Bitter APT

Bitter APT Attacks China/Pakistan with WinRAR Zero-Day and New C# Backdoor via Office Macro Bitter APT C# Backdoor, WinRAR Path Traversal

Bitter APT C# Backdoor, WinRAR Path Traversal

Bitter APT Attacks China/Pakistan with WinRAR Zero-Day and New C# Backdoor via Office Macro

Do Son October 22, 2025

China-based cybersecurity firm Qianxin Threat Intelligence Center has uncovered a new wave of attacks linked to the...

TA397’s Global Targeting Tactics Reveal Indian State-Backed Cyber Operations TA397, India Cyber Espionage

TA397, India Cyber Espionage

TA397’s Global Targeting Tactics Reveal Indian State-Backed Cyber Operations

Do Son June 7, 2025

A new report from Proofpoint Threat Research, in collaboration with Threatray, reveals mounting evidence that TA397 (also...

Bitter APT Targets Pakistan Telecom Amidst Border Tensions with New Cyberattack! Bitter APT, Pakistan Cyberattack

Bitter APT, Pakistan Cyberattack

Bitter APT Targets Pakistan Telecom Amidst Border Tensions with New Cyberattack!

Do Son May 31, 2025

As tensions flared between India and Pakistan during Operation Sindoor on May 7, 2025, a covert cyber...

TA397 Leverages Sophisticated Spearphishing Techniques to Deploy Malware in Defense Sector TEMPEST attacks

TEMPEST attacks

TA397 Leverages Sophisticated Spearphishing Techniques to Deploy Malware in Defense Sector

Do Son December 19, 2024

Proofpoint researchers have identified a new spearphishing campaign by TA397, a South Asia-based advanced persistent threat (APT)...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-81578CVSS 8.8
An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under...
Admin intel📅 Updated: Aug 28, 2026
CVE-2026-82078CVSS 9.4
An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG....
Admin intel📅 Updated: Aug 28, 2026
CVE-2026-66384CVSS 5.3
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.
CISA KEV📅 Added to KEV: Aug 27, 2026
CVE-2023-49105CVSS 9.8
An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file...
CISA KEV📅 Added to KEV: Aug 27, 2026
CVE-2021-23758CVSS 8.1
All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization...
CISA KEV📅 Added to KEV: Aug 26, 2026
CVE-2019-1068CVSS 8.8
A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions,...
CISA KEV📅 Added to KEV: Aug 26, 2026
CVE-2015-3246CVSS 5.1
libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly...
CISA KEV📅 Added to KEV: Aug 26, 2026
CVE-2015-5287CVSS 7.8
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions...
CISA KEV📅 Added to KEV: Aug 26, 2026