THE INTERNET IS THINKING
Earlier sources: Security
Digital security protects systems, software, accounts, and information from misuse. Explore cybersecurity, vulnerabilities, threat intelligence, cryptography, privacy, and identity, with links to the underlying advisories and research.
SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.
Open in the map ↗763 classified signals in the fourteen-day window. Recent momentum: steady. These counts include signals awaiting readable evidence.
Earlier sources
Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.
- CISA · Added to KEV · First archived
CVE-2022-22947: VMware Spring Cloud Gateway Code Injection Vulnerability ↗
Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-05-16 (not the first disclosure date). Action due date: 2022-06-06.
- CISA · Added to KEV · First archived
CVE-2022-1388: F5 BIG-IP Missing Authentication Vulnerability ↗
F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deletion of files, or disabling services. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2022-05-10 (not the first disclosure date). Action due date: 2022-05-31.
- CISA · Added to KEV · First archived
CVE-2021-1789: Apple Multiple Products Type Confusion Vulnerability ↗
A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-05-04 (not the first disclosure date). Action due date: 2022-05-25.
- CISA · Added to KEV · First archived
CVE-2019-8506: Apple Multiple Products Type Confusion Vulnerability ↗
A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-05-04 (not the first disclosure date). Action due date: 2022-05-25.
- CISA · Added to KEV · First archived
CVE-2014-4113: Microsoft Win32k Privilege Escalation Vulnerability ↗
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-05-04 (not the first disclosure date). Action due date: 2022-05-25.
- CISA · Added to KEV · First archived
CVE-2014-0322: Microsoft Internet Explorer Use-After-Free Vulnerability ↗
Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute code. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-05-04 (not the first disclosure date). Action due date: 2022-05-25.
- CISA · Added to KEV · First archived
CVE-2014-0160: OpenSSL Information Disclosure Vulnerability ↗
The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-05-04 (not the first disclosure date). Action due date: 2022-05-25.
- CISA · Added to KEV · First archived
CVE-2022-29464: WSO2 Multiple Products Unrestrictive Upload of File Vulnerability ↗
Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2022-04-25 (not the first disclosure date). Action due date: 2022-05-16.
- CISA · Added to KEV · First archived
CVE-2022-26904: Microsoft Windows User Profile Service Privilege Escalation Vulnerability ↗
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-04-25 (not the first disclosure date). Action due date: 2022-05-16.
- CISA · Added to KEV · First archived
CVE-2022-21919: Microsoft Windows User Profile Service Privilege Escalation Vulnerability ↗
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-04-25 (not the first disclosure date). Action due date: 2022-05-16.
Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.
How to assess evidence about Security
Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.
See the collection and counting methodology ↗ · Read the weekly synthesis ↗
Follow a thread
Explore related regions
These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.