THE INTERNET IS THINKING
Earlier sources: Identity
This security thread follows identity through original research, public projects, and source reports. Read the evidence below to see which developments are represented in SYMTRI’s archive.
SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.
Open in the map ↗27 classified signals in the fourteen-day window. These counts include signals awaiting readable evidence.
Earlier sources
Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.
- CISA · Added to KEV · First archived
CVE-2021-26085: Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability ↗
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2022-03-28 (not the first disclosure date). Action due date: 2022-04-18.
- CISA · Added to KEV · First archived
CVE-2022-26143: MiCollab, MiVoice Business Express Access Control Vulnerability ↗
A vulnerability has been identified in MiCollab and MiVoice Business Express that may allow a malicious actor to gain unauthorized access to sensitive information and services, cause performance degradations or a denial of service condition on the affected system. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-25 (not the first disclosure date). Action due date: 2022-04-15.
- CISA · Added to KEV · First archived
CVE-2021-22941: Citrix ShareFile Improper Access Control Vulnerability ↗
Improper Access Control in Citrix ShareFile storage zones controller may allow an unauthenticated attacker to remotely compromise the storage zones controller. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2022-03-25 (not the first disclosure date). Action due date: 2022-04-15.
- CISA · Added to KEV · First archived
CVE-2020-2506: QNAP Helpdesk Improper Access Control Vulnerability ↗
QNAP Helpdesk contains an improper access control vulnerability which could allow an attacker to gain privileges or to read sensitive information. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-25 (not the first disclosure date). Action due date: 2022-04-15.
- CISA · Added to KEV · First archived
CVE-2020-2021: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability ↗
Palo Alto Networks PAN-OS contains a vulnerability in SAML which allows an attacker to bypass authentication. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2022-03-25 (not the first disclosure date). Action due date: 2022-04-15.
- CISA · Added to KEV · First archived
CVE-2018-0147: Cisco Secure Access Control System Java Deserialization Vulnerability ↗
A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affected software. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-25 (not the first disclosure date). Action due date: 2022-04-15.
- CISA · Added to KEV · First archived
CVE-2013-0625: Adobe ColdFusion Authentication Bypass Vulnerability ↗
Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-07 (not the first disclosure date). Action due date: 2022-09-07.
- CISA · Added to KEV · First archived
CVE-2013-0632: Adobe ColdFusion Authentication Bypass Vulnerability ↗
An authentication bypass vulnerability exists in Adobe ColdFusion which could result in an unauthorized user gaining administrative access. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-03 (not the first disclosure date). Action due date: 2022-03-24.
- CISA · Added to KEV · First archived
CVE-2022-23134: Zabbix Frontend Improper Access Control Vulnerability ↗
Malicious actors can pass step checks and potentially change the configuration of Zabbix Frontend. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-02-22 (not the first disclosure date). Action due date: 2022-03-08.
- CISA · Added to KEV · First archived
CVE-2022-23131: Zabbix Frontend Authentication Bypass Vulnerability ↗
Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-02-22 (not the first disclosure date). Action due date: 2022-03-08.
Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.
How to assess evidence about Identity
Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.
See the collection and counting methodology ↗ · Read the weekly synthesis ↗
Related threads
Explore related regions
These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.