the migration from the NXP A7005a to A7005c\n\n[4] https://www.engadget.com/2019-05-15-google-recalls-some-titan-bluetooth-security-keys.html\n\n[5] https://showcase.withgoogle.com/titan-c/\n\n[6] https://opentitan.org/\n        \npaulgerhardt, 5 hours ago", "creation_timestamp": "2026-08-02T00:01:11.775059Z"}, {"uuid": "0e2f3a86-dcaa-4be4-8471-9a84509195d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30118", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-10)", "content": "", "creation_timestamp": "2026-05-10T00:00:00.000000Z"}, {"uuid": "b58f0b31-0994-4f59-80d4-ba932e135c04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3011", "type": "seen", "source": "https://t.me/hn_best_comments/7269", "content": "Re: CVE-2021-3011: Key recovery on Google Titan Key\n        \nNote, Google in typical fashion has named 6+ products \"Titan.\" (Titan M, Titan C, Titan Security Key (available in USB A, C, Bluetooth versions), Titan Security Module, OpenTitan, and maybe a few more if you count the old Bluetooth versions that were recalled that look identical to the new Bluetooth version).\n\nThe various Titan Security Keys are also made by Feitian who sometimes use the same auth chip and sometimes don't but externally look identical.\n\nThe products sole purpose is to establish a secure chain of trust and starts out the gate broken with ambiguous or misleading claims for verifying exactly which Titan it is.\n\nGoogle will pay you $1 million to hack the Titan but not the Titan hacked here - the other Titan[1]. Furthermore they are happy to tell you that their products, like Google Cloud Platform, are \"Secured by Titan\" but not which Titan [2].\n\nThis is frustrating because the Titan M is an absolutely brilliant device, with some real advancements to normalize embedded security, including an SPI interposer to monitor communications (a real leap forward) - and should not at all be conflated with a generic, whitelabeled, non-hsm product that makes no claims whatsoever and has been broken at least twice before [3] [4]. The Titan C is an even bigger improvement over the Titan M but not in anyway they care to disclose which may or may not indicate weaknesses in Titan M [5]. Likewise, OpenTitan[6] is crashing through barriers others didn't even know were there in establishing verifiable silicon roots of trust but is ambiguously different than Titan M because of various foundry and PDK issues which may be as innocuous as having to run the chips through at different process sizes but who knows because while OpenTitan is verifiable; Titan M/C aren't.\n\n[1] https://duo.com/decipher/hack-the-titan-m-get-usd1-million\n\n[2] https://cloud.google.com/blog/products/gcp/titan-in-depth-security-in-plaintext\n\n[3] http://www.hexview.com/~scl/titan/ - note the migration from the NXP A7005a to A7005c\n\n[4] https://www.engadget.com/2019-05-15-google-recalls-some-titan-bluetooth-security-keys.html\n\n[5] https://showcase.withgoogle.com/titan-c/\n\n[6] https://opentitan.org/\n        \npaulgerhardt, 5 hours ago", "creation_timestamp": "2026-08-01T08:00:04.461310Z"}, {"uuid": "d161e1a8-9e09-4268-a343-dcc0107d1e67", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30118", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a38fbfd5-fc5c-4178-b020-c0090478dab9", "content": "", "creation_timestamp": "2026-06-19T12:45:44.262444Z"}, {"uuid": "d5adb57c-7cd4-46ea-bb94-48b626861d96", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30116", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ed3412c3-30a8-4c9d-8fb3-c8e9e4af01a6", "content": "", "creation_timestamp": "2026-06-19T12:47:48.036496Z"}, {"uuid": "1e30ebad-9e00-42d4-9839-b3d99b56c707", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30118", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ea0a7935-3fcb-4b60-9df4-1c5fb6a34e55", "content": "", "creation_timestamp": "2026-06-23T14:03:12.918644Z"}, {"uuid": "2cf8f26a-4034-4744-83fe-bd63195f91bc", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30116", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/457cdffb-14f5-4f39-830e-6fa6060c664b", "content": "", "creation_timestamp": "2026-06-23T14:04:40.902186Z"}, {"uuid": "60389150-0bc6-4e44-8342-9ad346076948", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-30118", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/32f946d3-99f2-4aa8-b646-cc9caeb73e0a", "content": "", "creation_timestamp": "2026-06-30T09:23:31.026142Z"}, {"uuid": "13182474-5b5a-43cf-807b-83c628425184", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30118", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-14)", "content": "", "creation_timestamp": "2026-07-15T10:00:16.184172Z"}, {"uuid": "a002a2ed-59c4-4b61-87d5-e741190b1db4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30118", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-25)", "content": "", "creation_timestamp": "2026-07-26T10:15:39.967746Z"}, {"uuid": "137d4bcb-0a07-4320-9043-0655a96500c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30118", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-25)", "content": "", "creation_timestamp": "2026-07-26T10:00:07.965169Z"}, {"uuid": "2151effe-8b26-4444-990c-f55c29648980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30118", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-27)", "content": "", "creation_timestamp": "2026-07-28T10:00:05.822787Z"}, {"uuid": "423971be-7549-49eb-b370-3df2da422cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3011", "type": "seen", "source": "https://t.me/hn_best_comments/7269", "content": "Re: CVE-2021-3011: Key recovery on Google Titan Key\n        \nNote, Google in typical fashion has named 6+ products \"Titan.\" (Titan M, Titan C, Titan Security Key (available in USB A, C, Bluetooth versions), Titan Security Module, OpenTitan, and maybe a few more if you count the old Bluetooth versions that were recalled that look identical to the new Bluetooth version).\n\nThe various Titan Security Keys are also made by Feitian who sometimes use the same auth chip and sometimes don't but externally look identical.\n\nThe products sole purpose is to establish a secure chain of trust and starts out the gate broken with ambiguous or misleading claims for verifying exactly which Titan it is.\n\nGoogle will pay you $1 million to hack the Titan but not the Titan hacked here - the other Titan[1]. Furthermore they are happy to tell you that their products, like Google Cloud Platform, are \"Secured by Titan\" but not which Titan [2].\n\nThis is frustrating because the Titan M is an absolutely brilliant device, with some real advancements to normalize embedded security, including an SPI interposer to monitor communications (a real leap forward) - and should not at all be conflated with a generic, whitelabeled, non-hsm product that makes no claims whatsoever and has been broken at least twice before [3] [4]. The Titan C is an even bigger improvement over the Titan M but not in anyway they care to disclose which may or may not indicate weaknesses in Titan M [5]. Likewise, OpenTitan[6] is crashing through barriers others didn't even know were there in establishing verifiable silicon roots of trust but is ambiguously different than Titan M because of various foundry and PDK issues which may be as innocuous as having to run the chips through at different process sizes but who knows because while OpenTitan is verifiable; Titan M/C aren't.\n\n[1] https://duo.com/decipher/hack-the-titan-m-get-usd1-million\n\n[2] https://cloud.google.com/blog/products/gcp/titan-in-depth-security-in-plaintext\n\n[3] http://www.hexview.com/~scl/titan/ - note the migration from the NXP A7005a to A7005c\n\n[4] https://www.engadget.com/2019-05-15-google-recalls-some-titan-bluetooth-security-keys.html\n\n[5] https://showcase.withgoogle.com/titan-c/\n\n[6] https://opentitan.org/\n        \npaulgerhardt, 5 hours ago", "creation_timestamp": "2026-07-29T12:01:07.215063Z"}, {"uuid": "365cb726-8d82-4326-8057-dac1a3aea633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3011", "type": "seen", "source": "https://t.me/hn_best_comments/7269", "content": "Re: CVE-2021-3011: Key recovery on Google Titan Key\n        \nNote, Google in typical fashion has named 6+ products \"Titan.\" (Titan M, Titan C, Titan Security Key (available in USB A, C, Bluetooth versions), Titan Security Module, OpenTitan, and maybe a few more if you count the old Bluetooth versions that were recalled that look identical to the new Bluetooth version).\n\nThe various Titan Security Keys are also made by Feitian who sometimes use the same auth chip and sometimes don't but externally look identical.\n\nThe products sole purpose is to establish a secure chain of trust and starts out the gate broken with ambiguous or misleading claims for verifying exactly which Titan it is.\n\nGoogle will pay you $1 million to hack the Titan but not the Titan hacked here - the other Titan[1]. Furthermore they are happy to tell you that their products, like Google Cloud Platform, are \"Secured by Titan\" but not which Titan [2].\n\nThis is frustrating because the Titan M is an absolutely brilliant device, with some real advancements to normalize embedded security, including an SPI interposer to monitor communications (a real leap forward) - and should not at all be conflated with a generic, whitelabeled, non-hsm product that makes no claims whatsoever and has been broken at least twice before [3] [4]. The Titan C is an even bigger improvement over the Titan M but not in anyway they care to disclose which may or may not indicate weaknesses in Titan M [5]. Likewise, OpenTitan[6] is crashing through barriers others didn't even know were there in establishing verifiable silicon roots of trust but is ambiguously different than Titan M because of various foundry and PDK issues which may be as innocuous as having to run the chips through at different process sizes but who knows because while OpenTitan is verifiable; Titan M/C aren't.\n\n[1] https://duo.com/decipher/hack-the-titan-m-get-usd1-million\n\n[2] https://cloud.google.com/blog/products/gcp/titan-in-depth-security-in-plaintext\n\n[3] http://www.hexview.com/~scl/titan/ - note the migration from the NXP A7005a to A7005c\n\n[4] https://www.engadget.com/2019-05-15-google-recalls-some-titan-bluetooth-security-keys.html\n\n[5] https://showcase.withgoogle.com/titan-c/\n\n[6] https://opentitan.org/\n        \npaulgerhardt, 5 hours ago", "creation_timestamp": "2026-07-30T00:01:47.394134Z"}]}