THE INTERNET IS THINKING
Earlier sources: Identity
This security thread follows identity through original research, public projects, and source reports. Read the evidence below to see which developments are represented in SYMTRI’s archive.
SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.
Open in the map ↗28 classified signals in the fourteen-day window. These counts include signals awaiting readable evidence.
Earlier sources
Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.
- CISA · Added to KEV · First archived
CVE-2024-5910: Palo Alto Networks Expedition Missing Authentication Vulnerability ↗
Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets, credentials, and other data. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-11-07 (not the first disclosure date). Action due date: 2024-11-28.
- CISA · Added to KEV · First archived
CVE-2024-8956: PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability ↗
PTZOptics PT30X-SDI/NDI cameras contain an insecure direct object reference (IDOR) vulnerability that allows a remote, attacker to bypass authentication for the /cgi-bin/param.cgi CGI script. If combined with CVE-2024-8957, this can lead to remote code execution as root. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-11-04 (not the first disclosure date). Action due date: 2024-11-25.
- CISA · Added to KEV · First archived
CVE-2024-47575: Fortinet FortiManager Missing Authentication Vulnerability ↗
Fortinet FortiManager contains a missing authentication vulnerability in the fgfmd daemon that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-10-23 (not the first disclosure date). Action due date: 2024-11-13.
- CISA · Added to KEV · First archived
CVE-2024-7593: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability ↗
Ivanti Virtual Traffic Manager contains an authentication bypass vulnerability that allows a remote, unauthenticated attacker to create a chosen administrator account. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-09-24 (not the first disclosure date). Action due date: 2024-10-15.
- CISA · Added to KEV · First archived
CVE-2024-27348: Apache HugeGraph-Server Improper Access Control Vulnerability ↗
Apache HugeGraph-Server contains an improper access control vulnerability that could allow a remote attacker to execute arbitrary code. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-09-18 (not the first disclosure date). Action due date: 2024-10-09.
- CISA · Added to KEV · First archived
CVE-2024-40766: SonicWall SonicOS Improper Access Control Vulnerability ↗
SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Known. Added to the KEV catalog: 2024-09-09 (not the first disclosure date). Action due date: 2024-09-30.
- CISA · Added to KEV · First archived
CVE-2024-38856: Apache OFBiz Incorrect Authorization Vulnerability ↗
Apache OFBiz contains an incorrect authorization vulnerability that could allow remote code execution via a Groovy payload in the context of the OFBiz user process by an unauthenticated attacker. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-08-27 (not the first disclosure date). Action due date: 2024-09-17.
- CISA · Added to KEV · First archived
CVE-2021-33045: Dahua IP Camera Authentication Bypass Vulnerability ↗
Dahua IP cameras and related products contain an authentication bypass vulnerability when the loopback device is specified by the client during authentication. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-08-21 (not the first disclosure date). Action due date: 2024-09-11.
- CISA · Added to KEV · First archived
CVE-2021-33044: Dahua IP Camera Authentication Bypass Vulnerability ↗
Dahua IP cameras and related products contain an authentication bypass vulnerability when the NetKeyboard type argument is specified by the client during authentication. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-08-21 (not the first disclosure date). Action due date: 2024-09-11.
- CISA · Added to KEV · First archived
CVE-2024-37085: VMware ESXi Authentication Bypass Vulnerability ↗
VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Known. Added to the KEV catalog: 2024-07-30 (not the first disclosure date). Action due date: 2024-08-20.
Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.
How to assess evidence about Identity
Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.
See the collection and counting methodology ↗ · Read the weekly synthesis ↗
Related threads
Explore related regions
These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.