Tag: 2026-01-21

5 Attack Reports | 126 Vulnerabilities

Attack reports

PurpleBravo’s Targeting of the IT Software Supply Chain

PurpleBravo, a North Korean state-sponsored threat group, targets software developers through fake recruitment efforts, particularly in cryptocurrency and software development sectors. Their toolkit includes BeaverTail, PyLangGhost, and GolangGhost, designed for stealing browser credentials and cry…
social engineering
north korea
cryptocurrency
github
beavertail
remote access trojan
invisibleferret
software supply chain
astrill vpn
golangghost
pylangghost
2026-01-21
browser credential theft
it services
Published: January 21, 2026
Downloadable IOCs: 187

Inside MacSync's Script-Driven Stealer and Hardware Wallet App Trojanization

MacSync is a sophisticated macOS infostealer that targets cryptocurrency users. It is delivered through a phishing lure disguised as a cloud storage installer, tricking users into executing a malicious Terminal command. The malware employs a multi-stage infection process, using a script-based appro…
phishing
infostealer
cryptocurrency
macos
electron
2026-01-21
hardware wallet
macsync
trojanization
Published: January 21, 2026
Downloadable IOCs: 6

Threat Actors Expand Abuse of Microsoft Visual Studio Code

North Korean threat actors have evolved their techniques in the Contagious Interview campaign, now abusing Microsoft Visual Studio Code task configuration files. The infection chain begins when a victim opens a malicious Git repository, often disguised as part of a recruitment process. If trust is …
backdoor
macos
javascript
node.js
c2
github
contagious interview
visual studio code
2026-01-21
gitlab
Published: January 21, 2026
Downloadable IOCs: 8

EtherRAT Targeting Windows Disguised as a Game Mod Installer

A Windows variant of EtherRAT, a JavaScript-based malware, has been discovered disguised as game mod installers. The malware uses MSI files to create and execute obfuscated scripts that decrypt and run the main payload. EtherRAT retrieves its Command and Control (C2) server addresses dynamically th…
obfuscation
windows
persistence
c2 communication
msi
ethereum
smart contract
123 stealer
CVE-2025-55182
etherrat
2026-01-21
game mod
tsundere botnet
Published: January 21, 2026
Downloadable IOCs: 12

Detailed Analysis of LockBit 5.0

LockBit, originating as ABCD ransomware in 2019, has evolved to version 5.0 in September 2025. After a period of inactivity, it resumed operations in December 2025 with a reduced affiliate sign-up fee. LockBit 5.0, nicknamed ChoungDong, consists of a Loader and Ransomware component. The Loader decr…
ransomware
lockbit
encryption
conti
double-extortion
evasion-techniques
2026-01-21
abcd ransomware
affiliate-program
choungdong
cyber-attack
lockbit green
Published: January 21, 2026
Downloadable IOCs: 3
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-15521

9.8
    Wordpress
  • Academy Lms
Published: January 21, 2026

CVE-2026-24061

9.8
    Gnu
  • Inetutils
Published: January 21, 2026

CVE-2025-69762

9.8
    Tenda
  • Ax3
Published: January 21, 2026

CVE-2025-69763

9.8
    Tenda
  • Tenda Ax3
Published: January 21, 2026

CVE-2025-69766

9.8
    Tenda
  • Ax3
Published: January 21, 2026

CVE-2026-23524

9.8
    Laravel
  • Reverb
    Redis
Published: January 21, 2026

CVE-2026-22792

9.6
    5ire
  • 5ire
Published: January 21, 2026

CVE-2026-22793

9.6
    5ire
  • 5ire
  • Echarts Markdown Plugin
Published: January 21, 2026

CVE-2021-47748

9.3
    Hasura
  • Graphql
Published: January 21, 2026

CVE-2021-47851

9.3
    Mini Mouse
  • Mini Mouse
Published: January 21, 2026

CVE-2026-22822

9.3
    External-Secrets
  • External-Secrets
Published: January 21, 2026

CVE-2026-23518

9.3
    Fleet
  • Fleet
Published: January 21, 2026

CVE-2021-47846

8.8
    *
  • Digital Crime Report Management System
Published: January 21, 2026

CVE-2021-47848

8.8
    Blitar Tourism
  • Blitar Tourism
Published: January 21, 2026

CVE-2026-22807

8.8
    Vllm
  • Vllm
Published: January 21, 2026

CVE-2021-47802

8.7
    Tenda
  • D151
  • D301
Published: January 21, 2026

CVE-2021-47849

8.7
    Mini Mouse
  • Mini Mouse
Published: January 21, 2026

CVE-2021-47850

8.7
    Mini Mouse
  • Mini Mouse
Published: January 21, 2026

CVE-2021-47854

8.7
    Dd-Wrt
  • Dd-Wrt
Published: January 21, 2026

CVE-2021-47865

8.7
    Proftpd
  • Proftpd
Published: January 21, 2026

CVE-2026-23754

8.7
    D-Link
  • D-View 8
Published: January 21, 2026

CVE-2021-47746

8.6
    Nodebb
  • Emoji
Published: January 21, 2026

CVE-2021-47770

8.6
    Openplc
  • Openplc
Published: January 21, 2026

CVE-2021-47778

8.6
    Getsimple
  • My Smtp Contact Plugin
Published: January 21, 2026

CVE-2021-47853

8.6
    Phppgadmin
  • Phppgadmin
Published: January 21, 2026

CVE-2021-47871

8.6
    Hestiacp
  • Hestia Control Panel
Published: January 21, 2026

CVE-2026-23516

8.6
    Cvat
  • Cvat
Published: January 21, 2026

CVE-2021-47852

8.5
    Rockstar Games
  • Rockstar Games Launcher
Published: January 21, 2026

CVE-2021-47859

8.5
    Actividentity
  • Actividentity
Published: January 21, 2026

CVE-2021-47860

8.5
    Getsimple
  • Getsimple Cms
  • Custom Js
Published: January 21, 2026

CVE-2021-47861

8.5
    Event Log Explorer
  • Event Log Explorer
Published: January 21, 2026

CVE-2021-47862

8.5
    Hi-Rez Studios
  • Hipatchservice
Published: January 21, 2026

CVE-2021-47863

8.5
    Macpaw
  • Encrypto
Published: January 21, 2026

CVE-2021-47864

8.5
    Osas
  • Traverse Extension
  • Travelextensionhostsvc
Published: January 21, 2026

CVE-2021-47866

8.5
    Winpakpro
  • Win-Pack Pro
Published: January 21, 2026

CVE-2021-47867

8.5
    Winpak
  • Win-Pak
Published: January 21, 2026

CVE-2021-47868

8.5
    *
  • Win-Pack Pro
Published: January 21, 2026

CVE-2021-47869

8.5
    Brother
  • Bradmin Professional
Published: January 21, 2026

CVE-2021-47874

8.5
    Vfs For Git
  • Gvfs
Published: January 21, 2026

CVE-2021-47878

8.5
    Ebeam
  • Ebeam Education Suite
  • Ebeam Device Service
Published: January 21, 2026

CVE-2021-47879

8.5
    Luidia
  • Ebeam Stylus Driver
Published: January 21, 2026

CVE-2021-47880

8.5
    Realtek
  • Wifi Lan Utility
Published: January 21, 2026

CVE-2021-47882

8.5
    Freelan
  • Freelan
Published: January 21, 2026

CVE-2021-47883

8.5
    Sandboxie
  • Sandboxie Plus
Published: January 21, 2026

CVE-2021-47884

8.5
    Oki
  • Configuration Tool
  • Local Port Manager
Published: January 21, 2026

CVE-2021-47886

8.5
    Pingzapper
  • Pingzapper
Published: January 21, 2026

CVE-2021-47887

8.5
    Oki
  • Print Job Accounting
Published: January 21, 2026

CVE-2026-23499

8.5
    Saleor
  • Saleor
Published: January 21, 2026

CVE-2026-23526

8.5
    Cvat
  • Cvat
Published: January 21, 2026

CVE-2026-24016

8.4
    Fsas Technologies Inc
  • Serverview Agents
Published: January 21, 2026

CVE-2026-23755

8.4
    D-Link
  • D-View 8
Published: January 21, 2026

CVE-2025-68137

8.3
    Everest
  • Everest
Published: January 21, 2026

CVE-2026-22022

8.2
    Apache
  • Solr
Published: January 21, 2026

CVE-2026-20045

8.2
    Cisco
  • Unified Communications Manager
  • Unified Communications Manager Im And Presence Service
  • Unity Connection
Published: January 21, 2026

CVE-2025-69285

7.7
    *
  • Sqlbot
Published: January 21, 2026

CVE-2025-13878

7.5
    Isc
  • Bind
Published: January 21, 2026

CVE-2025-70645

7.5
    Tenda
  • Ax-1806
Published: January 21, 2026

CVE-2025-70650

7.5
    Tenda
  • Ax-1806
Published: January 21, 2026

CVE-2025-70651

7.5
    Tenda
  • Ax-1803
Published: January 21, 2026

CVE-2025-70644

7.5
    Tenda
  • Ax-1806
Published: January 21, 2026

CVE-2025-70646

7.5
    Tenda
  • Ax1803
Published: January 21, 2026

CVE-2025-70648

7.5
    Tenda
  • Ax1803
Published: January 21, 2026

CVE-2025-66959

7.5
    Ollama
  • Ollama
Published: January 21, 2026

CVE-2025-66960

7.5
    Ollama
  • Ollama
Published: January 21, 2026

CVE-2026-23737

7.5
    Seroval
  • Seroval
Published: January 21, 2026

CVE-2025-68133

7.4
    Everest
  • Everest
Published: January 21, 2026

CVE-2025-68134

7.4
    Everest
  • Everest
Published: January 21, 2026

CVE-2025-68136

7.4
    Everest
  • Everest
Published: January 21, 2026

CVE-2025-68141

7.4
    Everset
  • Everset
Published: January 21, 2026

CVE-2026-23960

7.3
    Argo
  • Workflows
Published: January 21, 2026

CVE-2026-23736

7.3
    Seroval
  • Seroval
Published: January 21, 2026

CVE-2026-0834

7.2
    Tp-Link
  • Archer C20
  • Archer Ax53
Published: January 21, 2026

CVE-2026-22849

7.2
    Saleor
  • Saleor
Published: January 21, 2026

CVE-2026-22444

7.1
    Apache
  • Solr
Published: January 21, 2026

CVE-2026-22598

7.1
    Manageiq
  • Manageiq
Published: January 21, 2026

CVE-2026-24046

7.1
    Backstage
  • Backend Defaults
  • Plugin Scaffolder Backend
  • Plugin Scaffolder Node
Published: January 21, 2026

CVE-2021-47872

7.0
    Seopanel
  • Seopanel
Published: January 21, 2026

CVE-2026-0663

6.9
    M-Files
  • M-Files Server
Published: January 21, 2026

CVE-2025-13465

6.9
    Lodash
  • Lodash
Published: January 21, 2026

CVE-2025-69209

6.9
    Arduino
  • Arduino Core Avr
  • Arduino Avr Boards
Published: January 21, 2026

CVE-2026-23986

6.9
    Copier
  • Copier
Published: January 21, 2026

CVE-2026-23968

6.8
    Copier
  • Copier
Published: January 21, 2026

CVE-2021-47876

6.7
    Geogebra
  • Geogebra Classic
Published: January 21, 2026

CVE-2021-47877

6.7
    Geogebra
  • Geogebra Graphing Calculator
Published: January 21, 2026

CVE-2025-14559

6.5
    Redhat
  • Keycloak
  • Keycloak-Services
Published: January 21, 2026

CVE-2025-68135

6.5
    Tbdcontroller
  • Service
Published: January 21, 2026

CVE-2025-12781

6.3
    Python
  • Base64
Published: January 21, 2026

CVE-2026-23517

6.3
    Fleet
  • Fleet
Published: January 21, 2026

CVE-2026-23630

6.3
    Docmost
  • Docmost
Published: January 21, 2026

CVE-2026-24047

6.3
    Backstage
  • Backstage
  • Backend-Plugin-Api
Published: January 21, 2026

CVE-2026-20092

6.0
    Cisco
  • Cisco Intersight Virtual Appliance
Published: January 21, 2026

CVE-2026-22808

5.5
    Fleetdm
  • Fleet
Published: January 21, 2026

CVE-2025-57681

5.4
    Jira
  • Worklogpro Timesheets
Published: January 21, 2026

CVE-2021-47870

5.4
    Getsimple
  • My Smtp Contact Plugin
Published: January 21, 2026

CVE-2026-1290

5.3
    Jamf
  • Jamf Pro
Published: January 21, 2026

CVE-2026-20080

5.3
    Cisco
  • Iec6400 Wireless Backhaul Edge Compute Software
Published: January 21, 2026

CVE-2026-21852

5.3
    Anthropic
  • Claude Code
Published: January 21, 2026

CVE-2026-23990

5.3
    Flux
  • Flux Operator
Published: January 21, 2026

CVE-2021-47830

5.1
    Get-Simple
  • My Smtp Contact Plugin
Published: January 21, 2026

CVE-2021-47855

5.1
    Openlitespeed
  • Openlitespeed
Published: January 21, 2026

CVE-2021-47857

5.1
    Moodle
  • Moodle
Published: January 21, 2026

CVE-2021-47858

5.1
    Genexis
  • Platinum-4410
Published: January 21, 2026

CVE-2021-47873

5.1
    Vestacp
  • Vestacp
Published: January 21, 2026

CVE-2026-20055

4.8
    Cisco
  • Packaged Contact Center Enterprise
  • Unified Contact Center Enterprise
Published: January 21, 2026

CVE-2026-20109

4.8
    Cisco
  • Packaged Contact Center Enterprise
  • Unified Contact Center Enterprise
Published: January 21, 2026

CVE-2021-47817

4.8
    Openemr
  • Openemr
Published: January 21, 2026

CVE-2025-68138

4.7
    Everest
  • Libocpp
Published: January 21, 2026

CVE-2021-47875

4.6
    Geogebra
  • Cas Calculator
Published: January 21, 2026

CVE-2025-68139

4.3
    *
  • Everest
Published: January 21, 2026

CVE-2025-68140

4.3
    Everest
  • Ev Charging Software Stack
Published: January 21, 2026

CVE-2026-23955

4.2
    Everest
  • Everest
Published: January 21, 2026

CVE-2026-0988

3.7
    Glib
  • *
Published: January 21, 2026

CVE-2026-23996

3.7
    Fastapi
  • Fastapi
Published: January 21, 2026

CVE-2026-24048

3.5
    Backstage
  • Backend Defaults
Published: January 21, 2026

CVE-2026-1035

3.1
    Redhat
  • Keycloak
Published: January 21, 2026

CVE-2025-14083

2.7
    Keycloak
  • Keycloak
Published: January 21, 2026

CVE-2025-68132

2.4
    Everest
  • Everest
Published: January 21, 2026

CVE-2026-24020

None
    Fortinet
  • Fortinet
Published: January 21, 2026

CVE-2026-24021

None
    Fortinet
  • Fortinet
Published: January 21, 2026

CVE-2026-24022

None
    Fortinet
  • Fortinet
Published: January 21, 2026

CVE-2026-24023

None
    Fortinet
  • *
Published: January 21, 2026

CVE-2026-24024

None
    Fortinet
  • Fortinet
Published: January 21, 2026

CVE-2026-24025

None
    Fortinet
  • Fortinet
Published: January 21, 2026

CVE-2026-24026

None
    Fortinet
  • Fortinet
Published: January 21, 2026

CVE-2026-22976

None
    Linux
  • Linux Kernel
Published: January 21, 2026

CVE-2026-22977

None
    Linux
  • Linux Kernel
Published: January 21, 2026
Click here to see more Vulnerabilities