<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-01T02:48:29.482354+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dc0abb75-f00e-43fb-81a5-0b541a3e01af/export</id>
    <title>dc0abb75-f00e-43fb-81a5-0b541a3e01af</title>
    <updated>2026-09-01T02:48:29.509996+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "dc0abb75-f00e-43fb-81a5-0b541a3e01af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21894", "type": "exploited", "source": "Telegram/Bj8KXDo63zjyucWwo9uSRTccGI9UuqZC-N_0f4u7phWxqwA", "content": "", "creation_timestamp": "2026-08-16T00:00:12.820840Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dc0abb75-f00e-43fb-81a5-0b541a3e01af/export"/>
    <published>2026-08-16T00:00:12.820840+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/45ff55ee-956e-4c71-957b-cedd549ba5a2/export</id>
    <title>45ff55ee-956e-4c71-957b-cedd549ba5a2</title>
    <updated>2026-09-01T02:48:29.512088+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "45ff55ee-956e-4c71-957b-cedd549ba5a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21894", "type": "seen", "source": "Telegram/Bj8KXDo63zjyucWwo9uSRTccGI9UuqZC-N_0f4u7phWxqwA", "content": "", "creation_timestamp": "2026-08-15T08:00:10.576130Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/45ff55ee-956e-4c71-957b-cedd549ba5a2/export"/>
    <published>2026-08-15T08:00:10.576130+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ad0b6ed4-da9e-4b99-ade0-6f0acfd1c77b/export</id>
    <title>ad0b6ed4-da9e-4b99-ade0-6f0acfd1c77b</title>
    <updated>2026-09-01T02:48:29.512168+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ad0b6ed4-da9e-4b99-ade0-6f0acfd1c77b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21894", "type": "seen", "source": "https://bsky.app/profile/pedri77.bsky.social/post/3msx32gb3dm2e", "content": "BlackLotus: primer bootkit comercial que evade Secure Boot. CVE-2022-21894, desactiva Defender+BitLocker, 5000 USD en underground.\nhttps://malwareintel.es/blog/rootkits-bootkits/blacklotus-bootkit-secure-boot/\n#Ciberseguridad #Firmware\n", "creation_timestamp": "2026-08-13T07:00:03.978323Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ad0b6ed4-da9e-4b99-ade0-6f0acfd1c77b/export"/>
    <published>2026-08-13T07:00:03.978323+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/864e7aa0-3012-436c-a51b-ebc4ba741a2e/export</id>
    <title>864e7aa0-3012-436c-a51b-ebc4ba741a2e</title>
    <updated>2026-09-01T02:48:29.512234+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "864e7aa0-3012-436c-a51b-ebc4ba741a2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21894", "type": "exploited", "source": "https://t.me/reverseame/3277", "content": "Guidance for investigating attacks using CVE-2022-21894: The BlackLotus campaign https://www.microsoft.com/en-us/security/blog/2023/04/11/guidance-for-investigating-attacks-using-cve-2022-21894-the-blacklotus-campaign/", "creation_timestamp": "2026-08-03T01:22:33.684650Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/864e7aa0-3012-436c-a51b-ebc4ba741a2e/export"/>
    <published>2026-08-03T01:22:33.684650+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c965f782-5065-46e6-b371-5be44645a50a/export</id>
    <title>c965f782-5065-46e6-b371-5be44645a50a</title>
    <updated>2026-09-01T02:48:29.512294+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c965f782-5065-46e6-b371-5be44645a50a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21894", "type": "exploited", "source": "https://t.me/reverseame/3277", "content": "Guidance for investigating attacks using CVE-2022-21894: The BlackLotus campaign https://www.microsoft.com/en-us/security/blog/2023/04/11/guidance-for-investigating-attacks-using-cve-2022-21894-the-blacklotus-campaign/", "creation_timestamp": "2026-08-02T20:31:45.587818Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c965f782-5065-46e6-b371-5be44645a50a/export"/>
    <published>2026-08-02T20:31:45.587818+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fdf32440-fe38-4e11-a988-780eb507459d/export</id>
    <title>fdf32440-fe38-4e11-a988-780eb507459d</title>
    <updated>2026-09-01T02:48:29.512356+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fdf32440-fe38-4e11-a988-780eb507459d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21894", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/1146", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-21894\nGithub: https://github.com/Wack0/CVE-2022-21894\nDescribe: \nSecure Boot Security Feature Bypass Vulnerability.", "creation_timestamp": "2026-08-02T00:01:14.138539Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fdf32440-fe38-4e11-a988-780eb507459d/export"/>
    <published>2026-08-02T00:01:14.138539+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f5e9c90d-d2f1-47e4-af7e-882b9f12020c/export</id>
    <title>f5e9c90d-d2f1-47e4-af7e-882b9f12020c</title>
    <updated>2026-09-01T02:48:29.512420+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f5e9c90d-d2f1-47e4-af7e-882b9f12020c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21894", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/1146", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-21894\nGithub: https://github.com/Wack0/CVE-2022-21894\nDescribe: \nSecure Boot Security Feature Bypass Vulnerability.", "creation_timestamp": "2026-08-01T06:00:03.909616Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f5e9c90d-d2f1-47e4-af7e-882b9f12020c/export"/>
    <published>2026-08-01T06:00:03.909616+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/12359edb-a4e0-41da-8123-6ad532bd9447/export</id>
    <title>12359edb-a4e0-41da-8123-6ad532bd9447</title>
    <updated>2026-09-01T02:48:29.512481+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "12359edb-a4e0-41da-8123-6ad532bd9447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21894", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10508", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-21894*\nGithub: https://github.com/qjawls2003/CVE-2022-21894", "creation_timestamp": "2026-08-01T00:00:39.386099Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/12359edb-a4e0-41da-8123-6ad532bd9447/export"/>
    <published>2026-08-01T00:00:39.386099+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/030e9bb4-72d5-4b3e-9d64-8c46b9068c63/export</id>
    <title>030e9bb4-72d5-4b3e-9d64-8c46b9068c63</title>
    <updated>2026-09-01T02:48:29.512539+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "030e9bb4-72d5-4b3e-9d64-8c46b9068c63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21894", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/7002", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#bypass\nName: *CVE-2022-21894*\nGithub: https://github.com/Wack0/CVE-2022-21894", "creation_timestamp": "2026-08-01T00:00:26.126678Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/030e9bb4-72d5-4b3e-9d64-8c46b9068c63/export"/>
    <published>2026-08-01T00:00:26.126678+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9b3a014b-cff9-4e04-a1ca-7f1e565e01b0/export</id>
    <title>9b3a014b-cff9-4e04-a1ca-7f1e565e01b0</title>
    <updated>2026-09-01T02:48:29.512603+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9b3a014b-cff9-4e04-a1ca-7f1e565e01b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21894", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/7002", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#bypass\nName: *CVE-2022-21894*\nGithub: https://github.com/Wack0/CVE-2022-21894", "creation_timestamp": "2026-07-31T18:00:04.794516Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9b3a014b-cff9-4e04-a1ca-7f1e565e01b0/export"/>
    <published>2026-07-31T18:00:04.794516+00:00</published>
  </entry>
</feed>
