THE INTERNET IS THINKING
Earlier sources: Security
Digital security protects systems, software, accounts, and information from misuse. Explore cybersecurity, vulnerabilities, threat intelligence, cryptography, privacy, and identity, with links to the underlying advisories and research.
SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.
Open in the map ↗724 classified signals in the fourteen-day window. Recent momentum: steady. These counts include signals awaiting readable evidence.
Earlier sources
Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.
- CISA · Added to KEV · First archived
CVE-2023-28206: Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability ↗
Apple iOS, iPadOS, and macOS IOSurfaceAccelerator contain an out-of-bounds write vulnerability that allows an app to execute code with kernel privileges. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-04-10 (not the first disclosure date). Action due date: 2023-05-01.
- CISA · Added to KEV · First archived
CVE-2023-28205: Apple Multiple Products WebKit Use-After-Free Vulnerability ↗
Apple iOS, iPadOS, macOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-04-10 (not the first disclosure date). Action due date: 2023-05-01.
- CISA · Added to KEV · First archived
CVE-2023-26083: Arm Mali GPU Kernel Driver Information Disclosure Vulnerability ↗
Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-04-07 (not the first disclosure date). Action due date: 2023-04-28.
- CISA · Added to KEV · First archived
CVE-2021-27878: Veritas Backup Exec Agent Command Execution Vulnerability ↗
Veritas Backup Exec (BE) Agent contains a command execution vulnerability that could allow an attacker to use a data management protocol command to execute a command on the BE Agent machine. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2023-04-07 (not the first disclosure date). Action due date: 2023-04-28.
- CISA · Added to KEV · First archived
CVE-2021-27877: Veritas Backup Exec Agent Improper Authentication Vulnerability ↗
Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE Agent via SHA authentication scheme. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2023-04-07 (not the first disclosure date). Action due date: 2023-04-28.
- CISA · Added to KEV · First archived
CVE-2021-27876: Veritas Backup Exec Agent File Access Vulnerability ↗
Veritas Backup Exec (BE) Agent contains a file access vulnerability that could allow an attacker to specially craft input parameters on a data management protocol command to access files on the BE Agent machine. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2023-04-07 (not the first disclosure date). Action due date: 2023-04-28.
- CISA · Added to KEV · First archived
CVE-2019-1388: Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability ↗
Microsoft Windows Certificate Dialog contains a privilege escalation vulnerability, allowing attackers to run processes in an elevated context. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2023-04-07 (not the first disclosure date). Action due date: 2023-04-28.
- CISA · Added to KEV · First archived
CVE-2022-27926: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability ↗
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability by allowing an endpoint URL to accept parameters without sanitizing. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-04-03 (not the first disclosure date). Action due date: 2023-04-24.
- CISA · Added to KEV · First archived
CVE-2023-0266: Linux Kernel Use-After-Free Vulnerability ↗
Linux kernel contains a use-after-free vulnerability that allows for privilege escalation to gain ring0 access from the system user. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-03-30 (not the first disclosure date). Action due date: 2023-04-20.
- CISA · Added to KEV · First archived
CVE-2022-42948: Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability ↗
Fortra Cobalt Strike User Interface contains an unspecified vulnerability rooted in Java Swing that may allow remote code execution. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-03-30 (not the first disclosure date). Action due date: 2023-04-20.
Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.
How to assess evidence about Security
Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.
See the collection and counting methodology ↗ · Read the weekly synthesis ↗
Follow a thread
Explore related regions
These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.