{"vulnerability": "cve-2022-2992", "sightings": [{"uuid": "9fb0246d-5f61-4d29-9932-0b2aee4258f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2992", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "7832d58b-c7bf-44da-a90b-92b92ded59d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2992", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:45.000000Z"}, {"uuid": "fcd5c538-4b7b-4118-b05e-f7a4bdc76dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2992", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:00.000000Z"}, {"uuid": "88d661db-1785-4fa4-9a86-6d82b927a345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2992", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gitlab_github_import_rce_cve_2022_2992.rb", "content": "", "creation_timestamp": "2023-02-14T22:23:51.000000Z"}, {"uuid": "7ad6f9f5-7c3d-469c-8ccb-91d0f9b0821f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2992", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16310", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-2992\n\ud83d\udd25 CVSS Score: 9.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows an authenticated user to achieve remote code execution via the Import from GitHub API endpoint.\n\ud83d\udccf Published: 2022-10-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-14T14:27:30.020Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/371884\n2. https://hackerone.com/reports/1679624\n3. https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2992.json\n4. http://packetstormsecurity.com/files/171008/GitLab-GitHub-Repo-Import-Deserialization-Remote-Code-Execution.html", "creation_timestamp": "2025-05-14T14:31:55.000000Z"}, {"uuid": "c713942f-6d67-4987-8a15-dd10f7282d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2992", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/1026", "content": "CVE-2022-2992\nAuthenticated Remote Command Execution in Gitlab via GitHub import.\n*\nA vulnerability in GitLab CE/EE affecting all versions from 11.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. allows an authenticated user to achieve remote code execution via the Import from GitHub API endpoint.\nExploit and Readme\n\n#exploit", "creation_timestamp": "2022-10-10T07:03:55.000000Z"}, {"uuid": "525195d7-7fb9-4e9f-8579-0664e331a9e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2992", "type": "published-proof-of-concept", "source": "Telegram/h2-8cMxm2rjhROEHHz1DsUtKgyqNrT29ZVXlVrWu3InrfQk", "content": "", "creation_timestamp": "2022-10-22T06:36:59.000000Z"}, {"uuid": "085fe031-1cf9-477a-97f6-466e3442f934", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2992", "type": "published-proof-of-concept", "source": "Telegram/Qahgv_yYIyA3kzVr1z_AWBylMiyjPwrWyfefrMSht9YAvmg", "content": "", "creation_timestamp": "2023-01-02T12:53:10.000000Z"}, {"uuid": "e01f109a-1603-445c-8335-706d03431667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2992", "type": "published-proof-of-concept", "source": "Telegram/svK4kHNDHZ_Def8Oth7PJq9-9JuxBN1fVJ912OIPd5FK-fA", "content": "", "creation_timestamp": "2022-11-13T03:15:00.000000Z"}, {"uuid": "03e688ef-7759-4918-aa57-dc9a204d77c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2992", "type": "published-proof-of-concept", "source": "https://t.me/intelexch/25958", "content": "https://github.com/CsEnox/CVE-2022-2992", "creation_timestamp": "2022-10-09T14:07:43.000000Z"}, {"uuid": "6c6e8eab-a7b0-4904-9b8e-25d27bb36fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29922", "type": "seen", "source": "https://t.me/cibsecurity/49791", "content": "\u203c CVE-2022-29922 \u203c\n\nImproper Input Validation vulnerability in the handling of a specially crafted IEC 61850 packet with a valid data item but with incorrect data type in the IEC 61850 OPC Server in the Hitachi Energy MicroSCADA X SYS600, MicroSCADA Pro SYS600. The vulnerability may cause a denial-of-service on the IEC 61850 OPC Server part of the SYS600 product. This issue affects: Hitachi Energy MicroSCADA Pro SYS600 version 9.4 FP2 Hotfix 4 and earlier versions Hitachi Energy MicroSCADA X SYS600 version 10 to version 10.3.1. cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.0:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.2:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.3:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.4:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.1.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3.1:*:*:*:*:*:*:*\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-14T22:31:44.000000Z"}, {"uuid": "f3eb53cf-3041-4655-b45b-12fcd984489f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29923", "type": "seen", "source": "https://t.me/cibsecurity/46716", "content": "\u203c CVE-2022-29923 \u203c\n\nAuthenticated (admin or higher user role) Reflected Cross-Site Scripting (XSS) vulnerability in ThingsForRestaurants Quick Restaurant Reservations plugin <= 1.4.1 at WordPress.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-20T22:12:17.000000Z"}, {"uuid": "6268bb61-9610-4e11-a865-8313c1964f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2992", "type": "exploited", "source": "https://t.me/CyberSecurityTechnologies/6946", "content": "#exploit\nCVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\nhttps://github.com/CsEnox/CVE-2022-2992", "creation_timestamp": "2022-10-11T02:32:29.000000Z"}, {"uuid": "030bc687-3a35-43ed-a262-8f22cc5c4ec7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2992", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3263", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-2992\nGithub: https://github.com/CsEnox/CVE-2022-2992\nDescribe: \n**", "creation_timestamp": "2026-08-02T00:01:20.447730Z"}, {"uuid": "3e4e6538-ef10-4981-9193-1e2e28a73320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2992", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3263", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-2992\nGithub: https://github.com/CsEnox/CVE-2022-2992\nDescribe: \n**", "creation_timestamp": "2026-08-01T02:00:04.693515Z"}, {"uuid": "1628b11b-7c5e-400d-9898-cf129246084c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2992", "type": "seen", "source": "https://t.me/onelab1337/2381", "content": "#Threat_Research\n1. Using Threat Emulation for Threat Hunting\n\ud83d\udd17 See on Medium\n\n2. Persistent PHP payloads in PNGs: How to Inject PHP code in an image - and keep it there\n\ud83d\udd17 See on Synacktiv\n\n#tools\n#Red_Team_Tactics\nShadowSpray - tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects\n\ud83d\udd17 See on Github\n\n#tools\n#Blue_Team_Techniques\n1. LMD - Linux Malware Detection\n\ud83d\udd17 See on Github\n\n2. Aftermath - free macOS IR framework\n\ud83d\udd17 See on Github\n\n#exploit\nCVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\n\ud83d\udd17 See on Github\n\n\u2764\ufe0f| Gostou do conte\u00fado? Nos fa\u00e7a uma doa\u00e7\u00e3o!\n\nShare and Supporte us ~ @zero0lab \u2764\ufe0f", "creation_timestamp": "2026-08-09T04:23:36.657396Z"}, {"uuid": "9d21f872-b012-46c7-95fc-5dd92c89b0a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2992", "type": "published-proof-of-concept", "source": "https://t.me/onelab1337/2381", "content": "#Threat_Research\n1. Using Threat Emulation for Threat Hunting\n\ud83d\udd17 See on Medium\n\n2. Persistent PHP payloads in PNGs: How to Inject PHP code in an image - and keep it there\n\ud83d\udd17 See on Synacktiv\n\n#tools\n#Red_Team_Tactics\nShadowSpray - tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects\n\ud83d\udd17 See on Github\n\n#tools\n#Blue_Team_Techniques\n1. LMD - Linux Malware Detection\n\ud83d\udd17 See on Github\n\n2. Aftermath - free macOS IR framework\n\ud83d\udd17 See on Github\n\n#exploit\nCVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\n\ud83d\udd17 See on Github\n\n\u2764\ufe0f| Gostou do conte\u00fado? Nos fa\u00e7a uma doa\u00e7\u00e3o!\n\nShare and Supporte us ~ @zero0lab \u2764\ufe0f", "creation_timestamp": "2026-08-10T00:00:29.467130Z"}, {"uuid": "fde580b4-4c6a-4551-9892-52cdae10a955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2992", "type": "seen", "source": "https://t.me/CVEhub/3263", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-2992\nGithub: https://github.com/CsEnox/CVE-2022-2992\nDescribe: \n**", "creation_timestamp": "2026-07-29T12:00:58.814024Z"}, {"uuid": "b225c009-b77a-4007-9d26-b9c489e1de04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2992", "type": "seen", "source": "https://t.me/CVEhub/3263", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-2992\nGithub: https://github.com/CsEnox/CVE-2022-2992\nDescribe: \n**", "creation_timestamp": "2026-07-30T00:01:37.894369Z"}, {"uuid": "617fb41d-8375-4870-934d-274f7772d29e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2992", "type": "seen", "source": "https://t.me/cissp/6215", "content": "exploit\n1. CVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\nhttps://github.com/CsEnox/CVE-2022-2992\n\n2. CVE-2022-40684:\nCritical Authentication Bypass in FortiOS and FortiProxy\ud83e\udee3\nhttps://github.com/dickson0day/CVE-2022-40684\n\n+Three special and readable news\ud83d\udc47\ud83c\udffb\n\nA 19-year-old Sydney teenager has been arrested for allegedly using leaked Optus telecom data to extort victims in SMS scams.\nRead: https://thehackernews.com/2022/10/19-year-old-hacker-arrested-for-using.html\n\nFormer Uber Chief Security Officer has been found guilty of hiding 2016 #databreach from regulators in an attempt to cover up the incident.\nRead: https://thehackernews.com/2022/10/former-uber-security-chief-found-guilty.html\n\nResearchers have published technical details and a PoC exploit for a recently disclosed critical vulnerability (CVE-2022-40684) affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager.\nRead: https://thehackernews.com/2022/10/poc-exploit-released-for-critical.html\n\n\n\u200e-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.07.26", "creation_timestamp": "2026-09-01T17:00:25.803780Z"}, {"uuid": "ba9597cb-2a3f-4835-91d4-6ae6fe5c2c25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2992", "type": "seen", "source": "https://t.me/cissp/6215", "content": "exploit\n1. CVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\nhttps://github.com/CsEnox/CVE-2022-2992\n\n2. CVE-2022-40684:\nCritical Authentication Bypass in FortiOS and FortiProxy\ud83e\udee3\nhttps://github.com/dickson0day/CVE-2022-40684\n\n+Three special and readable news\ud83d\udc47\ud83c\udffb\n\nA 19-year-old Sydney teenager has been arrested for allegedly using leaked Optus telecom data to extort victims in SMS scams.\nRead: https://thehackernews.com/2022/10/19-year-old-hacker-arrested-for-using.html\n\nFormer Uber Chief Security Officer has been found guilty of hiding 2016 #databreach from regulators in an attempt to cover up the incident.\nRead: https://thehackernews.com/2022/10/former-uber-security-chief-found-guilty.html\n\nResearchers have published technical details and a PoC exploit for a recently disclosed critical vulnerability (CVE-2022-40684) affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager.\nRead: https://thehackernews.com/2022/10/poc-exploit-released-for-critical.html\n\n\n\u200e-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.07.26", "creation_timestamp": "2026-09-02T01:04:08.030866Z"}, {"uuid": "623fee0b-adb2-49fe-8ecb-b5755c3c547f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2992", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gitlab_github_import_rce_cve_2022_2992.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"William Bowling (vakzz)\", \"Heyder Andrade \", \"RedWay Security \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"An authenticated user can import a repository from GitHub into GitLab.\\n          If a user attempts to import a repo from an attacker-controlled server,\\n          the server will reply with a Redis serialization protocol object in the nested\\n          `default_branch`. GitLab will cache this object and\\n          then deserialize it when trying to load a user session, resulting in RCE.\", \"disclosure_date\": \"2022-10-06\", \"fullname\": \"exploit/multi/http/gitlab_github_import_rce_cve_2022_2992\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"GitLab GitHub Repo Import Deserialization RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/gitlab_github_import_rce_cve_2022_2992.rb\", \"platform\": \"Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/gitlab_github_import_rce_cve_2022_2992\", \"references\": [\"URL-https://hackerone.com/reports/1679624\", \"URL-https://github.com/redwaysecurity/CVEs/tree/main/CVE-2022-2992\", \"URL-https://gitlab.com/gitlab-org/gitlab/-/issues/371884\", \"CVE-2022-2992\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Unix Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:48.845735Z"}, {"uuid": "19a494a6-76d5-4dc9-b1c6-2c21bc7459f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2992", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6215", "content": "exploit\n1. CVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\nhttps://github.com/CsEnox/CVE-2022-2992\n\n2. CVE-2022-40684:\nCritical Authentication Bypass in FortiOS and FortiProxy\ud83e\udee3\nhttps://github.com/dickson0day/CVE-2022-40684\n\n+Three special and readable news\ud83d\udc47\ud83c\udffb\n\nA 19-year-old Sydney teenager has been arrested for allegedly using leaked Optus telecom data to extort victims in SMS scams.\nRead: https://thehackernews.com/2022/10/19-year-old-hacker-arrested-for-using.html\n\nFormer Uber Chief Security Officer has been found guilty of hiding 2016 #databreach from regulators in an attempt to cover up the incident.\nRead: https://thehackernews.com/2022/10/former-uber-security-chief-found-guilty.html\n\nResearchers have published technical details and a PoC exploit for a recently disclosed critical vulnerability (CVE-2022-40684) affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager.\nRead: https://thehackernews.com/2022/10/poc-exploit-released-for-critical.html\n\n\n\u200e-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.07.26", "creation_timestamp": "2026-09-10T06:00:05.472388Z"}, {"uuid": "9385b181-64c3-4806-ab85-bd07accd909a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2992", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6215", "content": "exploit\n1. CVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\nhttps://github.com/CsEnox/CVE-2022-2992\n\n2. CVE-2022-40684:\nCritical Authentication Bypass in FortiOS and FortiProxy\ud83e\udee3\nhttps://github.com/dickson0day/CVE-2022-40684\n\n+Three special and readable news\ud83d\udc47\ud83c\udffb\n\nA 19-year-old Sydney teenager has been arrested for allegedly using leaked Optus telecom data to extort victims in SMS scams.\nRead: https://thehackernews.com/2022/10/19-year-old-hacker-arrested-for-using.html\n\nFormer Uber Chief Security Officer has been found guilty of hiding 2016 #databreach from regulators in an attempt to cover up the incident.\nRead: https://thehackernews.com/2022/10/former-uber-security-chief-found-guilty.html\n\nResearchers have published technical details and a PoC exploit for a recently disclosed critical vulnerability (CVE-2022-40684) affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager.\nRead: https://thehackernews.com/2022/10/poc-exploit-released-for-critical.html\n\n\n\u200e-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.07.26", "creation_timestamp": "2026-09-11T00:00:50.260580Z"}]}