Russia APT28

Russia APT28 updates its arsenal in ongoing campaigns

Do Son December 26, 2017

The Russia APT28 organization (also known as Sednit, Fancy Bear, Sofacy, Pawn Storm and Strontium) recently reconfigured the backdoor...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-110447CVSS 9.2
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in...
Watchtower Verified📅 Updated: Oct 15, 2026
CVE-2020-13125CVSS 7.2
An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
Watchtower Verified📅 Updated: Oct 15, 2026
CVE-2020-13126CVSS 9.9
An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
Watchtower Verified📅 Updated: Oct 15, 2026
CVE-2019-20180CVSS 8.0
The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
Watchtower Verified📅 Updated: Oct 15, 2026
CVE-2014-8739CVSS 9.8
Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in...
Watchtower Verified📅 Updated: Oct 15, 2026
CVE-2020-35234CVSS 8.1
The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as exploited in the wild in December...
Watchtower Verified📅 Updated: Oct 15, 2026
CVE-2020-26876CVSS 7.5
The wp-courses plugin through 2.0.27 for WordPress allows remote attackers to bypass the intended payment step (for course...
Watchtower Verified📅 Updated: Oct 15, 2026
CVE-2021-24175CVSS 9.8
The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.7 was being actively exploited to by malicious...
Watchtower Verified📅 Updated: Oct 15, 2026

CVE-2026-76519CVSS 9.8
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated,...
CISA KEV📅 Added to KEV: Oct 14, 2026📅 Updated: Oct 14, 2026
CVE-2025-40320CVSS 9.8
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential cfid UAF in smb2_query_info_compound...
📅 Updated: Oct 14, 2026
CVE-2025-63742CVSS 9.8
SQL Injection vulnerability in function setwxqyAction in file webmain/task/api/loginAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers gain sensitive...
📅 Updated: Oct 14, 2026
CVE-2026-108336CVSS 9.1
When the default self-signed certificate is used, an attacker could gain administrative access to the application. The SSL certificate...
📅 Updated: Oct 14, 2026
CVE-2026-108335CVSS 9.1
When the password reset functionality is enabled, and email is configured, an attacker could take over any account using...
📅 Updated: Oct 14, 2026
CVE-2025-67494CVSS 9.3
ZITADEL is an open-source identity infrastructure tool. Versions 4.7.0 and below are vulnerable to an unauthenticated, full-read SSRF...
📅 Updated: Oct 14, 2026
CVE-2025-67489CVSS 9.8
@vitejs/plugin-rs provides React Server Components (RSC) support for Vite. Versions 0.5.5 and below are vulnerable to arbitrary remote...
📅 Updated: Oct 14, 2026
CVE-2025-40343CVSS 9.8
In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: avoid scheduling association deletion twice When forcefully...
📅 Updated: Oct 14, 2026

Critical Alert 4 Active Exploits Detected Today

Russia APT28 updates its arsenal in ongoing campaigns