THE INTERNET IS THINKING
Earlier sources: Security
Digital security protects systems, software, accounts, and information from misuse. Explore cybersecurity, vulnerabilities, threat intelligence, cryptography, privacy, and identity, with links to the underlying advisories and research.
SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.
Open in the map ↗712 classified signals in the fourteen-day window. Recent momentum: steady. These counts include signals awaiting readable evidence.
Earlier sources
Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.
- CISA · Added to KEV · First archived
CVE-2021-44529: Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability ↗
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody). Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Known. Added to the KEV catalog: 2024-03-25 (not the first disclosure date). Action due date: 2024-04-15.
- CISA · Added to KEV · First archived
CVE-2019-7256: Nice Linear eMerge E3-Series OS Command Injection Vulnerability ↗
Nice Linear eMerge E3-Series contains an OS command injection vulnerability that allows an attacker to conduct remote code execution. Required action: Contact the vendor for guidance on remediating firmware, per their advisory.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-03-25 (not the first disclosure date). Action due date: 2024-04-15.
- CISA · Added to KEV · First archived
CVE-2024-27198: JetBrains TeamCity Authentication Bypass Vulnerability ↗
JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Known. Added to the KEV catalog: 2024-03-07 (not the first disclosure date). Action due date: 2024-03-28.
- CISA · Added to KEV · First archived
CVE-2024-23296: Apple Multiple Products Memory Corruption Vulnerability ↗
Apple iOS, iPadOS, macOS, tvOS, and watchOS RTKit contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-03-06 (not the first disclosure date). Action due date: 2024-03-27.
- CISA · Added to KEV · First archived
CVE-2024-23225: Apple Multiple Products Memory Corruption Vulnerability ↗
Apple iOS, iPadOS, macOS, tvOS, watchOS, and visionOS kernel contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-03-06 (not the first disclosure date). Action due date: 2024-03-27.
- CISA · Added to KEV · First archived
CVE-2023-21237: Android Pixel Information Disclosure Vulnerability ↗
Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide a foreground service notification. This could enable a local attacker to disclose sensitive information. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-03-05 (not the first disclosure date). Action due date: 2024-03-26.
- CISA · Added to KEV · First archived
CVE-2021-36380: Sunhillo SureLine OS Command Injection Vulnerablity ↗
Sunhillo SureLine contains an OS command injection vulnerability that allows an attacker to cause a denial-of-service or utilize the device for persistence on the network via shell metacharacters in ipAddr or dnsAddr in /cgi/networkDiag.cgi. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-03-05 (not the first disclosure date). Action due date: 2024-03-26.
- CISA · Added to KEV · First archived
CVE-2024-21338: Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability ↗
Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL (input and output control) dispatcher in appid.sys that allows a local attacker to achieve privilege escalation. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Known. Added to the KEV catalog: 2024-03-04 (not the first disclosure date). Action due date: 2024-03-25.
- CISA · Added to KEV · First archived
CVE-2023-29360: Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability ↗
Microsoft Streaming Service contains an untrusted pointer dereference vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-02-29 (not the first disclosure date). Action due date: 2024-03-21.
- CISA · Added to KEV · First archived
CVE-2024-1709: ConnectWise ScreenConnect Authentication Bypass Vulnerability ↗
ConnectWise ScreenConnect contains an authentication bypass vulnerability that allows an attacker with network access to the management interface to create a new, administrator-level account on affected devices. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Known. Added to the KEV catalog: 2024-02-22 (not the first disclosure date). Action due date: 2024-02-29.
Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.
How to assess evidence about Security
Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.
See the collection and counting methodology ↗ · Read the weekly synthesis ↗
Follow a thread
Explore related regions
These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.