{"vulnerability": "CVE-2021-21224", "sightings": [{"uuid": "0992b3f7-127c-47ea-9726-df4bbcca853c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "MISP/df23874b-e926-4e6f-b80e-c8a58279bcb0", "content": "", "creation_timestamp": "2021-06-10T08:24:58.000000Z"}, {"uuid": "3645c68b-8029-41a3-96bf-6a4ad57bd5ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:18.000000Z"}, {"uuid": "5b354f32-e020-4e06-9e1b-4d9ec6a8979e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "e51715e9-12e3-435b-9046-dd49d27a3cb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "MISP/5e54b906-3700-42a0-8c7a-f357f363687d", "content": "", "creation_timestamp": "2024-11-14T06:09:04.000000Z"}, {"uuid": "29429c7e-b7a2-4430-ab98-9fd81699143d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971064", "content": "", "creation_timestamp": "2024-12-24T20:23:45.729354Z"}, {"uuid": "3594d951-b684-44e6-a421-05728b7afbbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:52.000000Z"}, {"uuid": "f58c9a3e-dd2a-4e7f-9779-2a4698d8b93f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2021-21224", "type": "seen", "source": "https://gist.github.com/cyberriman/6c2fa14e75180fb2521c4bf93afa8bd2", "content": "", "creation_timestamp": "2025-11-01T12:11:02.000000Z"}, {"uuid": "400908c6-0496-4a2f-949e-4a0159491328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:25.000000Z"}, {"uuid": "6ed34bb7-9091-406b-a5f9-4d44d6d5a9c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=573", "content": "", "creation_timestamp": "2021-04-21T04:00:00.000000Z"}, {"uuid": "73e95d7a-9881-41f3-b274-a9719c5255c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-21224", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a07df2dc-7fdc-45c7-a08c-b415e537fc9e", "content": "", "creation_timestamp": "2026-02-02T12:28:46.546278Z"}, {"uuid": "c17fea88-d547-4190-a6f5-d55b003ebc8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "https://t.me/ics_cert/625", "content": "\u062f\u0631 \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647\u060c \u0622\u0632\u0645\u0627\u06cc\u0634\u06af\u0627\u0647 \u06a9\u0633\u067e\u0631\u0633\u06a9\u06cc 10 \u06a9\u0645\u067e\u06cc\u0646 \u0645\u0631\u0645\u0648\u0632 APT \u0631\u0627 \u06a9\u0647 \u0628\u062f\u0648\u0646 \u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0627\u0642\u06cc \u0645\u0627\u0646\u062f\u0647 \u0627\u0646\u062f\u060c \u0627\u0641\u0634\u0627 \u0645\u06cc \u06a9\u0646\u062f.\n\n 1. \u067e\u0631\u0648\u0698\u0647 \u062a\u0627\u062c \u0645\u062d\u0644. \u06cc\u06a9 \u0686\u0627\u0631\u0686\u0648\u0628 \u067e\u06cc\u0686\u06cc\u062f\u0647 \u062c\u0627\u0633\u0648\u0633\u06cc \u06a9\u0647 \u0627\u0632 \u062f\u0648 \u0628\u0633\u062a\u0647 \u0645\u062e\u062a\u0644\u0641 \u062a\u0648\u06a9\u06cc\u0648 \u0648 \u06cc\u0648\u06a9\u0648\u0647\u0627\u0645\u0627 \u062a\u0634\u06a9\u06cc\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u062f\u0627\u062f\u0647 \u0647\u0627\u06cc \u0645\u062e\u062a\u0644\u0641 \u0631\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0628\u06cc\u0634 \u0627\u0632 80 \u0645\u0627\u0698\u0648\u0644 \u0645\u062e\u062a\u0644\u0641 \u0628\u062f\u0632\u062f\u062f. \u062a\u0627\u062c \u0645\u062d\u0644 \u062d\u062f\u0627\u0642\u0644 5 \u0633\u0627\u0644 \u0642\u0628\u0644 \u0627\u0632 \u0627\u06cc\u0646\u06a9\u0647 \u062f\u0631 \u06cc\u06a9 \u062d\u0645\u0644\u0647 \u0628\u0647 \u06cc\u06a9 \u0633\u0627\u0632\u0645\u0627\u0646 \u062f\u06cc\u067e\u0644\u0645\u0627\u062a\u06cc\u06a9 \u06a9\u0634\u0641 \u0634\u0648\u062f \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a.\n 2. DarkUniverse \u06cc\u06a9\u06cc \u062f\u06cc\u06af\u0631 \u0627\u0632 \u0686\u0627\u0631\u0686\u0648\u0628 \u0647\u0627\u06cc APT \u0627\u0633\u062a \u06a9\u0647 \u0627\u0632 \u0633\u0627\u0644 2009 \u062a\u0627 2017 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0628\u0647 20 \u0633\u0627\u0632\u0645\u0627\u0646 \u063a\u06cc\u0631 \u0646\u0638\u0627\u0645\u06cc \u0648 \u0646\u0638\u0627\u0645\u06cc \u062f\u0631 \u06a9\u0634\u0648\u0631\u0647\u0627\u06cc \u0645\u062e\u062a\u0644\u0641 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a. \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0641\u06cc\u0634\u06cc\u0646\u06af \u067e\u062e\u0634 \u0645\u06cc \u0634\u0648\u062f \u0648 \u0627\u0632 \u0686\u0646\u062f\u06cc\u0646 \u0645\u0627\u0698\u0648\u0644 \u0628\u0631\u0627\u06cc \u062c\u0627\u0633\u0648\u0633\u06cc \u062a\u0634\u06a9\u06cc\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a. \n3. \u067e\u0627\u0632\u0644 \u0633\u0627\u0632. \u062f\u0631 \u0622\u0648\u0631\u06cc\u0644 2021\u060c \u0645\u062d\u0642\u0642\u0627\u0646 \u0686\u0646\u062f\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0647\u062f\u0641\u0645\u0646\u062f \u0631\u0627 \u0628\u0631 \u0627\u0633\u0627\u0633 \u0632\u0646\u062c\u06cc\u0631\u0647 \u067e\u06cc\u0686\u06cc\u062f\u0647 \u0627\u06cc \u0627\u0632 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0647\u0627\u06cc 0 \u0631\u0648\u0632\u0647 \u06a9\u0634\u0641 \u06a9\u0631\u062f\u0646\u062f. CVE-2021-21224 \u062f\u0631 Google Chrome \u0628\u0631\u0627\u06cc \u0646\u0641\u0648\u0630 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u062f\u0631 \u0627\u0631\u062a\u0628\u0627\u0637 \u0628\u0627 CVE-2021-31955 \u0648 CVE-2021-31956 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u062f. \u067e\u0633 \u0627\u0632 \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0645\u0648\u0641\u0642\u06cc\u062a \u0622\u0645\u06cc\u0632\u060c \u0628\u0633\u062a\u0647 \u0645\u062e\u0631\u0628 PuzzleMaker \u06a9\u0647 \u0645\u062e\u0635\u0648\u0635 \u0647\u0631 \u0645\u0648\u0631\u062f \u0637\u0631\u0627\u062d\u06cc \u0634\u062f\u0647 \u0628\u0648\u062f\u060c \u0645\u0639\u0631\u0641\u06cc \u0634\u062f.\n 4. ProjectSauron \u0628\u0631\u0627\u06cc \u0627\u0648\u0644\u06cc\u0646 \u0628\u0627\u0631 \u062f\u0631 \u0633\u0627\u0644 2015 \u06a9\u0634\u0641 \u0634\u062f. \u0627\u06cc\u0646 \u06cc\u06a9 \u067e\u0644\u062a \u0641\u0631\u0645 APT \u067e\u06cc\u0686\u06cc\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0631\u0627\u06cc \u062d\u0645\u0644\u0647 \u0628\u0647 \u0633\u0627\u0632\u0645\u0627\u0646 \u0647\u0627 \u062f\u0631 \u0631\u0648\u0633\u06cc\u0647\u060c \u0627\u06cc\u0631\u0627\u0646\u060c \u0631\u0648\u0627\u0646\u062f\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u0634\u0648\u062f. \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0627\u0632 \u0627\u06cc\u0645\u067e\u0644\u0646\u062a \u0647\u0627\u06cc \u0627\u0648\u0644\u06cc\u0647 \u0645\u0646\u062d\u0635\u0631 \u0628\u0647 \u0641\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u0634\u0648\u062f. \u06af\u0631\u0648\u0647 \u067e\u0634\u062a\u06cc\u0628\u0627\u0646 ProjectSauron \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u067e\u06cc\u0686\u06cc\u062f\u0647 C2 \u0631\u0627 \u0628\u0627 \u0637\u06cc\u0641 \u06af\u0633\u062a\u0631\u062f\u0647 \u0627\u06cc \u0627\u0632 ISP \u0647\u0627 \u062f\u0631 \u0627\u06cc\u0627\u0644\u0627\u062a \u0645\u062a\u062d\u062f\u0647 \u0648 \u0627\u0631\u0648\u067e\u0627 \u0627\u062f\u0627\u0631\u0647 \u0645\u06cc \u06a9\u0646\u062f. \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0647 \u0627\u062d\u062a\u0645\u0627\u0644 \u0632\u06cc\u0627\u062f \u0627\u0632 \u062a\u062c\u0631\u0628\u0647 \u0633\u0627\u06cc\u0631 \u06a9\u0645\u067e\u06cc\u0646 \u0647\u0627\u06cc APT \u0645\u0627\u0646\u0646\u062f Duqu\u060c Flame\u060c Equation \u0648 Regin \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0646\u062f.\n 5.\u062f\u0632\u062f USB. \u062f\u0631 \u0633\u0627\u0644 2016\u060c ESET \u06cc\u06a9 \u062a\u0631\u0648\u062c\u0627\u0646 USB \u0628\u0627 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0647\u0648\u0634\u0645\u0646\u062f\u0627\u0646\u0647 \u0645\u062d\u0627\u0641\u0638\u062a \u0627\u0632 \u062e\u0648\u062f \u0631\u0627 \u06a9\u0634\u0641 \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0627\u0632 \u0634\u0634 \u0641\u0627\u06cc\u0644 \u062a\u0634\u06a9\u06cc\u0644 \u0634\u062f\u0647 \u0628\u0648\u062f \u06a9\u0647 \u062f\u0648 \u062a\u0627\u06cc \u0622\u0646 \u0647\u0627 \u0641\u0627\u06cc\u0644 \u0647\u0627\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0648 \u0686\u0647\u0627\u0631 \u0641\u0627\u06cc\u0644 \u0628\u0627\u0642\u06cc \u0645\u0627\u0646\u062f\u0647 \u0642\u0627\u0628\u0644 \u0627\u062c\u0631\u0627 \u0628\u0648\u062f\u0646\u062f. \u0622\u0646\u0647\u0627 \u0641\u0642\u0637 \u0628\u0627 \u06cc\u06a9 \u062a\u0631\u062a\u06cc\u0628 \u0645\u0639\u06cc\u0646 \u0631\u0627\u0647 \u0627\u0646\u062f\u0627\u0632\u06cc \u0645\u06cc \u0634\u062f\u0646\u062f \u0648 \u0628\u0631\u062e\u06cc \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u0644\u06af\u0648\u0631\u06cc\u062a\u0645 AES-128 \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc \u0634\u062f\u0646\u062f. \u06a9\u0644\u06cc\u062f \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0634\u0646\u0627\u0633\u0647 \u0645\u0646\u062d\u0635\u0631\u0628\u0647\u200c\u0641\u0631\u062f \u062f\u0633\u062a\u06af\u0627\u0647 USB \u0648 \u0648\u06cc\u0698\u06af\u06cc\u200c\u0647\u0627\u06cc \u062f\u0631\u0627\u06cc\u0648 \u062e\u0627\u0635 \u0627\u06cc\u062c\u0627\u062f \u0634\u062f. \u0627\u06cc\u0646 \u0633\u0647 \u0641\u0627\u06cc\u0644 \u0627\u062c\u0631\u0627\u06cc\u06cc \u0644\u0648\u062f\u0631 \u0647\u0633\u062a\u0646\u062f \u06a9\u0647 \u0647\u0631 \u06a9\u062f\u0627\u0645 \u0641\u0627\u06cc\u0644 \u0645\u0631\u062d\u0644\u0647 \u0628\u0639\u062f\u06cc \u0631\u0627 \u062f\u0631 \u062d\u0627\u0641\u0638\u0647 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u0645\u06cc \u06a9\u0646\u0646\u062f. \u062f\u0627\u062f\u0647 \u0647\u0627\u06cc \u062f\u0632\u062f\u06cc\u062f\u0647 \u0634\u062f\u0647 \u06a9\u0647 \u0647\u0645\u06cc\u0634\u0647 \u062f\u0631 \u062f\u0631\u0627\u06cc\u0648 USB \u0622\u0644\u0648\u062f\u0647 \u0622\u067e\u0644\u0648\u062f \u0645\u06cc \u0634\u0648\u0646\u062f. \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0627 \u06af\u0631\u0648\u0647 Lamberts APT \u0645\u0631\u062a\u0628\u0637 \u0628\u0627\u0634\u062f.\n 6. TENSHO (\u062a\u0648\u0631 \u0633\u0641\u06cc\u062f). \u062f\u0631 \u0627\u0648\u0627\u06cc\u0644 \u0633\u0627\u0644 2021\u060c \u0647\u0646\u06af\u0627\u0645 \u062c\u0633\u062a\u062c\u0648\u06cc \u0635\u0641\u062d\u0627\u062a \u0641\u06cc\u0634\u06cc\u0646\u06af\u060c \u0645\u062d\u0642\u0642\u0627\u0646 PwC \u0628\u0627 \u0635\u0641\u062d\u0647\u200c\u0627\u06cc \u0645\u0648\u0627\u062c\u0647 \u0634\u062f\u0646\u062f \u06a9\u0647 \u0628\u0631\u0627\u06cc \u0633\u0631\u0642\u062a \u062d\u0633\u0627\u0628\u200c\u0647\u0627\u06cc \u0648\u0632\u0627\u0631\u062a \u062f\u0641\u0627\u0639 \u0635\u0631\u0628\u0633\u062a\u0627\u0646 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u0631\u0641\u062a. \u0627\u06cc\u0646 \u062a\u0648\u0633\u0637 \u06af\u0631\u0648\u0647 \u0646\u0627\u0634\u0646\u0627\u062e\u062a\u0647 \u0642\u0628\u0644\u06cc TENSHO \u06cc\u0627 White Tur \u0627\u06cc\u062c\u0627\u062f \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u06af\u0631\u0648\u0647 \u0627\u0632 \u0633\u0627\u0644 2017 \u0641\u0639\u0627\u0644 \u0628\u0648\u062f\u0647 \u0648 \u0627\u0632 \u0627\u0646\u0648\u0627\u0639 \u0631\u0648\u0634 \u0647\u0627 \u0648 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0645\u0646\u062d\u0635\u0631 \u0628\u0647 \u0641\u0631\u062f \u0627\u0632 \u062c\u0645\u0644\u0647 OpenHardwareMonitor \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0646\u062f \u06a9\u0647 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 TENSHO \u0631\u0627 \u062f\u0631 \u0642\u0627\u0644\u0628 \u06cc\u06a9 \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a PowerShell \u06cc\u0627 \u0641\u0627\u06cc\u0644 \u0627\u062c\u0631\u0627\u06cc\u06cc \u0648\u06cc\u0646\u062f\u0648\u0632 \u0627\u0631\u0627\u0626\u0647 \u0645\u06cc \u062f\u0647\u062f.\n 7.PlexingEagle. \u062f\u0631 \u06a9\u0646\u0641\u0631\u0627\u0646\u0633 HITBSec 2017 \u062f\u0631 \u0622\u0645\u0633\u062a\u0631\u062f\u0627\u0645\u060c Emmanuel Gadaix \u062f\u0631 \u0645\u0648\u0631\u062f \u06a9\u0634\u0641 \u0645\u062c\u0645\u0648\u0639\u0647 \u0628\u0633\u06cc\u0627\u0631 \u062c\u0627\u0644\u0628\u06cc \u0627\u0632 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u062c\u0627\u0633\u0648\u0633\u06cc \u0633\u0627\u06cc\u0628\u0631\u06cc \u062f\u0631 \u0634\u0628\u06a9\u0647 \u0647\u0627\u06cc GSM \u0635\u062d\u0628\u062a \u06a9\u0631\u062f.\n 8. \u0633\u06cc\u0646 \u0633\u0648\u0646\u0648. \u062f\u0631 \u0645\u0627\u0647 \u0645\u0647 2021\u060c \u0634\u0631\u06a9\u062a \u0645\u062e\u0627\u0628\u0631\u0627\u062a\u06cc Syniverse \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc IT \u062e\u0648\u062f \u0631\u0627 \u06a9\u0634\u0641 \u06a9\u0631\u062f. \u062a\u062d\u0642\u06cc\u0642\u0627\u062a \u062f\u0627\u062e\u0644\u06cc \u0646\u0634\u0627\u0646 \u062f\u0627\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0628\u0627\u0632\u06cc\u06af\u0631 \u0628\u0631\u0627\u06cc \u0627\u0648\u0644\u06cc\u0646 \u0628\u0627\u0631 \u062f\u0631 \u0633\u0627\u0644 2016 \u0628\u0647 \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u0646\u0641\u0648\u0630 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u062f\u0631 \u0637\u06cc \u067e\u0646\u062c \u0633\u0627\u0644\u060c \u062f\u0631 \u062d\u0627\u0644\u06cc \u06a9\u0647 \u0646\u0627\u0634\u0646\u0627\u062e\u062a\u0647 \u0645\u0627\u0646\u062f\u060c \u0627\u0632 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647 \u0647\u0627\u06cc \u062f\u0627\u062e\u0644\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f \u0648 \u062a\u0648\u0627\u0646\u0633\u062a \u0627\u0639\u062a\u0628\u0627\u0631 \u0648\u0631\u0648\u062f \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 EDT \u0631\u0627 \u0627\u0632 235 \u0645\u0634\u062a\u0631\u06cc \u0634\u0631\u06a9\u062a \u0628\u062f\u0632\u062f\u062f. \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0646\u0647\u0627\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u06cc \u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u062d\u0631\u0645\u0627\u0646\u0647 \u0645\u0634\u062a\u0631\u06a9\u06cc\u0646\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u0633\u0648\u0627\u0628\u0642 \u062a\u0645\u0627\u0633 \u0648 \u067e\u06cc\u0627\u0645\u06a9 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u0646\u062f.\n 9. MagicScroll \u06cc\u06a9 \u0686\u0627\u0631\u0686\u0648\u0628 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u067e\u06cc\u0686\u06cc\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0627\u0648\u0644\u06cc\u0646 \u0628\u0627\u0631 \u062f\u0631 \u0633\u0627\u0644 2019 \u062a\u0648\u0633\u0637 Palo Alto \u06a9\u0634\u0641 \u0634\u062f. \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0686\u0646\u062f \u0645\u0631\u062d\u0644\u0647 \u0627\u06cc \u0627\u0633\u062a. \u062a\u0646\u0647\u0627 \u0642\u0631\u0628\u0627\u0646\u06cc (\u0627\u0632 \u0631\u0648\u0633\u06cc\u0647) \u062f\u0631 \u0633\u0627\u0644 2017 \u0645\u0648\u0631\u062f \u062d\u0645\u0644\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a. \u0645\u06a9\u0627\u0646\u06cc\u0633\u0645 \u0639\u0641\u0648\u0646\u062a \u0627\u0648\u0644\u06cc\u0647 \u0646\u0627\u0634\u0646\u0627\u062e\u062a\u0647 \u0627\u0633\u062a. \u0645\u0631\u062d\u0644\u0647 \u0627\u0648\u0644 \u0628\u0648\u062a \u0644\u0648\u062f\u0631 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u0627\u0631\u0627\u0626\u0647 \u062f\u0647\u0646\u062f\u0647 \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u06cc\u062c\u0627\u062f \u0634\u062f\u0647 \u0627\u0633\u062a. \u0647\u062f\u0641 \u0627\u0635\u0644\u06cc \u0622\u0646 \u0627\u0631\u0627\u0626\u0647 \u06cc\u06a9 \u0645\u0627\u0698\u0648\u0644 \u0645\u0631\u062d\u0644\u0647 \u0628\u0639\u062f\u06cc \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0631\u062c\u06cc\u0633\u062a\u0631\u06cc \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u062f \u0648 \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc VirtualBox \u0628\u0631\u0627\u06cc \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u06cc\u06a9 \u062f\u0631\u0627\u06cc\u0648\u0631 \u0645\u062e\u0631\u0628 \u062f\u0631 \u062d\u0627\u0644\u062a \u0647\u0633\u062a\u0647 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0646\u062f.\n 10. Metador \u0627\u0648\u0644\u06cc\u0646 \u0628\u0627\u0631 \u062a\u0648\u0633\u0637 SentinelLabs \u062f\u0631 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 2022 \u062a\u0648\u0635\u06cc\u0641 \u0634\u062f. \u0628\u0647 \u0627\u0631\u0627\u0626\u0647 \u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u0648 \u062f\u0627\u0646\u0634\u06af\u0627\u0647 \u0647\u0627 \u062f\u0631 \u062e\u0627\u0648\u0631\u0645\u06cc\u0627\u0646\u0647 \u0648 \u0622\u0641\u0631\u06cc\u0642\u0627 \u062d\u0645\u0644\u0647 \u0645\u06cc \u06a9\u0646\u062f. Metador \u0627\u0632 \u062f\u0648 \u067e\u0644\u062a\u0641\u0631\u0645 \u0645\u062e\u0631\u0628 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0646\u062f: metaMain \u0648 Mafalda \u06a9\u0647 \u0645\u0646\u062d\u0635\u0631\u0627\u064b \u062f\u0631 \u062d\u0627\u0641\u0638\u0647 \u0645\u0633\u062a\u0642\u0631 \u0645\u06cc \u0634\u0648\u0646\u062f \u0648 \u062f\u0627\u062f\u0647 \u0647\u0627 \u0631\u0627 \u0628\u0627 \u0633\u0627\u06cc\u0631 \u0627\u06cc\u0645\u067e\u0644\u0646\u062a \u0647\u0627\u06cc \u0646\u0627\u0634\u0646\u0627\u062e\u062a\u0647 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0645\u06cc \u06af\u0630\u0627\u0631\u0646\u062f.\n\n\ud83d\udc6e\u200d\u2640\ufe0f\ud83d\udc6e\u200d\u2640\ufe0f \u0628\u0627\u0632\u0646\u0634\u0631 \u0645\u0637\u0627\u0644\u0628 \u0627\u06cc\u0646 \u06a9\u0627\u0646\u0627\u0644 \u0635\u0631\u0641\u0627 \u0628\u0627 \u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0646\u0627\u0644 \u0645\u062c\u0627\u0632 \u0645\u06cc\u0628\u0627\u0634\u062f.\n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\n\u0627\u062f\u0645\u06cc\u0646:\nhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u062a\u0648\u06cc\u06cc\u062a\u0631:\nhttps://twitter.com/icscerti", "creation_timestamp": "2022-10-13T16:06:33.000000Z"}, {"uuid": "f1e4fed1-c9db-4736-9bdb-b06add5f822a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "https://t.me/arpsyndicate/1013", "content": "#ExploitObserverAlert\n\nCVE-2021-21224\n\nDESCRIPTION: Exploit Observer has 20 entries related to CVE-2021-21224. Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n\nFIRST-EPSS: 0.736520000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-12-03T19:43:13.000000Z"}, {"uuid": "54a184a7-0689-4af8-b562-cb267424cc03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "https://t.me/cyberguerre/760", "content": "\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044f \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432 \u0441\u0432\u043e\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043f\u0440\u043e\u043b\u0438\u0432\u0430\u0435\u0442 \u0441\u0432\u0435\u0442 \u043d\u0430 10 \u0441\u0430\u043c\u044b\u0445 \u0437\u0430\u0433\u0430\u0434\u043e\u0447\u043d\u044b\u0445 APT-\u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439, \u043e\u0441\u0442\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u0431\u0435\u0437 \u0430\u0442\u0440\u0438\u0431\u0443\u0446\u0438\u0438.\n\n 1. \u041f\u0440\u043e\u0435\u043a\u0442 TajMahal. \u0421\u043b\u043e\u0436\u043d\u044b\u0439 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0438\u0437 \u0434\u0432\u0443\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Tokyo \u0438 Yokohama. \u041c\u043e\u0436\u0435\u0442 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0431\u043e\u043b\u0435\u0435 80 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439. TajMahal \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 5 \u043b\u0435\u0442 \u0434\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u0434\u0438\u043f\u043b\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044e.\n\n 2. DarkUniverse\u00a0\u2014 \u0435\u0449\u0435 \u043e\u0434\u0438\u043d APT-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0441 2009 \u043f\u043e 2017\u00a0\u0433\u043e\u0434\u00a0\u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a \u043d\u0430 20 \u0433\u0440\u0430\u0436\u0434\u0430\u043d\u0441\u043a\u0438\u0445 \u0438 \u0432\u043e\u0435\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0432 \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445. \u0420\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0444\u0438\u0448\u0438\u043d\u0433 \u0438 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430.\n\n 3. PuzzleMaker. \u0412 \u0430\u043f\u0440\u0435\u043b\u0435 2021\u00a0\u0433\u043e\u0434\u0430 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u043b\u043e\u0436\u043d\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0438\u0437 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432. \u0414\u043b\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c CVE-2021-21224 \u0432 Google Chrome \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441  CVE-2021-31955 \u0438 CVE-2021-31956. \u041f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u043b\u0441\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0441\u043b\u0443\u0447\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 PuzzleMaker.\n\n 4. ProjectSauron \u0431\u044b\u043b \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0432 2015. \u042f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0439 APT-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u043e\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438, \u0418\u0440\u0430\u043d\u0435, \u0420\u0443\u0430\u043d\u0434\u0435. \u0412 \u0430\u0442\u0430\u043a\u0430\u0445 \n\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b. \u0413\u0440\u0443\u043f\u043f\u0430, \u0441\u0442\u043e\u044f\u0449\u0430\u044f \u0437\u0430 ProjectSauron, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u043b\u043e\u0436\u043d\u0443\u044e \u04212-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0441 \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u0440\u044f\u0434\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0432 \u0421\u0428\u0410 \u0438 \u0415\u0432\u0440\u043e\u043f\u0435. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043e\u043f\u044b\u0442 \u0434\u0440\u0443\u0433\u0438\u0445 APT-\u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Duqu, Flame, Equation \u0438 Regin.\n\n 5. USB Thief. \u0412 2016\u00a0\u0433\u043e\u0434\u0443 ESET \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 USB-\u0442\u0440\u043e\u044f\u043d\u0435\u0446 \u0441 \u0445\u0438\u0442\u0440\u044b\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u0441\u0430\u043c\u043e\u0437\u0430\u0449\u0438\u0442\u044b. \u0417\u043b\u043e\u0432\u0440\u0435\u0434 \u0441\u043e\u0441\u0442\u043e\u044f\u043b \u0438\u0437 \u0448\u0435\u0441\u0442\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0434\u0432\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u043c\u0438, \u0430 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0447\u0435\u0442\u044b\u0440\u0435\u00a0\u2014 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c\u0438. \u0417\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0438\u0445 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0437\u0430\u0434\u0430\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435, \u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u044b \u043f\u043e \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0443 AES-128. \u041a\u043b\u044e\u0447 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 USB-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0432\u043e\u0439\u0441\u0442\u0432 \u0434\u0438\u0441\u043a\u0430. \u0422\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u0430\u00a0\u2014 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0438, \u043a\u0430\u0436\u0434\u044b\u0439 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u0444\u0430\u0439\u043b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u044d\u0442\u0430\u043f\u0430. \u0423\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0441\u0435\u0433\u0434\u0430 \u0432\u044b\u0433\u0440\u0443\u0436\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0439 USB-\u0434\u0438\u0441\u043a. \u041c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d \u0441 APT-\u0433\u0440\u0443\u043f\u043f\u043e\u0439 Lamberts.\n\n 6. TENSHO (White Tur). \u0412 \u043d\u0430\u0447\u0430\u043b\u0435 2021\u00a0\u0433\u043e\u0434\u0430 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u043f\u043e\u0438\u0441\u043a\u0430 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 PwC \u043d\u0430\u0442\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u0430 \u043e\u0431\u043e\u0440\u043e\u043d\u044b \u0421\u0435\u0440\u0431\u0438\u0438. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0430 \u043f\u0440\u0435\u0436\u0434\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 TENSHO, \u0438\u043b\u0438 White Tur. \u0413\u0440\u0443\u043f\u043f\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0430 \u0441 2017\u00a0\u0433\u043e\u0434\u0430 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0440\u0430\u0437\u043d\u043e\u043e\u0431\u0440\u0430\u0437\u043d\u044b\u0435 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438 OpenHardwareMonitor, \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0432\u0440\u0435\u0434 TENSHO \u0432 \u0444\u043e\u0440\u043c\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u0430 PowerShell \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0434\u043b\u044f Windows. \n\n 7.  PlexingEagle. \u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 HITBSec 2017 \u0432 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0435 \u042d\u043c\u043c\u0430\u043d\u0443\u044d\u043b\u044c \u0413\u0430\u0434\u044d (Emmanuel Gadaix) \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043a\u0440\u0430\u0439\u043d\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0432 GSM-\u0441\u0435\u0442\u044f\u0445.\n\n 8. SinSono. \u0412 \u043c\u0430\u0435 2021\u00a0\u0433\u043e\u0434\u0430 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Syniverse \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0432\u043e\u0438\u043c IT-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c. \u0412\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u043e, \u0447\u0442\u043e \u0430\u043a\u0442\u043e\u0440 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043f\u0440\u043e\u043d\u0438\u043a \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0435\u0449\u0435 \u0432 2016\u00a0\u0433\u043e\u0434\u0443. \u0412 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u044f\u0442\u0438 \u043b\u0435\u0442, \u043e\u0441\u0442\u0430\u0432\u0430\u044f\u0441\u044c \u043d\u0435\u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0441\u043c\u043e\u0433 \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0440\u0435\u0434\u0443 EDT \u0443 235\u00a0\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0445, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f  \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0432\u043e\u043d\u043a\u043e\u0432 \u0438 \u0442\u0435\u043a\u0441\u0442\u044b \u0441\u043c\u0441.\n\n9. MagicScroll - \u0441\u043b\u043e\u0436\u043d\u044b\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a, \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0432 2019\u00a0\u0433\u043e\u0434\u0443 Palo Alto. \u042d\u0442\u043e \u043c\u043d\u043e\u0433\u043e\u044d\u0442\u0430\u043f\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e. \u0415\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u0430\u044f \u0436\u0435\u0440\u0442\u0432\u0430 (\u0438\u0437 \u0420\u043e\u0441\u0441\u0438\u0438) \u0431\u044b\u043b\u0430 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u0430 \u0432 2017\u00a0\u0433\u043e\u0434\u0443. \u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u043e\u0433\u043e \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d. \u041f\u0435\u0440\u0432\u044b\u0439 \u044d\u0442\u0430\u043f\u00a0- \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0441\u043e\u0437\u0434\u0430\u043d \u043a\u0430\u043a \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0415\u0433\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0435 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 - \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0430 \u043c\u043e\u0434\u0443\u043b\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u044d\u0442\u0430\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0445\u0440\u0430\u043d\u0438\u0442\u0441\u044f \u0432 \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c VirtualBox \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u044f\u0434\u0440\u0430.\n\n10. Metador \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0431\u044b\u043b\u0430 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 SentinelLabs \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2022\u00a0\u0433\u043e\u0434\u0430. \u0410\u0442\u0430\u043a\u0443\u0435\u0442 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0438 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u044b \u0432 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0411\u043b\u0438\u0436\u043d\u0435\u0433\u043e \u0412\u043e\u0441\u0442\u043e\u043a\u0430 \u0438 \u0410\u0444\u0440\u0438\u043a\u0438. Metador \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0434\u0432\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b: metaMain \u0438 Mafalda, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043e\u0431\u043c\u0435\u043d\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0438\u043c\u043f\u043b\u0430\u0442\u0430\u0442\u0430\u043c\u0438.", "creation_timestamp": "2022-10-12T14:38:33.000000Z"}, {"uuid": "bf00b822-5807-4796-8327-e8eaf007a7c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "https://t.me/true_secator/3545", "content": "\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044f \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432 \u0441\u0432\u043e\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043f\u0440\u043e\u043b\u0438\u0432\u0430\u0435\u0442 \u0441\u0432\u0435\u0442 \u043d\u0430 10 \u0441\u0430\u043c\u044b\u0445 \u0437\u0430\u0433\u0430\u0434\u043e\u0447\u043d\u044b\u0445 APT-\u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439, \u043e\u0441\u0442\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u0431\u0435\u0437 \u0430\u0442\u0440\u0438\u0431\u0443\u0446\u0438\u0438.\n\n 1. \u041f\u0440\u043e\u0435\u043a\u0442 TajMahal. \u0421\u043b\u043e\u0436\u043d\u044b\u0439 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0438\u0437 \u0434\u0432\u0443\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Tokyo \u0438 Yokohama. \u041c\u043e\u0436\u0435\u0442 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0431\u043e\u043b\u0435\u0435 80 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439. TajMahal \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 5 \u043b\u0435\u0442 \u0434\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u0434\u0438\u043f\u043b\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044e.\n\n 2. DarkUniverse\u00a0\u2014 \u0435\u0449\u0435 \u043e\u0434\u0438\u043d APT-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0441 2009 \u043f\u043e 2017\u00a0\u0433\u043e\u0434\u00a0\u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a \u043d\u0430 20 \u0433\u0440\u0430\u0436\u0434\u0430\u043d\u0441\u043a\u0438\u0445 \u0438 \u0432\u043e\u0435\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0432 \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445. \u0420\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0444\u0438\u0448\u0438\u043d\u0433 \u0438 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430.\n\n 3. PuzzleMaker. \u0412 \u0430\u043f\u0440\u0435\u043b\u0435 2021\u00a0\u0433\u043e\u0434\u0430 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u043b\u043e\u0436\u043d\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0438\u0437 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432. \u0414\u043b\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c CVE-2021-21224 \u0432 Google Chrome \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441  CVE-2021-31955 \u0438 CVE-2021-31956. \u041f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u043b\u0441\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0441\u043b\u0443\u0447\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 PuzzleMaker.\n\n 4. ProjectSauron \u0431\u044b\u043b \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0432 2015. \u042f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0439 APT-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u043e\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438, \u0418\u0440\u0430\u043d\u0435, \u0420\u0443\u0430\u043d\u0434\u0435. \u0412 \u0430\u0442\u0430\u043a\u0430\u0445 \n\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b. \u0413\u0440\u0443\u043f\u043f\u0430, \u0441\u0442\u043e\u044f\u0449\u0430\u044f \u0437\u0430 ProjectSauron, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u043b\u043e\u0436\u043d\u0443\u044e \u04212-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0441 \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u0440\u044f\u0434\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0432 \u0421\u0428\u0410 \u0438 \u0415\u0432\u0440\u043e\u043f\u0435. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043e\u043f\u044b\u0442 \u0434\u0440\u0443\u0433\u0438\u0445 APT-\u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Duqu, Flame, Equation \u0438 Regin.\n\n 5. USB Thief. \u0412 2016\u00a0\u0433\u043e\u0434\u0443 ESET \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 USB-\u0442\u0440\u043e\u044f\u043d\u0435\u0446 \u0441 \u0445\u0438\u0442\u0440\u044b\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u0441\u0430\u043c\u043e\u0437\u0430\u0449\u0438\u0442\u044b. \u0417\u043b\u043e\u0432\u0440\u0435\u0434 \u0441\u043e\u0441\u0442\u043e\u044f\u043b \u0438\u0437 \u0448\u0435\u0441\u0442\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0434\u0432\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u043c\u0438, \u0430 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0447\u0435\u0442\u044b\u0440\u0435\u00a0\u2014 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c\u0438. \u0417\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0438\u0445 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0437\u0430\u0434\u0430\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435, \u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u044b \u043f\u043e \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0443 AES-128. \u041a\u043b\u044e\u0447 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 USB-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0432\u043e\u0439\u0441\u0442\u0432 \u0434\u0438\u0441\u043a\u0430. \u0422\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u0430\u00a0\u2014 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0438, \u043a\u0430\u0436\u0434\u044b\u0439 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u0444\u0430\u0439\u043b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u044d\u0442\u0430\u043f\u0430. \u0423\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0441\u0435\u0433\u0434\u0430 \u0432\u044b\u0433\u0440\u0443\u0436\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0439 USB-\u0434\u0438\u0441\u043a. \u041c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d \u0441 APT-\u0433\u0440\u0443\u043f\u043f\u043e\u0439 Lamberts.\n\n 6. TENSHO (White Tur). \u0412 \u043d\u0430\u0447\u0430\u043b\u0435 2021\u00a0\u0433\u043e\u0434\u0430 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u043f\u043e\u0438\u0441\u043a\u0430 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 PwC \u043d\u0430\u0442\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u0430 \u043e\u0431\u043e\u0440\u043e\u043d\u044b \u0421\u0435\u0440\u0431\u0438\u0438. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0430 \u043f\u0440\u0435\u0436\u0434\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 TENSHO, \u0438\u043b\u0438 White Tur. \u0413\u0440\u0443\u043f\u043f\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0430 \u0441 2017\u00a0\u0433\u043e\u0434\u0430 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0440\u0430\u0437\u043d\u043e\u043e\u0431\u0440\u0430\u0437\u043d\u044b\u0435 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438 OpenHardwareMonitor, \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0432\u0440\u0435\u0434 TENSHO \u0432 \u0444\u043e\u0440\u043c\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u0430 PowerShell \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0434\u043b\u044f Windows. \n\n 7.  PlexingEagle. \u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 HITBSec 2017 \u0432 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0435 \u042d\u043c\u043c\u0430\u043d\u0443\u044d\u043b\u044c \u0413\u0430\u0434\u044d (Emmanuel Gadaix) \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043a\u0440\u0430\u0439\u043d\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0432 GSM-\u0441\u0435\u0442\u044f\u0445.\n\n 8. SinSono. \u0412 \u043c\u0430\u0435 2021\u00a0\u0433\u043e\u0434\u0430 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Syniverse \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0432\u043e\u0438\u043c IT-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c. \u0412\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u043e, \u0447\u0442\u043e \u0430\u043a\u0442\u043e\u0440 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043f\u0440\u043e\u043d\u0438\u043a \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0435\u0449\u0435 \u0432 2016\u00a0\u0433\u043e\u0434\u0443. \u0412 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u044f\u0442\u0438 \u043b\u0435\u0442, \u043e\u0441\u0442\u0430\u0432\u0430\u044f\u0441\u044c \u043d\u0435\u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0441\u043c\u043e\u0433 \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0440\u0435\u0434\u0443 EDT \u0443 235\u00a0\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0445, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f  \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0432\u043e\u043d\u043a\u043e\u0432 \u0438 \u0442\u0435\u043a\u0441\u0442\u044b \u0441\u043c\u0441.\n\n9. MagicScroll - \u0441\u043b\u043e\u0436\u043d\u044b\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a, \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0432 2019\u00a0\u0433\u043e\u0434\u0443 Palo Alto. \u042d\u0442\u043e \u043c\u043d\u043e\u0433\u043e\u044d\u0442\u0430\u043f\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e. \u0415\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u0430\u044f \u0436\u0435\u0440\u0442\u0432\u0430 (\u0438\u0437 \u0420\u043e\u0441\u0441\u0438\u0438) \u0431\u044b\u043b\u0430 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u0430 \u0432 2017\u00a0\u0433\u043e\u0434\u0443. \u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u043e\u0433\u043e \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d. \u041f\u0435\u0440\u0432\u044b\u0439 \u044d\u0442\u0430\u043f\u00a0- \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0441\u043e\u0437\u0434\u0430\u043d \u043a\u0430\u043a \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0415\u0433\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0435 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 - \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0430 \u043c\u043e\u0434\u0443\u043b\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u044d\u0442\u0430\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0445\u0440\u0430\u043d\u0438\u0442\u0441\u044f \u0432 \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c VirtualBox \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u044f\u0434\u0440\u0430.\n\n10. Metador \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0431\u044b\u043b\u0430 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 SentinelLabs \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2022\u00a0\u0433\u043e\u0434\u0430. \u0410\u0442\u0430\u043a\u0443\u0435\u0442 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0438 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u044b \u0432 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0411\u043b\u0438\u0436\u043d\u0435\u0433\u043e \u0412\u043e\u0441\u0442\u043e\u043a\u0430 \u0438 \u0410\u0444\u0440\u0438\u043a\u0438. Metador \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0434\u0432\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b: metaMain \u0438 Mafalda, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043e\u0431\u043c\u0435\u043d\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0438\u043c\u043f\u043b\u0430\u0442\u0430\u0442\u0430\u043c\u0438.", "creation_timestamp": "2022-10-12T09:02:21.000000Z"}, {"uuid": "313661ec-848f-4586-9176-65d9935d43b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "https://t.me/SecLabNews/12832", "content": "\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044f \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432 \u0441\u0432\u043e\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043f\u0440\u043e\u043b\u0438\u0432\u0430\u0435\u0442 \u0441\u0432\u0435\u0442 \u043d\u0430 10 \u0441\u0430\u043c\u044b\u0445 \u0437\u0430\u0433\u0430\u0434\u043e\u0447\u043d\u044b\u0445 APT-\u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439, \u043e\u0441\u0442\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u0431\u0435\u0437 \u0430\u0442\u0440\u0438\u0431\u0443\u0446\u0438\u0438.\n\n 1. \u041f\u0440\u043e\u0435\u043a\u0442 TajMahal. \u0421\u043b\u043e\u0436\u043d\u044b\u0439 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0438\u0437 \u0434\u0432\u0443\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Tokyo \u0438 Yokohama. \u041c\u043e\u0436\u0435\u0442 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0431\u043e\u043b\u0435\u0435 80 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439. TajMahal \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 5 \u043b\u0435\u0442 \u0434\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u0434\u0438\u043f\u043b\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044e.\n\n 2. DarkUniverse\u00a0\u2014 \u0435\u0449\u0435 \u043e\u0434\u0438\u043d APT-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0441 2009 \u043f\u043e 2017\u00a0\u0433\u043e\u0434\u00a0\u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a \u043d\u0430 20 \u0433\u0440\u0430\u0436\u0434\u0430\u043d\u0441\u043a\u0438\u0445 \u0438 \u0432\u043e\u0435\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0432 \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445. \u0420\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0444\u0438\u0448\u0438\u043d\u0433 \u0438 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430.\n\n 3. PuzzleMaker. \u0412 \u0430\u043f\u0440\u0435\u043b\u0435 2021\u00a0\u0433\u043e\u0434\u0430 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u043b\u043e\u0436\u043d\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0438\u0437 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432. \u0414\u043b\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c CVE-2021-21224 \u0432 Google Chrome \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441  CVE-2021-31955 \u0438 CVE-2021-31956. \u041f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u043b\u0441\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0441\u043b\u0443\u0447\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 PuzzleMaker.\n\n 4. ProjectSauron \u0431\u044b\u043b \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0432 2015. \u042f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0439 APT-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u043e\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438, \u0418\u0440\u0430\u043d\u0435, \u0420\u0443\u0430\u043d\u0434\u0435. \u0412 \u0430\u0442\u0430\u043a\u0430\u0445 \n\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b. \u0413\u0440\u0443\u043f\u043f\u0430, \u0441\u0442\u043e\u044f\u0449\u0430\u044f \u0437\u0430 ProjectSauron, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u043b\u043e\u0436\u043d\u0443\u044e \u04212-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0441 \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u0440\u044f\u0434\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0432 \u0421\u0428\u0410 \u0438 \u0415\u0432\u0440\u043e\u043f\u0435. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043e\u043f\u044b\u0442 \u0434\u0440\u0443\u0433\u0438\u0445 APT-\u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Duqu, Flame, Equation \u0438 Regin.\n\n 5. USB Thief. \u0412 2016\u00a0\u0433\u043e\u0434\u0443 ESET \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 USB-\u0442\u0440\u043e\u044f\u043d\u0435\u0446 \u0441 \u0445\u0438\u0442\u0440\u044b\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u0441\u0430\u043c\u043e\u0437\u0430\u0449\u0438\u0442\u044b. \u0417\u043b\u043e\u0432\u0440\u0435\u0434 \u0441\u043e\u0441\u0442\u043e\u044f\u043b \u0438\u0437 \u0448\u0435\u0441\u0442\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0434\u0432\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u043c\u0438, \u0430 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0447\u0435\u0442\u044b\u0440\u0435\u00a0\u2014 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c\u0438. \u0417\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0438\u0445 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0437\u0430\u0434\u0430\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435, \u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u044b \u043f\u043e \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0443 AES-128. \u041a\u043b\u044e\u0447 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 USB-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0432\u043e\u0439\u0441\u0442\u0432 \u0434\u0438\u0441\u043a\u0430. \u0422\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u0430\u00a0\u2014 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0438, \u043a\u0430\u0436\u0434\u044b\u0439 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u0444\u0430\u0439\u043b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u044d\u0442\u0430\u043f\u0430. \u0423\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0441\u0435\u0433\u0434\u0430 \u0432\u044b\u0433\u0440\u0443\u0436\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0439 USB-\u0434\u0438\u0441\u043a. \u041c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d \u0441 APT-\u0433\u0440\u0443\u043f\u043f\u043e\u0439 Lamberts.\n\n 6. TENSHO (White Tur). \u0412 \u043d\u0430\u0447\u0430\u043b\u0435 2021\u00a0\u0433\u043e\u0434\u0430 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u043f\u043e\u0438\u0441\u043a\u0430 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 PwC \u043d\u0430\u0442\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u0430 \u043e\u0431\u043e\u0440\u043e\u043d\u044b \u0421\u0435\u0440\u0431\u0438\u0438. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0430 \u043f\u0440\u0435\u0436\u0434\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 TENSHO, \u0438\u043b\u0438 White Tur. \u0413\u0440\u0443\u043f\u043f\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0430 \u0441 2017\u00a0\u0433\u043e\u0434\u0430 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0440\u0430\u0437\u043d\u043e\u043e\u0431\u0440\u0430\u0437\u043d\u044b\u0435 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438 OpenHardwareMonitor, \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0432\u0440\u0435\u0434 TENSHO \u0432 \u0444\u043e\u0440\u043c\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u0430 PowerShell \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0434\u043b\u044f Windows. \n\n 7.  PlexingEagle. \u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 HITBSec 2017 \u0432 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0435 \u042d\u043c\u043c\u0430\u043d\u0443\u044d\u043b\u044c \u0413\u0430\u0434\u044d (Emmanuel Gadaix) \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043a\u0440\u0430\u0439\u043d\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0432 GSM-\u0441\u0435\u0442\u044f\u0445.\n\n 8. SinSono. \u0412 \u043c\u0430\u0435 2021\u00a0\u0433\u043e\u0434\u0430 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Syniverse \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0432\u043e\u0438\u043c IT-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c. \u0412\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u043e, \u0447\u0442\u043e \u0430\u043a\u0442\u043e\u0440 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043f\u0440\u043e\u043d\u0438\u043a \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0435\u0449\u0435 \u0432 2016\u00a0\u0433\u043e\u0434\u0443. \u0412 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u044f\u0442\u0438 \u043b\u0435\u0442, \u043e\u0441\u0442\u0430\u0432\u0430\u044f\u0441\u044c \u043d\u0435\u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0441\u043c\u043e\u0433 \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0440\u0435\u0434\u0443 EDT \u0443 235\u00a0\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0445, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f  \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0432\u043e\u043d\u043a\u043e\u0432 \u0438 \u0442\u0435\u043a\u0441\u0442\u044b \u0441\u043c\u0441.\n\n9. MagicScroll - \u0441\u043b\u043e\u0436\u043d\u044b\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a, \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0432 2019\u00a0\u0433\u043e\u0434\u0443 Palo Alto. \u042d\u0442\u043e \u043c\u043d\u043e\u0433\u043e\u044d\u0442\u0430\u043f\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e. \u0415\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u0430\u044f \u0436\u0435\u0440\u0442\u0432\u0430 (\u0438\u0437 \u0420\u043e\u0441\u0441\u0438\u0438) \u0431\u044b\u043b\u0430 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u0430 \u0432 2017\u00a0\u0433\u043e\u0434\u0443. \u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u043e\u0433\u043e \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d. \u041f\u0435\u0440\u0432\u044b\u0439 \u044d\u0442\u0430\u043f\u00a0- \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0441\u043e\u0437\u0434\u0430\u043d \u043a\u0430\u043a \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0415\u0433\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0435 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 - \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0430 \u043c\u043e\u0434\u0443\u043b\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u044d\u0442\u0430\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0445\u0440\u0430\u043d\u0438\u0442\u0441\u044f \u0432 \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c VirtualBox \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u044f\u0434\u0440\u0430.\n\n10. Metador \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0431\u044b\u043b\u0430 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 SentinelLabs \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2022\u00a0\u0433\u043e\u0434\u0430. \u0410\u0442\u0430\u043a\u0443\u0435\u0442 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0438 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u044b \u0432 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0411\u043b\u0438\u0436\u043d\u0435\u0433\u043e \u0412\u043e\u0441\u0442\u043e\u043a\u0430 \u0438 \u0410\u0444\u0440\u0438\u043a\u0438. Metador \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0434\u0432\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b: metaMain \u0438 Mafalda, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043e\u0431\u043c\u0435\u043d\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0438\u043c\u043f\u043b\u0430\u0442\u0430\u0442\u0430\u043c\u0438.", "creation_timestamp": "2022-10-12T14:32:56.000000Z"}, {"uuid": "beb02bab-058b-4037-8b2a-2f2871558f26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3218", "content": "#exploit\nSample ARM64 PoC for CVE-2021-21224", "creation_timestamp": "2021-04-26T11:02:21.000000Z"}, {"uuid": "a94f5608-fcf0-471b-850e-5ed41a1e5c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "MISP/df23874b-e926-4e6f-b80e-c8a58279bcb0", "content": "", "creation_timestamp": "2026-06-04T13:33:30.000000Z"}, {"uuid": "d2ca19ab-b316-4d56-8280-6d4b16b577d7", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c985f65e-54bd-4400-b243-93a11bc2dc00", "content": "", "creation_timestamp": "2026-06-19T12:47:47.216464Z"}, {"uuid": "e8676841-ab83-447b-9055-226b93f10f23", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/70429028-bd2a-43f1-bdad-89e9c75a2811", "content": "", "creation_timestamp": "2026-06-23T14:04:41.783411Z"}, {"uuid": "2ae7b575-acbd-4960-9a50-980c0a2bed00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "https://t.me/hacking_Attack/48245", "content": "Black Hat Ethical Hacking\nGoogle Chrome Bug Actively Exploited as Zero-Day\n\nGoogle Chrome Bug Actively Exploited as Zero-DayPost Views: 32 \nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Patreon.png \nReading Time: 2 Minutes\nGoogle issued an update for the bug, which is found in the open-source V8 JavaScript engine.\nGoogle has updated its Stable channel for the desktop version of Chrome, to address a zero-day security vulnerability that\u2019s being actively exploited in the wild.\n\nThe bug, tracked as CVE-2022-1096, is a type-confusion issue in the V8 JavaScript engine, which is an open-source engine used by Chrome and Chromium-based web browsers. Type confusion, as Microsoft has laid out in the past, occurs \u201cwhen a piece of code doesn\u2019t verify the type of object that is passed to it, and uses it blindly without type-checking, it leads to type confusion\u2026Also with type confusion, wrong function pointers or data are fed into the wrong piece of code. In some circumstances this can lead to code execution.\u201d\n\nGoogle didn\u2019t provide additional technical details, as is its wont, but did say that it was \u201caware that an exploit for CVE-2022-1096 exists in the wild.\u201d An anonymous researcher was credited with finding the issue, which is labeled \u201chigh-severity\u201d (no CVSS score was given).\n\nThe lack of any further information is a source of frustration to some.\n\n\u201cAs a defender, I really wish it was more clear what this security fix is,\u201d John Bambenek, principal threat hunter at Netenrich, said via email. \u201cI get permission-denied errors or \u2018need to authenticate,\u2019 so I can\u2019t make decisions or advise my clients. A little more transparency would be beneficial and appreciated.\u201d\nSee Also: Complete Offensive Security and Ethical Hacking Course\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Emergency Patch; Active ExploitThe internet giant has updated the Stable channel to 99.0.4844.84 for Chrome for Windows, Mac and Linux, according to the its security advisory. Microsoft, which offers the Chromium-based Edge browser, also issued its own advisory. It\u2019s unclear whether other offerings built in V8, such as the JavaScript runtime environment Node.js, are also affected.\n\nThe patch was issued on an emergency basis, likely due to the active exploit that\u2019s circulating, researchers noted.\n\n\u201cThe first thing which stood out to me about this update is that it only fixes a single issue,\u201d Casey Ellis, founder and CTO at Bugcrowd, noted by email. \u201cThis is pretty unusual for Google. They typically fix multiple issues in these types of releases, which suggests that they are quite concerned and very motivated to see fixes against CVE-2022-1096 applied across their user-base ASAP.\u201d\n\nHe also commented on the speed of the patch being rolled out.\n\n\u201cThe vulnerability was only reported on the 23rd of March, and while Google\u2019s Chrome team do tend to be fairly prompt in developing, testing and rolling patches, the idea of a patch for software deployed as widely deployed as Chrome in 48 hours is something is continue to be impressed by,\u201d he said. \u201cSpeculatively, I\u2019d suggest that the vulnerability has been discovered via detection of active exploitation in the wild, and the combination of impact and potentially the malicious actors currently using it contributed to the fast turnaround.\u201d\nSee Also: Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH V8 Engine in the CrosshairsThe V8 engine has been plagued with security bugs and targeted by cyberattackers many times in the last year:\n\nLast year delivered a total of these 16 Chrome zero days:\n\n* CVE-2021-21148\u00a0\u2013 Feb. 4, an unnamed type of bug in V8\n* CVE-2021-21224\u00a0\u2013 April 20, an issue with type confusion in V8 that could have allowed a remote attacker t[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:49.337258Z"}, {"uuid": "b5a7c5b1-e0f0-4b7e-bc2c-9d21fcb24632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "https://t.me/hacking_Attack/23972", "content": "ock, pointed out that Google has patched plenty of zero-days already this year \u2013 eight prior to the latest two, to be exact \u2013 and he said to expect more.\nSee Also: Offensive Security Tool: Jenkins Attack Framework 10th Zero-Day in 2021 for Google\u201cToday, Google released a patch for its tenth [and ninth] zero-day exploit of the year,\u201d Dunne said in an email to media. \u201cThis milestone highlights the emphasis that bad actors are putting on browser exploits, with Chrome becoming a clear favorite, allowing a streamlined way to gain access to millions of devices regardless of OS.\n\n\u201cWe expect to see continued zero-day exploits in the wild,\u201d he added.\n\nThe other zero days discovered so far in 2021 are as follows, many of them in the V8 engine:\n\n* CVE-2021-21148\u00a0\u2013 (February)\n* CVE-2021-21166\u00a0\u2013 (March)\n* CVE-2021-21193\u00a0\u2013 (March)\n* CVE-2021-21220\u00a0\u2013 (April)\n* CVE-2021-21224\u00a0\u2013 (April, later used in Windows attacks)\n* CVE-2021-30551\u00a0\u2013 (June)\n* CVE-2021-30554\u00a0\u2013 (June)\n* CVE-2021-30563\u00a0\u2013 (July)\n\n\u201cGoogle\u2019s commitment to patching these exploits quickly is commendable, as they operate Google Chrome as freeware and therefore are the sole entity who can provide these updates,\u201d Dunne wrote. \u201cGoogle is committed to providing Chrome as a free browser, as it is a critical entry point for other businesses such as Google Search and Google Workspace.\u201d\n\nThe news comes as Apple rushed a fix\u00a0for a zero-click zero-day exploit targeting iMessaging. It\u2019s allegedly been used to illegally spy on Bahraini activists with NSO Group\u2019s Pegasus spyware, according to researchers.\nMicrosoft is also expected to release its monthly Patch Tuesday set of updates today, so we\u2019ll see if there are yet more zero-day exploits to worry about.\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/banner-2021.3-release-90x90.jpg Kali Linux 2021.3 released: Kali NetHunter on a smartwatch, wider OpenSSL compatibility, new tools1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/microsoft-exploit-90x90.jpg Microsoft Patches Actively Exploited Windows Zero-Day Bug2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Apple-marketing-communications-mix-90x90.jpg Apple Issues Emergency Fix for NSO Zero-Click Zero Day3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/zeroday-90x90.png Windows MSHTML zero-day exploits shared on hacking forums4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/microsoft-zero-day-vulnerabilities-800x358-1-90x90.png Windows MSHTML zero-day defenses bypassed as new info emerges7 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Malware-90x90.jpg Microsoft shares temp fix for ongoing Office 365 zero-day attacks1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Jenkins-90x90.jpg Jenkins project\u2019s Confluence server hacked to mine Monero1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/unnamed-e1630998483665-90x90.jpg Critical Auth Bypass Bug Affect NETGEAR Smart Switches1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/loyalty-card-90x90.jpg Brute-Force Attacks Target Inboxes for Gift Card Data2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Braktooth-New-Bluetooth-gaps-threaten-countless-devices-1024x576-1-90x90.jpg Bluetooth Bugs Open Billions of Devices to DoS, Code Execution2 weeks ago\nThe post Pair of Google Chrome Zero-Day Bugs Actively Exploited first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-01T20:02:23.353965Z"}, {"uuid": "fd082ef8-c9e0-4403-ae82-53df4b61b76d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "https://t.me/hacking_Attack/25743", "content": "Black Hat Ethical Hacking\nGoogle pushes emergency Chrome update to fix two zero-days\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Google pushes emergency Chrome update to fix two zero-daysPost Views: 73 \nReading Time: 1 Minute\nGoogle has released Chrome 94.0.4606.71 for Windows, Mac, and Linux, to fix two zero-day vulnerabilities that have been exploited by attackers.\n\u201cGoogle is aware the exploits for CVE-2021-37975 and CVE-2021-37976 exist in the wild,\u201d Google disclosed in the list of security fixes\u00a0fixed in today\u2019s Google Chrome release.\n\nGoogle has started rolling out Chrome 94.0.4606.71 to users worldwide\u00a0in the Stable Desktop channel and should be available to all users within the coming days.\n\nTo install the update immediately, Google Chrome users can go to Chrome menu > Help > About Google Chrome, and the browser will begin performing the update.\n\nIn our tests, the new version of the browser was installed immediately using the above steps.\nhttps://www.bleepstatic.com/images/news/web-browsers/chrome/chrome-94.jpg \nZero-day attacks\u2019 details not disclosedWhile this Chrome release includes fixes for four security vulnerabilities, the two zero-days are concerning as they are known to have been exploited in the wild.\n\nThe first zero-day, tracked as CVE-2021-37976, is described as an \u201cInformation leak in core\u201d and was assigned a Medium severity level. This vulnerability was discovered by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero, on September 21st, 2021.\n\nThe second zero-day, tracked as CVE-2021-37975, is a High severity user after free\u00a0bug in the Chrome V8 JavaScript engine. The researcher disclosed this vulnerability on September 24th and wished to remain anonymous.\n\nUse after free bugs are commonly used to perform remote code execution or escape the browser\u2019s security sandbox.\n\nAt this time, there are no other details regarding how these zero-day vulnerabilities were used in attacks but may be released in future reports by Google TAG or Project Zero.\n2 more in-the-wild 0days fixed by Chrome:\n* CVE-2021-37975 use-after-free in V8 by anonymous\n* CVE-2021-37976 info leak in core by @_clem1 #itw0days\n\nThe release cycle that Chrome is making happen in order to get these patches out is pretty impressivehttps://t.co/j1xPY4zjlP\n\n\u2014 Maddie Stone (@maddiestone) September 30, 2021\nSee Also: Hackers exploiting critical VMware vCenter CVE-2021-22005 bug Chrome users should perform a manual upgrade or restart their browser to install the latest version and prevent exploitation attempts. Thirteenth zero-day fixed this yearWith these two fixes, Google has patched 13\u00a0zero-day vulnerabilities in the Chrome web browser since the start of 2021.\n\nThe other Chrome zero-day bugs Google fixed this year are:\n\n* CVE-2021-21148\u00a0\u2013 February 4th, 2021\n* CVE-2021-21166\u00a0\u2013 March 2nd, 2021\n* CVE-2021-21193\u00a0\u2013 March 12th, 2021\n* CVE-2021-21220\u00a0\u2013 April 13th, 2021\n* CVE-2021-21224\u00a0\u2013 April 20th, 2021\n* CVE-2021-30551\u00a0\u2013 June 9th, 2021\n* CVE-2021-30554\u00a0\u2013 June 17th, 2021\n* CVE-2021-30563\u00a0\u2013 July 15th, 2021\n* CVE-2021-30632 and CVE-2021-30633\u00a0\u2013 September 13th\n* CVE-2021-37973\u00a0\u2013 September 24th, 2021\n\nAs Google is\u00a0rushing out Chrome updates to fix zero-days as they are reported, it is always critical to install new browser updates as soon as they become available.\nSee Also: Offensive Security Tool: Discover\n[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:19.303616Z"}, {"uuid": "80bb5d22-58f0-4b2d-a981-2a2deb0759f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "https://t.me/hacking_Attack/18949", "content": "Black Hat Ethical Hacking\nBugs in Chrome\u2019s JavaScript engine can lead to powerful exploits. This project aims to stop them\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Bugs in Chrome\u2019s JavaScript engine can lead to powerful exploits. This project aims to stop themPost Views: 45 \nReading Time: 1 Minute\nA new project hopes to beef up the security of V8, a part of the Chrome browser that most users aren\u2019t aware of but that hackers increasingly see as a juicy target.\nJavaScript makes the web go around and Google has had to patch multiple\u00a0zero-day or previously unknown flaws\u00a0in Chrome\u2019s V8 JavaScript engine this year. In April, Google admitted a high severity bug in V8 tracked as CVE-2021-21224\u00a0was being exploited in the wild. \n\nChrome has over two billion users, so when zero-day exploits strike Chrome, it\u2019s a big deal. V8, an open source Google project, is a powerful JavaScript engine for Chrome that\u2019s helped advance the web and web applications. V8 also powers the server-side runtime Node.js. \n\nNow Samuel Gro\u00df, a member of the Google Project Zero security researchers team, has detailed a V8 sandbox proposal\u00a0to help protect its memory from nastier bugs in the engine using virtual machine and sandboxing technologies. \n\n\u201cV8 bugs typically allow for the construction of unusually powerful exploits. Furthermore, these bugs are unlikely to be mitigated by memory safe languages or upcoming hardware-assisted security features such as MTE or CFI,\u201d explains Gro\u00df, referring to security technologies like Microsoft\u2019s Control-flow integrity (CFI) and Intel\u2019s control-flow enforcement technologies (CET). \n\n\u201d As a result, V8 is especially attractive for real-world attackers.\u201d\nSee Also: Hackers used never-before-seen wiper in recent attack on Iranian train system Gro\u00df\u2019s comments suggest that even adopting a memory-safe language like Rust\u00a0\u2014 which Google has adopted for new Android code\u00a0\u2014 wouldn\u2019t immediately solve the security problems faced by V8, which is written in C++. \nHe also outlines the broad design objectives but, signaling the size of the project, stresses that this sandbox project is in its infancy\u00a0and that there are some big hurdles to overcome. But V8 is a Google-led open source project and given that V8 has been the source of security vulnerabilities in Chrome, there is a chance that member of GPZ\u2019s proposal could make it across the line.\n\nThe issues affect how browser software interacts with hardware beyond the operating system and aims to prevent future flaws in V8 from corrupting a computer\u2019s memory outside of the V8 heap. This would allow an attacker to execute malicious code. \nSee Also: Offensive Security Tool: Ruler One consideration for the additional security protections for V8 is the impact on hardware performance. Gro\u00df estimates his proposal would cause an overhead of about \u201c1% overall on real-world workloads\u201d. \n\nGro\u00df explains the problem with V8 that stems from JIT compilers that can be used trick a machine into emitting machine code that corrupts memory at runtime. \n\n\u201cMany V8 vulnerabilities exploited by real-world attackers are effectively 2nd order vulnerabilities: the root-cause is often a logic issue in one of the JIT compilers, which can then be exploited to generate vulnerable machine code (e.g. code that is missing a runtime safety check). The generated code can then in turn be exploited to cause memory corruption at runtime.\u201d See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 Hacker He also highlights the shortcomings of the latest security technologies, including hardware-based mitigations, that will make [...]", "creation_timestamp": "2026-09-01T20:02:29.918654Z"}, {"uuid": "788499ca-c646-4e1d-a0b6-19188143f2db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "https://t.me/hacking_Attack/12055", "content": "nt. CVSS 8.4\n* CVE-2021-33742\u00a0\u2013 Windows MSHTML Platform Remote Code Execution Vulnerability. Rating: Critical. CVSS 7.5\n* CVE-2021-31199\u00a0\u2013 Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability. Rating: Important. CVSS 5.2\n* CVE-2021-31201\u00a0\u2013 Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability. Rating: Important. CVSS 5.2 CVE-2021-33742This RCE vulnerability exploits MSHTML, a component used by the Internet Explorer engine to read and display content from websites.The bug could allow an attacker to execute code on a target system if a user views specially crafted web content. The Zero Day Initiative\u2018s (ZDI\u2019s) Dustin Childs noted in his Patch Tuesday analysis that since the vulnerability is in the Trident (MSHTML) engine itself, many different applications are affected, not just Internet Explorer. \u201cIt\u2019s not clear how widespread the active attacks are, but considering the vulnerability impacts all supported Windows versions, this should be at the top of your test and deploy list,\u201d he recommended.\n\nThe vulnerability doesn\u2019t require special privilege to exploit, though the attack complexity is high, if that\u2019s any consolation. An attacker would need to do some extra legwork to pull it off, noted Satnam Narang, staff research engineer at Tenable, in an email to Threatpost on Tuesday.\n\nImmersive Labs\u2019 Kevin Breen, director of cyber threat research, noted that visiting a website in a vulnerable browser is \u201ca simple way for attackers to deliver this exploit.\u201d He told Threatpost via email on Tuesday that since the library is used by other services and applications, \u201cemailing HTML files as part of a phishing campaign is also a viable method of delivery.\u201d Sophos decreed\u00a0this one to be the top concern of this month\u2019s crop, given that it\u2019s already being actively exploited by malicious actors. See Also: Jeff Moss, aka Dark Tangent, the person who founded DEF CON and Black Hat CVE-2021-31955, CVE-2021-31956: Used in PuzzleMaker Targeted MalwareCVE-2021-31955 is an information disclosure vulnerability in the Windows Kernel, while CVE-2021-31956 is an elevation of privilege vulnerability in Windows NTFS. The ZDI\u2019s Childs noted that CVE-2021-31956 was reported by the same researcher who found CVE-2021-31955, an information disclosure bug also listed as under active attack. They could be linked, he suggested: \u201cIt\u2019s possible these bugs were used in conjunction, as that is a common technique \u2013 use a memory leak to get the address needed to escalate privileges. These bugs are important on their own and could be even worse when combined. Definitely prioritize the testing and deployment of these patches.\u201d\n\nHe was spot-on. On Tuesday, Kaspersky announced that its researchers had discovered a highly targeted malware campaign launched in April against multiple companies, in which a previously unknown threat actor used a chain of Chrome and Windows zero-day exploits: Namely, these two.\n\nIn a press release, Kaspersky said that one of the exploits was used for RCE in the Google Chrome web browser, while the other was an elevation of privilege exploit fine-tuned to target \u201cthe latest and most prominent builds\u201d of Windows 10.\n\n\u201cRecent months have seen a wave of advanced threat activity exploiting zero-days in the wild,\u201d according to the release. \u201cIn mid-April, Kaspersky experts discovered yet a new series of highly targeted exploit attacks against multiple companies that allowed the attackers to stealthily compromise the targeted networks.\u201d\n\nKaspersky hasn\u2019t yet found a connection between these attacks and any known threat actors, so it\u2019s gone ahead and dubbed the actor PuzzleMaker. It said that all the attacks were conducted through Chrome and used an exploit that allowed for RCE. Kaspersky researchers weren\u2019t able to retrieve the code for the exploit, but the timeline and availability suggests the attackers were using the now-patched CVE-2021-21224\u00a0[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:38.061159Z"}, {"uuid": "23cbf460-c87d-404d-b702-cef20009e6b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "https://t.me/hacking_Attack/48245", "content": "Black Hat Ethical Hacking\nGoogle Chrome Bug Actively Exploited as Zero-Day\n\nGoogle Chrome Bug Actively Exploited as Zero-DayPost Views: 32 \nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Patreon.png \nReading Time: 2 Minutes\nGoogle issued an update for the bug, which is found in the open-source V8 JavaScript engine.\nGoogle has updated its Stable channel for the desktop version of Chrome, to address a zero-day security vulnerability that\u2019s being actively exploited in the wild.\n\nThe bug, tracked as CVE-2022-1096, is a type-confusion issue in the V8 JavaScript engine, which is an open-source engine used by Chrome and Chromium-based web browsers. Type confusion, as Microsoft has laid out in the past, occurs \u201cwhen a piece of code doesn\u2019t verify the type of object that is passed to it, and uses it blindly without type-checking, it leads to type confusion\u2026Also with type confusion, wrong function pointers or data are fed into the wrong piece of code. In some circumstances this can lead to code execution.\u201d\n\nGoogle didn\u2019t provide additional technical details, as is its wont, but did say that it was \u201caware that an exploit for CVE-2022-1096 exists in the wild.\u201d An anonymous researcher was credited with finding the issue, which is labeled \u201chigh-severity\u201d (no CVSS score was given).\n\nThe lack of any further information is a source of frustration to some.\n\n\u201cAs a defender, I really wish it was more clear what this security fix is,\u201d John Bambenek, principal threat hunter at Netenrich, said via email. \u201cI get permission-denied errors or \u2018need to authenticate,\u2019 so I can\u2019t make decisions or advise my clients. A little more transparency would be beneficial and appreciated.\u201d\nSee Also: Complete Offensive Security and Ethical Hacking Course\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Emergency Patch; Active ExploitThe internet giant has updated the Stable channel to 99.0.4844.84 for Chrome for Windows, Mac and Linux, according to the its security advisory. Microsoft, which offers the Chromium-based Edge browser, also issued its own advisory. It\u2019s unclear whether other offerings built in V8, such as the JavaScript runtime environment Node.js, are also affected.\n\nThe patch was issued on an emergency basis, likely due to the active exploit that\u2019s circulating, researchers noted.\n\n\u201cThe first thing which stood out to me about this update is that it only fixes a single issue,\u201d Casey Ellis, founder and CTO at Bugcrowd, noted by email. \u201cThis is pretty unusual for Google. They typically fix multiple issues in these types of releases, which suggests that they are quite concerned and very motivated to see fixes against CVE-2022-1096 applied across their user-base ASAP.\u201d\n\nHe also commented on the speed of the patch being rolled out.\n\n\u201cThe vulnerability was only reported on the 23rd of March, and while Google\u2019s Chrome team do tend to be fairly prompt in developing, testing and rolling patches, the idea of a patch for software deployed as widely deployed as Chrome in 48 hours is something is continue to be impressed by,\u201d he said. \u201cSpeculatively, I\u2019d suggest that the vulnerability has been discovered via detection of active exploitation in the wild, and the combination of impact and potentially the malicious actors currently using it contributed to the fast turnaround.\u201d\nSee Also: Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH V8 Engine in the CrosshairsThe V8 engine has been plagued with security bugs and targeted by cyberattackers many times in the last year:\n\nLast year delivered a total of these 16 Chrome zero days:\n\n* CVE-2021-21148\u00a0\u2013 Feb. 4, an unnamed type of bug in V8\n* CVE-2021-21224\u00a0\u2013 April 20, an issue with type confusion in V8 that could have allowed a remote attacker t[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:02.710519Z"}, {"uuid": "e278fc6e-8be3-4d6c-ba0c-882ca5bbf98d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "https://t.me/hacking_Attack/23972", "content": "ock, pointed out that Google has patched plenty of zero-days already this year \u2013 eight prior to the latest two, to be exact \u2013 and he said to expect more.\nSee Also: Offensive Security Tool: Jenkins Attack Framework 10th Zero-Day in 2021 for Google\u201cToday, Google released a patch for its tenth [and ninth] zero-day exploit of the year,\u201d Dunne said in an email to media. \u201cThis milestone highlights the emphasis that bad actors are putting on browser exploits, with Chrome becoming a clear favorite, allowing a streamlined way to gain access to millions of devices regardless of OS.\n\n\u201cWe expect to see continued zero-day exploits in the wild,\u201d he added.\n\nThe other zero days discovered so far in 2021 are as follows, many of them in the V8 engine:\n\n* CVE-2021-21148\u00a0\u2013 (February)\n* CVE-2021-21166\u00a0\u2013 (March)\n* CVE-2021-21193\u00a0\u2013 (March)\n* CVE-2021-21220\u00a0\u2013 (April)\n* CVE-2021-21224\u00a0\u2013 (April, later used in Windows attacks)\n* CVE-2021-30551\u00a0\u2013 (June)\n* CVE-2021-30554\u00a0\u2013 (June)\n* CVE-2021-30563\u00a0\u2013 (July)\n\n\u201cGoogle\u2019s commitment to patching these exploits quickly is commendable, as they operate Google Chrome as freeware and therefore are the sole entity who can provide these updates,\u201d Dunne wrote. \u201cGoogle is committed to providing Chrome as a free browser, as it is a critical entry point for other businesses such as Google Search and Google Workspace.\u201d\n\nThe news comes as Apple rushed a fix\u00a0for a zero-click zero-day exploit targeting iMessaging. It\u2019s allegedly been used to illegally spy on Bahraini activists with NSO Group\u2019s Pegasus spyware, according to researchers.\nMicrosoft is also expected to release its monthly Patch Tuesday set of updates today, so we\u2019ll see if there are yet more zero-day exploits to worry about.\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/banner-2021.3-release-90x90.jpg Kali Linux 2021.3 released: Kali NetHunter on a smartwatch, wider OpenSSL compatibility, new tools1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/microsoft-exploit-90x90.jpg Microsoft Patches Actively Exploited Windows Zero-Day Bug2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Apple-marketing-communications-mix-90x90.jpg Apple Issues Emergency Fix for NSO Zero-Click Zero Day3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/zeroday-90x90.png Windows MSHTML zero-day exploits shared on hacking forums4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/microsoft-zero-day-vulnerabilities-800x358-1-90x90.png Windows MSHTML zero-day defenses bypassed as new info emerges7 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Malware-90x90.jpg Microsoft shares temp fix for ongoing Office 365 zero-day attacks1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Jenkins-90x90.jpg Jenkins project\u2019s Confluence server hacked to mine Monero1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/unnamed-e1630998483665-90x90.jpg Critical Auth Bypass Bug Affect NETGEAR Smart Switches1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/loyalty-card-90x90.jpg Brute-Force Attacks Target Inboxes for Gift Card Data2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Braktooth-New-Bluetooth-gaps-threaten-countless-devices-1024x576-1-90x90.jpg Bluetooth Bugs Open Billions of Devices to DoS, Code Execution2 weeks ago\nThe post Pair of Google Chrome Zero-Day Bugs Actively Exploited first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-02T01:02:53.311095Z"}, {"uuid": "baa8d52d-e386-4433-923c-51771be53438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "https://t.me/hacking_Attack/25743", "content": "Black Hat Ethical Hacking\nGoogle pushes emergency Chrome update to fix two zero-days\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Google pushes emergency Chrome update to fix two zero-daysPost Views: 73 \nReading Time: 1 Minute\nGoogle has released Chrome 94.0.4606.71 for Windows, Mac, and Linux, to fix two zero-day vulnerabilities that have been exploited by attackers.\n\u201cGoogle is aware the exploits for CVE-2021-37975 and CVE-2021-37976 exist in the wild,\u201d Google disclosed in the list of security fixes\u00a0fixed in today\u2019s Google Chrome release.\n\nGoogle has started rolling out Chrome 94.0.4606.71 to users worldwide\u00a0in the Stable Desktop channel and should be available to all users within the coming days.\n\nTo install the update immediately, Google Chrome users can go to Chrome menu > Help > About Google Chrome, and the browser will begin performing the update.\n\nIn our tests, the new version of the browser was installed immediately using the above steps.\nhttps://www.bleepstatic.com/images/news/web-browsers/chrome/chrome-94.jpg \nZero-day attacks\u2019 details not disclosedWhile this Chrome release includes fixes for four security vulnerabilities, the two zero-days are concerning as they are known to have been exploited in the wild.\n\nThe first zero-day, tracked as CVE-2021-37976, is described as an \u201cInformation leak in core\u201d and was assigned a Medium severity level. This vulnerability was discovered by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero, on September 21st, 2021.\n\nThe second zero-day, tracked as CVE-2021-37975, is a High severity user after free\u00a0bug in the Chrome V8 JavaScript engine. The researcher disclosed this vulnerability on September 24th and wished to remain anonymous.\n\nUse after free bugs are commonly used to perform remote code execution or escape the browser\u2019s security sandbox.\n\nAt this time, there are no other details regarding how these zero-day vulnerabilities were used in attacks but may be released in future reports by Google TAG or Project Zero.\n2 more in-the-wild 0days fixed by Chrome:\n* CVE-2021-37975 use-after-free in V8 by anonymous\n* CVE-2021-37976 info leak in core by @_clem1 #itw0days\n\nThe release cycle that Chrome is making happen in order to get these patches out is pretty impressivehttps://t.co/j1xPY4zjlP\n\n\u2014 Maddie Stone (@maddiestone) September 30, 2021\nSee Also: Hackers exploiting critical VMware vCenter CVE-2021-22005 bug Chrome users should perform a manual upgrade or restart their browser to install the latest version and prevent exploitation attempts. Thirteenth zero-day fixed this yearWith these two fixes, Google has patched 13\u00a0zero-day vulnerabilities in the Chrome web browser since the start of 2021.\n\nThe other Chrome zero-day bugs Google fixed this year are:\n\n* CVE-2021-21148\u00a0\u2013 February 4th, 2021\n* CVE-2021-21166\u00a0\u2013 March 2nd, 2021\n* CVE-2021-21193\u00a0\u2013 March 12th, 2021\n* CVE-2021-21220\u00a0\u2013 April 13th, 2021\n* CVE-2021-21224\u00a0\u2013 April 20th, 2021\n* CVE-2021-30551\u00a0\u2013 June 9th, 2021\n* CVE-2021-30554\u00a0\u2013 June 17th, 2021\n* CVE-2021-30563\u00a0\u2013 July 15th, 2021\n* CVE-2021-30632 and CVE-2021-30633\u00a0\u2013 September 13th\n* CVE-2021-37973\u00a0\u2013 September 24th, 2021\n\nAs Google is\u00a0rushing out Chrome updates to fix zero-days as they are reported, it is always critical to install new browser updates as soon as they become available.\nSee Also: Offensive Security Tool: Discover\n[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:48.641428Z"}, {"uuid": "e7f6fb6f-d80d-4be0-850e-34997af60016", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "https://t.me/hacking_Attack/18949", "content": "Black Hat Ethical Hacking\nBugs in Chrome\u2019s JavaScript engine can lead to powerful exploits. This project aims to stop them\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Bugs in Chrome\u2019s JavaScript engine can lead to powerful exploits. This project aims to stop themPost Views: 45 \nReading Time: 1 Minute\nA new project hopes to beef up the security of V8, a part of the Chrome browser that most users aren\u2019t aware of but that hackers increasingly see as a juicy target.\nJavaScript makes the web go around and Google has had to patch multiple\u00a0zero-day or previously unknown flaws\u00a0in Chrome\u2019s V8 JavaScript engine this year. In April, Google admitted a high severity bug in V8 tracked as CVE-2021-21224\u00a0was being exploited in the wild. \n\nChrome has over two billion users, so when zero-day exploits strike Chrome, it\u2019s a big deal. V8, an open source Google project, is a powerful JavaScript engine for Chrome that\u2019s helped advance the web and web applications. V8 also powers the server-side runtime Node.js. \n\nNow Samuel Gro\u00df, a member of the Google Project Zero security researchers team, has detailed a V8 sandbox proposal\u00a0to help protect its memory from nastier bugs in the engine using virtual machine and sandboxing technologies. \n\n\u201cV8 bugs typically allow for the construction of unusually powerful exploits. Furthermore, these bugs are unlikely to be mitigated by memory safe languages or upcoming hardware-assisted security features such as MTE or CFI,\u201d explains Gro\u00df, referring to security technologies like Microsoft\u2019s Control-flow integrity (CFI) and Intel\u2019s control-flow enforcement technologies (CET). \n\n\u201d As a result, V8 is especially attractive for real-world attackers.\u201d\nSee Also: Hackers used never-before-seen wiper in recent attack on Iranian train system Gro\u00df\u2019s comments suggest that even adopting a memory-safe language like Rust\u00a0\u2014 which Google has adopted for new Android code\u00a0\u2014 wouldn\u2019t immediately solve the security problems faced by V8, which is written in C++. \nHe also outlines the broad design objectives but, signaling the size of the project, stresses that this sandbox project is in its infancy\u00a0and that there are some big hurdles to overcome. But V8 is a Google-led open source project and given that V8 has been the source of security vulnerabilities in Chrome, there is a chance that member of GPZ\u2019s proposal could make it across the line.\n\nThe issues affect how browser software interacts with hardware beyond the operating system and aims to prevent future flaws in V8 from corrupting a computer\u2019s memory outside of the V8 heap. This would allow an attacker to execute malicious code. \nSee Also: Offensive Security Tool: Ruler One consideration for the additional security protections for V8 is the impact on hardware performance. Gro\u00df estimates his proposal would cause an overhead of about \u201c1% overall on real-world workloads\u201d. \n\nGro\u00df explains the problem with V8 that stems from JIT compilers that can be used trick a machine into emitting machine code that corrupts memory at runtime. \n\n\u201cMany V8 vulnerabilities exploited by real-world attackers are effectively 2nd order vulnerabilities: the root-cause is often a logic issue in one of the JIT compilers, which can then be exploited to generate vulnerable machine code (e.g. code that is missing a runtime safety check). The generated code can then in turn be exploited to cause memory corruption at runtime.\u201d See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 Hacker He also highlights the shortcomings of the latest security technologies, including hardware-based mitigations, that will make [...]", "creation_timestamp": "2026-09-02T01:03:04.507278Z"}, {"uuid": "c163fe3b-1705-4d1d-b680-74449c2f8b53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "https://t.me/hacking_Attack/12055", "content": "nt. CVSS 8.4\n* CVE-2021-33742\u00a0\u2013 Windows MSHTML Platform Remote Code Execution Vulnerability. Rating: Critical. CVSS 7.5\n* CVE-2021-31199\u00a0\u2013 Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability. Rating: Important. CVSS 5.2\n* CVE-2021-31201\u00a0\u2013 Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability. Rating: Important. CVSS 5.2 CVE-2021-33742This RCE vulnerability exploits MSHTML, a component used by the Internet Explorer engine to read and display content from websites.The bug could allow an attacker to execute code on a target system if a user views specially crafted web content. The Zero Day Initiative\u2018s (ZDI\u2019s) Dustin Childs noted in his Patch Tuesday analysis that since the vulnerability is in the Trident (MSHTML) engine itself, many different applications are affected, not just Internet Explorer. \u201cIt\u2019s not clear how widespread the active attacks are, but considering the vulnerability impacts all supported Windows versions, this should be at the top of your test and deploy list,\u201d he recommended.\n\nThe vulnerability doesn\u2019t require special privilege to exploit, though the attack complexity is high, if that\u2019s any consolation. An attacker would need to do some extra legwork to pull it off, noted Satnam Narang, staff research engineer at Tenable, in an email to Threatpost on Tuesday.\n\nImmersive Labs\u2019 Kevin Breen, director of cyber threat research, noted that visiting a website in a vulnerable browser is \u201ca simple way for attackers to deliver this exploit.\u201d He told Threatpost via email on Tuesday that since the library is used by other services and applications, \u201cemailing HTML files as part of a phishing campaign is also a viable method of delivery.\u201d Sophos decreed\u00a0this one to be the top concern of this month\u2019s crop, given that it\u2019s already being actively exploited by malicious actors. See Also: Jeff Moss, aka Dark Tangent, the person who founded DEF CON and Black Hat CVE-2021-31955, CVE-2021-31956: Used in PuzzleMaker Targeted MalwareCVE-2021-31955 is an information disclosure vulnerability in the Windows Kernel, while CVE-2021-31956 is an elevation of privilege vulnerability in Windows NTFS. The ZDI\u2019s Childs noted that CVE-2021-31956 was reported by the same researcher who found CVE-2021-31955, an information disclosure bug also listed as under active attack. They could be linked, he suggested: \u201cIt\u2019s possible these bugs were used in conjunction, as that is a common technique \u2013 use a memory leak to get the address needed to escalate privileges. These bugs are important on their own and could be even worse when combined. Definitely prioritize the testing and deployment of these patches.\u201d\n\nHe was spot-on. On Tuesday, Kaspersky announced that its researchers had discovered a highly targeted malware campaign launched in April against multiple companies, in which a previously unknown threat actor used a chain of Chrome and Windows zero-day exploits: Namely, these two.\n\nIn a press release, Kaspersky said that one of the exploits was used for RCE in the Google Chrome web browser, while the other was an elevation of privilege exploit fine-tuned to target \u201cthe latest and most prominent builds\u201d of Windows 10.\n\n\u201cRecent months have seen a wave of advanced threat activity exploiting zero-days in the wild,\u201d according to the release. \u201cIn mid-April, Kaspersky experts discovered yet a new series of highly targeted exploit attacks against multiple companies that allowed the attackers to stealthily compromise the targeted networks.\u201d\n\nKaspersky hasn\u2019t yet found a connection between these attacks and any known threat actors, so it\u2019s gone ahead and dubbed the actor PuzzleMaker. It said that all the attacks were conducted through Chrome and used an exploit that allowed for RCE. Kaspersky researchers weren\u2019t able to retrieve the code for the exploit, but the timeline and availability suggests the attackers were using the now-patched CVE-2021-21224\u00a0[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:13.807482Z"}, {"uuid": "fa17b9f8-863f-4c9f-a3d0-7d4e3da64478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "exploited", "source": "https://t.me/hacking_Attack/48245", "content": "Black Hat Ethical Hacking\nGoogle Chrome Bug Actively Exploited as Zero-Day\n\nGoogle Chrome Bug Actively Exploited as Zero-DayPost Views: 32 \nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Patreon.png \nReading Time: 2 Minutes\nGoogle issued an update for the bug, which is found in the open-source V8 JavaScript engine.\nGoogle has updated its Stable channel for the desktop version of Chrome, to address a zero-day security vulnerability that\u2019s being actively exploited in the wild.\n\nThe bug, tracked as CVE-2022-1096, is a type-confusion issue in the V8 JavaScript engine, which is an open-source engine used by Chrome and Chromium-based web browsers. Type confusion, as Microsoft has laid out in the past, occurs \u201cwhen a piece of code doesn\u2019t verify the type of object that is passed to it, and uses it blindly without type-checking, it leads to type confusion\u2026Also with type confusion, wrong function pointers or data are fed into the wrong piece of code. In some circumstances this can lead to code execution.\u201d\n\nGoogle didn\u2019t provide additional technical details, as is its wont, but did say that it was \u201caware that an exploit for CVE-2022-1096 exists in the wild.\u201d An anonymous researcher was credited with finding the issue, which is labeled \u201chigh-severity\u201d (no CVSS score was given).\n\nThe lack of any further information is a source of frustration to some.\n\n\u201cAs a defender, I really wish it was more clear what this security fix is,\u201d John Bambenek, principal threat hunter at Netenrich, said via email. \u201cI get permission-denied errors or \u2018need to authenticate,\u2019 so I can\u2019t make decisions or advise my clients. A little more transparency would be beneficial and appreciated.\u201d\nSee Also: Complete Offensive Security and Ethical Hacking Course\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Emergency Patch; Active ExploitThe internet giant has updated the Stable channel to 99.0.4844.84 for Chrome for Windows, Mac and Linux, according to the its security advisory. Microsoft, which offers the Chromium-based Edge browser, also issued its own advisory. It\u2019s unclear whether other offerings built in V8, such as the JavaScript runtime environment Node.js, are also affected.\n\nThe patch was issued on an emergency basis, likely due to the active exploit that\u2019s circulating, researchers noted.\n\n\u201cThe first thing which stood out to me about this update is that it only fixes a single issue,\u201d Casey Ellis, founder and CTO at Bugcrowd, noted by email. \u201cThis is pretty unusual for Google. They typically fix multiple issues in these types of releases, which suggests that they are quite concerned and very motivated to see fixes against CVE-2022-1096 applied across their user-base ASAP.\u201d\n\nHe also commented on the speed of the patch being rolled out.\n\n\u201cThe vulnerability was only reported on the 23rd of March, and while Google\u2019s Chrome team do tend to be fairly prompt in developing, testing and rolling patches, the idea of a patch for software deployed as widely deployed as Chrome in 48 hours is something is continue to be impressed by,\u201d he said. \u201cSpeculatively, I\u2019d suggest that the vulnerability has been discovered via detection of active exploitation in the wild, and the combination of impact and potentially the malicious actors currently using it contributed to the fast turnaround.\u201d\nSee Also: Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH V8 Engine in the CrosshairsThe V8 engine has been plagued with security bugs and targeted by cyberattackers many times in the last year:\n\nLast year delivered a total of these 16 Chrome zero days:\n\n* CVE-2021-21148\u00a0\u2013 Feb. 4, an unnamed type of bug in V8\n* CVE-2021-21224\u00a0\u2013 April 20, an issue with type confusion in V8 that could have allowed a remote attacker t[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T04:00:05.110615Z"}, {"uuid": "974f7f27-5dff-4f43-8b17-90f5ab3249f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "exploited", "source": "https://t.me/hacking_Attack/48245", "content": "Black Hat Ethical Hacking\nGoogle Chrome Bug Actively Exploited as Zero-Day\n\nGoogle Chrome Bug Actively Exploited as Zero-DayPost Views: 32 \nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Patreon.png \nReading Time: 2 Minutes\nGoogle issued an update for the bug, which is found in the open-source V8 JavaScript engine.\nGoogle has updated its Stable channel for the desktop version of Chrome, to address a zero-day security vulnerability that\u2019s being actively exploited in the wild.\n\nThe bug, tracked as CVE-2022-1096, is a type-confusion issue in the V8 JavaScript engine, which is an open-source engine used by Chrome and Chromium-based web browsers. Type confusion, as Microsoft has laid out in the past, occurs \u201cwhen a piece of code doesn\u2019t verify the type of object that is passed to it, and uses it blindly without type-checking, it leads to type confusion\u2026Also with type confusion, wrong function pointers or data are fed into the wrong piece of code. In some circumstances this can lead to code execution.\u201d\n\nGoogle didn\u2019t provide additional technical details, as is its wont, but did say that it was \u201caware that an exploit for CVE-2022-1096 exists in the wild.\u201d An anonymous researcher was credited with finding the issue, which is labeled \u201chigh-severity\u201d (no CVSS score was given).\n\nThe lack of any further information is a source of frustration to some.\n\n\u201cAs a defender, I really wish it was more clear what this security fix is,\u201d John Bambenek, principal threat hunter at Netenrich, said via email. \u201cI get permission-denied errors or \u2018need to authenticate,\u2019 so I can\u2019t make decisions or advise my clients. A little more transparency would be beneficial and appreciated.\u201d\nSee Also: Complete Offensive Security and Ethical Hacking Course\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Emergency Patch; Active ExploitThe internet giant has updated the Stable channel to 99.0.4844.84 for Chrome for Windows, Mac and Linux, according to the its security advisory. Microsoft, which offers the Chromium-based Edge browser, also issued its own advisory. It\u2019s unclear whether other offerings built in V8, such as the JavaScript runtime environment Node.js, are also affected.\n\nThe patch was issued on an emergency basis, likely due to the active exploit that\u2019s circulating, researchers noted.\n\n\u201cThe first thing which stood out to me about this update is that it only fixes a single issue,\u201d Casey Ellis, founder and CTO at Bugcrowd, noted by email. \u201cThis is pretty unusual for Google. They typically fix multiple issues in these types of releases, which suggests that they are quite concerned and very motivated to see fixes against CVE-2022-1096 applied across their user-base ASAP.\u201d\n\nHe also commented on the speed of the patch being rolled out.\n\n\u201cThe vulnerability was only reported on the 23rd of March, and while Google\u2019s Chrome team do tend to be fairly prompt in developing, testing and rolling patches, the idea of a patch for software deployed as widely deployed as Chrome in 48 hours is something is continue to be impressed by,\u201d he said. \u201cSpeculatively, I\u2019d suggest that the vulnerability has been discovered via detection of active exploitation in the wild, and the combination of impact and potentially the malicious actors currently using it contributed to the fast turnaround.\u201d\nSee Also: Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH V8 Engine in the CrosshairsThe V8 engine has been plagued with security bugs and targeted by cyberattackers many times in the last year:\n\nLast year delivered a total of these 16 Chrome zero days:\n\n* CVE-2021-21148\u00a0\u2013 Feb. 4, an unnamed type of bug in V8\n* CVE-2021-21224\u00a0\u2013 April 20, an issue with type confusion in V8 that could have allowed a remote attacker t[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:35.747983Z"}, {"uuid": "9db36e1c-28ef-4fe5-81b3-2eab8fc93ae8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "exploited", "source": "https://t.me/hacking_Attack/25743", "content": "Black Hat Ethical Hacking\nGoogle pushes emergency Chrome update to fix two zero-days\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Google pushes emergency Chrome update to fix two zero-daysPost Views: 73 \nReading Time: 1 Minute\nGoogle has released Chrome 94.0.4606.71 for Windows, Mac, and Linux, to fix two zero-day vulnerabilities that have been exploited by attackers.\n\u201cGoogle is aware the exploits for CVE-2021-37975 and CVE-2021-37976 exist in the wild,\u201d Google disclosed in the list of security fixes\u00a0fixed in today\u2019s Google Chrome release.\n\nGoogle has started rolling out Chrome 94.0.4606.71 to users worldwide\u00a0in the Stable Desktop channel and should be available to all users within the coming days.\n\nTo install the update immediately, Google Chrome users can go to Chrome menu > Help > About Google Chrome, and the browser will begin performing the update.\n\nIn our tests, the new version of the browser was installed immediately using the above steps.\nhttps://www.bleepstatic.com/images/news/web-browsers/chrome/chrome-94.jpg \nZero-day attacks\u2019 details not disclosedWhile this Chrome release includes fixes for four security vulnerabilities, the two zero-days are concerning as they are known to have been exploited in the wild.\n\nThe first zero-day, tracked as CVE-2021-37976, is described as an \u201cInformation leak in core\u201d and was assigned a Medium severity level. This vulnerability was discovered by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero, on September 21st, 2021.\n\nThe second zero-day, tracked as CVE-2021-37975, is a High severity user after free\u00a0bug in the Chrome V8 JavaScript engine. The researcher disclosed this vulnerability on September 24th and wished to remain anonymous.\n\nUse after free bugs are commonly used to perform remote code execution or escape the browser\u2019s security sandbox.\n\nAt this time, there are no other details regarding how these zero-day vulnerabilities were used in attacks but may be released in future reports by Google TAG or Project Zero.\n2 more in-the-wild 0days fixed by Chrome:\n* CVE-2021-37975 use-after-free in V8 by anonymous\n* CVE-2021-37976 info leak in core by @_clem1 #itw0days\n\nThe release cycle that Chrome is making happen in order to get these patches out is pretty impressivehttps://t.co/j1xPY4zjlP\n\n\u2014 Maddie Stone (@maddiestone) September 30, 2021\nSee Also: Hackers exploiting critical VMware vCenter CVE-2021-22005 bug Chrome users should perform a manual upgrade or restart their browser to install the latest version and prevent exploitation attempts. Thirteenth zero-day fixed this yearWith these two fixes, Google has patched 13\u00a0zero-day vulnerabilities in the Chrome web browser since the start of 2021.\n\nThe other Chrome zero-day bugs Google fixed this year are:\n\n* CVE-2021-21148\u00a0\u2013 February 4th, 2021\n* CVE-2021-21166\u00a0\u2013 March 2nd, 2021\n* CVE-2021-21193\u00a0\u2013 March 12th, 2021\n* CVE-2021-21220\u00a0\u2013 April 13th, 2021\n* CVE-2021-21224\u00a0\u2013 April 20th, 2021\n* CVE-2021-30551\u00a0\u2013 June 9th, 2021\n* CVE-2021-30554\u00a0\u2013 June 17th, 2021\n* CVE-2021-30563\u00a0\u2013 July 15th, 2021\n* CVE-2021-30632 and CVE-2021-30633\u00a0\u2013 September 13th\n* CVE-2021-37973\u00a0\u2013 September 24th, 2021\n\nAs Google is\u00a0rushing out Chrome updates to fix zero-days as they are reported, it is always critical to install new browser updates as soon as they become available.\nSee Also: Offensive Security Tool: Discover\n[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T12:00:04.330972Z"}, {"uuid": "15c35feb-0541-48ff-bae7-1ccdeb40e80d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "https://t.me/hacking_Attack/23972", "content": "ock, pointed out that Google has patched plenty of zero-days already this year \u2013 eight prior to the latest two, to be exact \u2013 and he said to expect more.\nSee Also: Offensive Security Tool: Jenkins Attack Framework 10th Zero-Day in 2021 for Google\u201cToday, Google released a patch for its tenth [and ninth] zero-day exploit of the year,\u201d Dunne said in an email to media. \u201cThis milestone highlights the emphasis that bad actors are putting on browser exploits, with Chrome becoming a clear favorite, allowing a streamlined way to gain access to millions of devices regardless of OS.\n\n\u201cWe expect to see continued zero-day exploits in the wild,\u201d he added.\n\nThe other zero days discovered so far in 2021 are as follows, many of them in the V8 engine:\n\n* CVE-2021-21148\u00a0\u2013 (February)\n* CVE-2021-21166\u00a0\u2013 (March)\n* CVE-2021-21193\u00a0\u2013 (March)\n* CVE-2021-21220\u00a0\u2013 (April)\n* CVE-2021-21224\u00a0\u2013 (April, later used in Windows attacks)\n* CVE-2021-30551\u00a0\u2013 (June)\n* CVE-2021-30554\u00a0\u2013 (June)\n* CVE-2021-30563\u00a0\u2013 (July)\n\n\u201cGoogle\u2019s commitment to patching these exploits quickly is commendable, as they operate Google Chrome as freeware and therefore are the sole entity who can provide these updates,\u201d Dunne wrote. \u201cGoogle is committed to providing Chrome as a free browser, as it is a critical entry point for other businesses such as Google Search and Google Workspace.\u201d\n\nThe news comes as Apple rushed a fix\u00a0for a zero-click zero-day exploit targeting iMessaging. It\u2019s allegedly been used to illegally spy on Bahraini activists with NSO Group\u2019s Pegasus spyware, according to researchers.\nMicrosoft is also expected to release its monthly Patch Tuesday set of updates today, so we\u2019ll see if there are yet more zero-day exploits to worry about.\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/banner-2021.3-release-90x90.jpg Kali Linux 2021.3 released: Kali NetHunter on a smartwatch, wider OpenSSL compatibility, new tools1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/microsoft-exploit-90x90.jpg Microsoft Patches Actively Exploited Windows Zero-Day Bug2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Apple-marketing-communications-mix-90x90.jpg Apple Issues Emergency Fix for NSO Zero-Click Zero Day3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/zeroday-90x90.png Windows MSHTML zero-day exploits shared on hacking forums4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/microsoft-zero-day-vulnerabilities-800x358-1-90x90.png Windows MSHTML zero-day defenses bypassed as new info emerges7 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Malware-90x90.jpg Microsoft shares temp fix for ongoing Office 365 zero-day attacks1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Jenkins-90x90.jpg Jenkins project\u2019s Confluence server hacked to mine Monero1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/unnamed-e1630998483665-90x90.jpg Critical Auth Bypass Bug Affect NETGEAR Smart Switches1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/loyalty-card-90x90.jpg Brute-Force Attacks Target Inboxes for Gift Card Data2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Braktooth-New-Bluetooth-gaps-threaten-countless-devices-1024x576-1-90x90.jpg Bluetooth Bugs Open Billions of Devices to DoS, Code Execution2 weeks ago\nThe post Pair of Google Chrome Zero-Day Bugs Actively Exploited first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-07T15:00:05.995142Z"}, {"uuid": "a392643a-a5ff-444e-830e-5b7ac25f459e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "exploited", "source": "https://t.me/hacking_Attack/18949", "content": "Black Hat Ethical Hacking\nBugs in Chrome\u2019s JavaScript engine can lead to powerful exploits. This project aims to stop them\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Bugs in Chrome\u2019s JavaScript engine can lead to powerful exploits. This project aims to stop themPost Views: 45 \nReading Time: 1 Minute\nA new project hopes to beef up the security of V8, a part of the Chrome browser that most users aren\u2019t aware of but that hackers increasingly see as a juicy target.\nJavaScript makes the web go around and Google has had to patch multiple\u00a0zero-day or previously unknown flaws\u00a0in Chrome\u2019s V8 JavaScript engine this year. In April, Google admitted a high severity bug in V8 tracked as CVE-2021-21224\u00a0was being exploited in the wild. \n\nChrome has over two billion users, so when zero-day exploits strike Chrome, it\u2019s a big deal. V8, an open source Google project, is a powerful JavaScript engine for Chrome that\u2019s helped advance the web and web applications. V8 also powers the server-side runtime Node.js. \n\nNow Samuel Gro\u00df, a member of the Google Project Zero security researchers team, has detailed a V8 sandbox proposal\u00a0to help protect its memory from nastier bugs in the engine using virtual machine and sandboxing technologies. \n\n\u201cV8 bugs typically allow for the construction of unusually powerful exploits. Furthermore, these bugs are unlikely to be mitigated by memory safe languages or upcoming hardware-assisted security features such as MTE or CFI,\u201d explains Gro\u00df, referring to security technologies like Microsoft\u2019s Control-flow integrity (CFI) and Intel\u2019s control-flow enforcement technologies (CET). \n\n\u201d As a result, V8 is especially attractive for real-world attackers.\u201d\nSee Also: Hackers used never-before-seen wiper in recent attack on Iranian train system Gro\u00df\u2019s comments suggest that even adopting a memory-safe language like Rust\u00a0\u2014 which Google has adopted for new Android code\u00a0\u2014 wouldn\u2019t immediately solve the security problems faced by V8, which is written in C++. \nHe also outlines the broad design objectives but, signaling the size of the project, stresses that this sandbox project is in its infancy\u00a0and that there are some big hurdles to overcome. But V8 is a Google-led open source project and given that V8 has been the source of security vulnerabilities in Chrome, there is a chance that member of GPZ\u2019s proposal could make it across the line.\n\nThe issues affect how browser software interacts with hardware beyond the operating system and aims to prevent future flaws in V8 from corrupting a computer\u2019s memory outside of the V8 heap. This would allow an attacker to execute malicious code. \nSee Also: Offensive Security Tool: Ruler One consideration for the additional security protections for V8 is the impact on hardware performance. Gro\u00df estimates his proposal would cause an overhead of about \u201c1% overall on real-world workloads\u201d. \n\nGro\u00df explains the problem with V8 that stems from JIT compilers that can be used trick a machine into emitting machine code that corrupts memory at runtime. \n\n\u201cMany V8 vulnerabilities exploited by real-world attackers are effectively 2nd order vulnerabilities: the root-cause is often a logic issue in one of the JIT compilers, which can then be exploited to generate vulnerable machine code (e.g. code that is missing a runtime safety check). The generated code can then in turn be exploited to cause memory corruption at runtime.\u201d See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 Hacker He also highlights the shortcomings of the latest security technologies, including hardware-based mitigations, that will make [...]", "creation_timestamp": "2026-09-07T21:00:05.501866Z"}, {"uuid": "5a25484c-dae6-4605-aad0-a3ae1fd9cb0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "exploited", "source": "https://t.me/hacking_Attack/18949", "content": "Black Hat Ethical Hacking\nBugs in Chrome\u2019s JavaScript engine can lead to powerful exploits. This project aims to stop them\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Bugs in Chrome\u2019s JavaScript engine can lead to powerful exploits. This project aims to stop themPost Views: 45 \nReading Time: 1 Minute\nA new project hopes to beef up the security of V8, a part of the Chrome browser that most users aren\u2019t aware of but that hackers increasingly see as a juicy target.\nJavaScript makes the web go around and Google has had to patch multiple\u00a0zero-day or previously unknown flaws\u00a0in Chrome\u2019s V8 JavaScript engine this year. In April, Google admitted a high severity bug in V8 tracked as CVE-2021-21224\u00a0was being exploited in the wild. \n\nChrome has over two billion users, so when zero-day exploits strike Chrome, it\u2019s a big deal. V8, an open source Google project, is a powerful JavaScript engine for Chrome that\u2019s helped advance the web and web applications. V8 also powers the server-side runtime Node.js. \n\nNow Samuel Gro\u00df, a member of the Google Project Zero security researchers team, has detailed a V8 sandbox proposal\u00a0to help protect its memory from nastier bugs in the engine using virtual machine and sandboxing technologies. \n\n\u201cV8 bugs typically allow for the construction of unusually powerful exploits. Furthermore, these bugs are unlikely to be mitigated by memory safe languages or upcoming hardware-assisted security features such as MTE or CFI,\u201d explains Gro\u00df, referring to security technologies like Microsoft\u2019s Control-flow integrity (CFI) and Intel\u2019s control-flow enforcement technologies (CET). \n\n\u201d As a result, V8 is especially attractive for real-world attackers.\u201d\nSee Also: Hackers used never-before-seen wiper in recent attack on Iranian train system Gro\u00df\u2019s comments suggest that even adopting a memory-safe language like Rust\u00a0\u2014 which Google has adopted for new Android code\u00a0\u2014 wouldn\u2019t immediately solve the security problems faced by V8, which is written in C++. \nHe also outlines the broad design objectives but, signaling the size of the project, stresses that this sandbox project is in its infancy\u00a0and that there are some big hurdles to overcome. But V8 is a Google-led open source project and given that V8 has been the source of security vulnerabilities in Chrome, there is a chance that member of GPZ\u2019s proposal could make it across the line.\n\nThe issues affect how browser software interacts with hardware beyond the operating system and aims to prevent future flaws in V8 from corrupting a computer\u2019s memory outside of the V8 heap. This would allow an attacker to execute malicious code. \nSee Also: Offensive Security Tool: Ruler One consideration for the additional security protections for V8 is the impact on hardware performance. Gro\u00df estimates his proposal would cause an overhead of about \u201c1% overall on real-world workloads\u201d. \n\nGro\u00df explains the problem with V8 that stems from JIT compilers that can be used trick a machine into emitting machine code that corrupts memory at runtime. \n\n\u201cMany V8 vulnerabilities exploited by real-world attackers are effectively 2nd order vulnerabilities: the root-cause is often a logic issue in one of the JIT compilers, which can then be exploited to generate vulnerable machine code (e.g. code that is missing a runtime safety check). The generated code can then in turn be exploited to cause memory corruption at runtime.\u201d See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 Hacker He also highlights the shortcomings of the latest security technologies, including hardware-based mitigations, that will make [...]", "creation_timestamp": "2026-09-08T00:00:24.092502Z"}, {"uuid": "28d0b494-2f4e-487c-bb1a-1ea139dad881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "seen", "source": "https://t.me/hacking_Attack/23972", "content": "ock, pointed out that Google has patched plenty of zero-days already this year \u2013 eight prior to the latest two, to be exact \u2013 and he said to expect more.\nSee Also: Offensive Security Tool: Jenkins Attack Framework 10th Zero-Day in 2021 for Google\u201cToday, Google released a patch for its tenth [and ninth] zero-day exploit of the year,\u201d Dunne said in an email to media. \u201cThis milestone highlights the emphasis that bad actors are putting on browser exploits, with Chrome becoming a clear favorite, allowing a streamlined way to gain access to millions of devices regardless of OS.\n\n\u201cWe expect to see continued zero-day exploits in the wild,\u201d he added.\n\nThe other zero days discovered so far in 2021 are as follows, many of them in the V8 engine:\n\n* CVE-2021-21148\u00a0\u2013 (February)\n* CVE-2021-21166\u00a0\u2013 (March)\n* CVE-2021-21193\u00a0\u2013 (March)\n* CVE-2021-21220\u00a0\u2013 (April)\n* CVE-2021-21224\u00a0\u2013 (April, later used in Windows attacks)\n* CVE-2021-30551\u00a0\u2013 (June)\n* CVE-2021-30554\u00a0\u2013 (June)\n* CVE-2021-30563\u00a0\u2013 (July)\n\n\u201cGoogle\u2019s commitment to patching these exploits quickly is commendable, as they operate Google Chrome as freeware and therefore are the sole entity who can provide these updates,\u201d Dunne wrote. \u201cGoogle is committed to providing Chrome as a free browser, as it is a critical entry point for other businesses such as Google Search and Google Workspace.\u201d\n\nThe news comes as Apple rushed a fix\u00a0for a zero-click zero-day exploit targeting iMessaging. It\u2019s allegedly been used to illegally spy on Bahraini activists with NSO Group\u2019s Pegasus spyware, according to researchers.\nMicrosoft is also expected to release its monthly Patch Tuesday set of updates today, so we\u2019ll see if there are yet more zero-day exploits to worry about.\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/banner-2021.3-release-90x90.jpg Kali Linux 2021.3 released: Kali NetHunter on a smartwatch, wider OpenSSL compatibility, new tools1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/microsoft-exploit-90x90.jpg Microsoft Patches Actively Exploited Windows Zero-Day Bug2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Apple-marketing-communications-mix-90x90.jpg Apple Issues Emergency Fix for NSO Zero-Click Zero Day3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/zeroday-90x90.png Windows MSHTML zero-day exploits shared on hacking forums4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/microsoft-zero-day-vulnerabilities-800x358-1-90x90.png Windows MSHTML zero-day defenses bypassed as new info emerges7 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Malware-90x90.jpg Microsoft shares temp fix for ongoing Office 365 zero-day attacks1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Jenkins-90x90.jpg Jenkins project\u2019s Confluence server hacked to mine Monero1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/unnamed-e1630998483665-90x90.jpg Critical Auth Bypass Bug Affect NETGEAR Smart Switches1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/loyalty-card-90x90.jpg Brute-Force Attacks Target Inboxes for Gift Card Data2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Braktooth-New-Bluetooth-gaps-threaten-countless-devices-1024x576-1-90x90.jpg Bluetooth Bugs Open Billions of Devices to DoS, Code Execution2 weeks ago\nThe post Pair of Google Chrome Zero-Day Bugs Actively Exploited first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-08T00:00:41.492939Z"}, {"uuid": "5565e072-8d2d-4e08-9d5b-cf294d79f33e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "exploited", "source": "https://t.me/hacking_Attack/25743", "content": "Black Hat Ethical Hacking\nGoogle pushes emergency Chrome update to fix two zero-days\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Google pushes emergency Chrome update to fix two zero-daysPost Views: 73 \nReading Time: 1 Minute\nGoogle has released Chrome 94.0.4606.71 for Windows, Mac, and Linux, to fix two zero-day vulnerabilities that have been exploited by attackers.\n\u201cGoogle is aware the exploits for CVE-2021-37975 and CVE-2021-37976 exist in the wild,\u201d Google disclosed in the list of security fixes\u00a0fixed in today\u2019s Google Chrome release.\n\nGoogle has started rolling out Chrome 94.0.4606.71 to users worldwide\u00a0in the Stable Desktop channel and should be available to all users within the coming days.\n\nTo install the update immediately, Google Chrome users can go to Chrome menu > Help > About Google Chrome, and the browser will begin performing the update.\n\nIn our tests, the new version of the browser was installed immediately using the above steps.\nhttps://www.bleepstatic.com/images/news/web-browsers/chrome/chrome-94.jpg \nZero-day attacks\u2019 details not disclosedWhile this Chrome release includes fixes for four security vulnerabilities, the two zero-days are concerning as they are known to have been exploited in the wild.\n\nThe first zero-day, tracked as CVE-2021-37976, is described as an \u201cInformation leak in core\u201d and was assigned a Medium severity level. This vulnerability was discovered by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero, on September 21st, 2021.\n\nThe second zero-day, tracked as CVE-2021-37975, is a High severity user after free\u00a0bug in the Chrome V8 JavaScript engine. The researcher disclosed this vulnerability on September 24th and wished to remain anonymous.\n\nUse after free bugs are commonly used to perform remote code execution or escape the browser\u2019s security sandbox.\n\nAt this time, there are no other details regarding how these zero-day vulnerabilities were used in attacks but may be released in future reports by Google TAG or Project Zero.\n2 more in-the-wild 0days fixed by Chrome:\n* CVE-2021-37975 use-after-free in V8 by anonymous\n* CVE-2021-37976 info leak in core by @_clem1 #itw0days\n\nThe release cycle that Chrome is making happen in order to get these patches out is pretty impressivehttps://t.co/j1xPY4zjlP\n\n\u2014 Maddie Stone (@maddiestone) September 30, 2021\nSee Also: Hackers exploiting critical VMware vCenter CVE-2021-22005 bug Chrome users should perform a manual upgrade or restart their browser to install the latest version and prevent exploitation attempts. Thirteenth zero-day fixed this yearWith these two fixes, Google has patched 13\u00a0zero-day vulnerabilities in the Chrome web browser since the start of 2021.\n\nThe other Chrome zero-day bugs Google fixed this year are:\n\n* CVE-2021-21148\u00a0\u2013 February 4th, 2021\n* CVE-2021-21166\u00a0\u2013 March 2nd, 2021\n* CVE-2021-21193\u00a0\u2013 March 12th, 2021\n* CVE-2021-21220\u00a0\u2013 April 13th, 2021\n* CVE-2021-21224\u00a0\u2013 April 20th, 2021\n* CVE-2021-30551\u00a0\u2013 June 9th, 2021\n* CVE-2021-30554\u00a0\u2013 June 17th, 2021\n* CVE-2021-30563\u00a0\u2013 July 15th, 2021\n* CVE-2021-30632 and CVE-2021-30633\u00a0\u2013 September 13th\n* CVE-2021-37973\u00a0\u2013 September 24th, 2021\n\nAs Google is\u00a0rushing out Chrome updates to fix zero-days as they are reported, it is always critical to install new browser updates as soon as they become available.\nSee Also: Offensive Security Tool: Discover\n[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:46.865675Z"}, {"uuid": "06d9fd5e-af33-4aed-821a-b1e1ecbc17da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "exploited", "source": "https://t.me/hacking_Attack/12055", "content": "nt. CVSS 8.4\n* CVE-2021-33742\u00a0\u2013 Windows MSHTML Platform Remote Code Execution Vulnerability. Rating: Critical. CVSS 7.5\n* CVE-2021-31199\u00a0\u2013 Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability. Rating: Important. CVSS 5.2\n* CVE-2021-31201\u00a0\u2013 Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability. Rating: Important. CVSS 5.2 CVE-2021-33742This RCE vulnerability exploits MSHTML, a component used by the Internet Explorer engine to read and display content from websites.The bug could allow an attacker to execute code on a target system if a user views specially crafted web content. The Zero Day Initiative\u2018s (ZDI\u2019s) Dustin Childs noted in his Patch Tuesday analysis that since the vulnerability is in the Trident (MSHTML) engine itself, many different applications are affected, not just Internet Explorer. \u201cIt\u2019s not clear how widespread the active attacks are, but considering the vulnerability impacts all supported Windows versions, this should be at the top of your test and deploy list,\u201d he recommended.\n\nThe vulnerability doesn\u2019t require special privilege to exploit, though the attack complexity is high, if that\u2019s any consolation. An attacker would need to do some extra legwork to pull it off, noted Satnam Narang, staff research engineer at Tenable, in an email to Threatpost on Tuesday.\n\nImmersive Labs\u2019 Kevin Breen, director of cyber threat research, noted that visiting a website in a vulnerable browser is \u201ca simple way for attackers to deliver this exploit.\u201d He told Threatpost via email on Tuesday that since the library is used by other services and applications, \u201cemailing HTML files as part of a phishing campaign is also a viable method of delivery.\u201d Sophos decreed\u00a0this one to be the top concern of this month\u2019s crop, given that it\u2019s already being actively exploited by malicious actors. See Also: Jeff Moss, aka Dark Tangent, the person who founded DEF CON and Black Hat CVE-2021-31955, CVE-2021-31956: Used in PuzzleMaker Targeted MalwareCVE-2021-31955 is an information disclosure vulnerability in the Windows Kernel, while CVE-2021-31956 is an elevation of privilege vulnerability in Windows NTFS. The ZDI\u2019s Childs noted that CVE-2021-31956 was reported by the same researcher who found CVE-2021-31955, an information disclosure bug also listed as under active attack. They could be linked, he suggested: \u201cIt\u2019s possible these bugs were used in conjunction, as that is a common technique \u2013 use a memory leak to get the address needed to escalate privileges. These bugs are important on their own and could be even worse when combined. Definitely prioritize the testing and deployment of these patches.\u201d\n\nHe was spot-on. On Tuesday, Kaspersky announced that its researchers had discovered a highly targeted malware campaign launched in April against multiple companies, in which a previously unknown threat actor used a chain of Chrome and Windows zero-day exploits: Namely, these two.\n\nIn a press release, Kaspersky said that one of the exploits was used for RCE in the Google Chrome web browser, while the other was an elevation of privilege exploit fine-tuned to target \u201cthe latest and most prominent builds\u201d of Windows 10.\n\n\u201cRecent months have seen a wave of advanced threat activity exploiting zero-days in the wild,\u201d according to the release. \u201cIn mid-April, Kaspersky experts discovered yet a new series of highly targeted exploit attacks against multiple companies that allowed the attackers to stealthily compromise the targeted networks.\u201d\n\nKaspersky hasn\u2019t yet found a connection between these attacks and any known threat actors, so it\u2019s gone ahead and dubbed the actor PuzzleMaker. It said that all the attacks were conducted through Chrome and used an exploit that allowed for RCE. Kaspersky researchers weren\u2019t able to retrieve the code for the exploit, but the timeline and availability suggests the attackers were using the now-patched CVE-2021-21224\u00a0[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T03:00:04.986195Z"}, {"uuid": "966473f8-19a0-4eae-8baf-744233484802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21224", "type": "exploited", "source": "https://t.me/hacking_Attack/12055", "content": "nt. CVSS 8.4\n* CVE-2021-33742\u00a0\u2013 Windows MSHTML Platform Remote Code Execution Vulnerability. Rating: Critical. CVSS 7.5\n* CVE-2021-31199\u00a0\u2013 Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability. Rating: Important. CVSS 5.2\n* CVE-2021-31201\u00a0\u2013 Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability. Rating: Important. CVSS 5.2 CVE-2021-33742This RCE vulnerability exploits MSHTML, a component used by the Internet Explorer engine to read and display content from websites.The bug could allow an attacker to execute code on a target system if a user views specially crafted web content. The Zero Day Initiative\u2018s (ZDI\u2019s) Dustin Childs noted in his Patch Tuesday analysis that since the vulnerability is in the Trident (MSHTML) engine itself, many different applications are affected, not just Internet Explorer. \u201cIt\u2019s not clear how widespread the active attacks are, but considering the vulnerability impacts all supported Windows versions, this should be at the top of your test and deploy list,\u201d he recommended.\n\nThe vulnerability doesn\u2019t require special privilege to exploit, though the attack complexity is high, if that\u2019s any consolation. An attacker would need to do some extra legwork to pull it off, noted Satnam Narang, staff research engineer at Tenable, in an email to Threatpost on Tuesday.\n\nImmersive Labs\u2019 Kevin Breen, director of cyber threat research, noted that visiting a website in a vulnerable browser is \u201ca simple way for attackers to deliver this exploit.\u201d He told Threatpost via email on Tuesday that since the library is used by other services and applications, \u201cemailing HTML files as part of a phishing campaign is also a viable method of delivery.\u201d Sophos decreed\u00a0this one to be the top concern of this month\u2019s crop, given that it\u2019s already being actively exploited by malicious actors. See Also: Jeff Moss, aka Dark Tangent, the person who founded DEF CON and Black Hat CVE-2021-31955, CVE-2021-31956: Used in PuzzleMaker Targeted MalwareCVE-2021-31955 is an information disclosure vulnerability in the Windows Kernel, while CVE-2021-31956 is an elevation of privilege vulnerability in Windows NTFS. The ZDI\u2019s Childs noted that CVE-2021-31956 was reported by the same researcher who found CVE-2021-31955, an information disclosure bug also listed as under active attack. They could be linked, he suggested: \u201cIt\u2019s possible these bugs were used in conjunction, as that is a common technique \u2013 use a memory leak to get the address needed to escalate privileges. These bugs are important on their own and could be even worse when combined. Definitely prioritize the testing and deployment of these patches.\u201d\n\nHe was spot-on. On Tuesday, Kaspersky announced that its researchers had discovered a highly targeted malware campaign launched in April against multiple companies, in which a previously unknown threat actor used a chain of Chrome and Windows zero-day exploits: Namely, these two.\n\nIn a press release, Kaspersky said that one of the exploits was used for RCE in the Google Chrome web browser, while the other was an elevation of privilege exploit fine-tuned to target \u201cthe latest and most prominent builds\u201d of Windows 10.\n\n\u201cRecent months have seen a wave of advanced threat activity exploiting zero-days in the wild,\u201d according to the release. \u201cIn mid-April, Kaspersky experts discovered yet a new series of highly targeted exploit attacks against multiple companies that allowed the attackers to stealthily compromise the targeted networks.\u201d\n\nKaspersky hasn\u2019t yet found a connection between these attacks and any known threat actors, so it\u2019s gone ahead and dubbed the actor PuzzleMaker. It said that all the attacks were conducted through Chrome and used an exploit that allowed for RCE. Kaspersky researchers weren\u2019t able to retrieve the code for the exploit, but the timeline and availability suggests the attackers were using the now-patched CVE-2021-21224\u00a0[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-09T00:00:45.037836Z"}]}