THE INTERNET IS THINKING
Earlier sources: Identity
This security thread follows identity through original research, public projects, and source reports. Read the evidence below to see which developments are represented in SYMTRI’s archive.
SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.
Open in the map ↗27 classified signals in the fourteen-day window. These counts include signals awaiting readable evidence.
Earlier sources
Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.
- CISA · Added to KEV · First archived
CVE-2022-24112: Apache APISIX Authentication Bypass Vulnerability ↗
Apache APISIX contains an authentication bypass vulnerability that allows for remote code execution. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-08-25 (not the first disclosure date). Action due date: 2022-09-15.
- CISA · Added to KEV · First archived
CVE-2021-39226: Grafana Authentication Bypass Vulnerability ↗
Grafana contains an authentication bypass vulnerability that allows authenticated and unauthenticated users to view and delete all snapshot data, potentially resulting in complete snapshot data loss. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-08-25 (not the first disclosure date). Action due date: 2022-09-15.
- CISA · Added to KEV · First archived
CVE-2022-37042: Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability ↗
Synacor Zimbra Collaboration Suite (ZCS) contains an authentication bypass vulnerability in MailboxImportServlet. This vulnerability was chained with CVE-2022-27925 which allows for unauthenticated remote code execution. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2022-08-11 (not the first disclosure date). Action due date: 2022-09-01.
- CISA · Added to KEV · First archived
CVE-2019-7192: QNAP Photo Station Improper Access Control Vulnerability ↗
QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized access to the system. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2022-06-08 (not the first disclosure date). Action due date: 2022-06-22.
- CISA · Added to KEV · First archived
CVE-2010-0738: Red Hat JBoss Authentication Bypass Vulnerability ↗
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2022-05-25 (not the first disclosure date). Action due date: 2022-06-15.
- CISA · Added to KEV · First archived
CVE-2022-1388: F5 BIG-IP Missing Authentication Vulnerability ↗
F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deletion of files, or disabling services. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2022-05-10 (not the first disclosure date). Action due date: 2022-05-31.
- CISA · Added to KEV · First archived
CVE-2022-1040: Sophos Firewall Authentication Bypass Vulnerability ↗
An authentication bypass vulnerability in User Portal and Webadmin of Sophos Firewall allows for remote code execution. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-31 (not the first disclosure date). Action due date: 2022-04-21.
- CISA · Added to KEV · First archived
CVE-2021-28799: QNAP NAS Improper Authorization Vulnerability ↗
QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2022-03-31 (not the first disclosure date). Action due date: 2022-04-21.
- CISA · Added to KEV · First archived
CVE-2021-21551: Dell dbutil Driver Insufficient Access Control Vulnerability ↗
Dell dbutil driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial-of-service (DoS), or information disclosure. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-31 (not the first disclosure date). Action due date: 2022-04-21.
- CISA · Added to KEV · First archived
CVE-2018-10561: Dasan GPON Routers Authentication Bypass Vulnerability ↗
Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10562, exploitation can allow an attacker to perform remote code execution. Required action: The impacted product is end-of-life and should be disconnected if still in use.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-31 (not the first disclosure date). Action due date: 2022-04-21.
Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.
How to assess evidence about Identity
Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.
See the collection and counting methodology ↗ · Read the weekly synthesis ↗
Related threads
Explore related regions
These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.