部门 Homeoffice

Timeframe: -28 days

Default Categories (32): Android App Software, Anti-Malware Software, Calendar Software, Digital Media Player, Document Processing Software, Document Reader Software, File Compression Software, File Transfer Software, Firewall Software, Game Console, Groupware Software, Hardware Driver Software, Image Processing Software, iOS App Software, Mail Client Software, Messaging Software, Multimedia Player Software, Network Attached Storage Software, Network Encryption Software, Office Suite Software, Operating System, Presentation Software, Printing Software, Remote Access Software, Router Operating System, Smartphone Operating System, Smartwatch Operating System, Spreadsheet Software, Tablet Operating System, Web Browser, Wireless LAN Software, Word Processing Software

时间轴

供应商

Linux	292
Microsoft	104
Google	46
Foxit	46
Apple	36

产品

Linux Kernel	292
Microsoft Windows	84
Foxit PDF Reader	46
Google Android	28
Mozilla Firefox	22

修正

Official Fix	608
Temporary Fix	0
Workaround	4
Unavailable	0
Not Defined	54

易受攻击性

High	6
Functional	2
Proof-of-Concept	6
Unproven	82
Not Defined	570

访问向量

Not Defined	0
Physical	12
Local	116
Adjacent	326
Network	212

身份验证

Not Defined	0
High	26
Low	436
None	204

用户交互

Not Defined	0
Required	152
None	514

C3BM Index

CVSSv3 Base

≤1	0
≤2	2
≤3	18
≤4	54
≤5	146
≤6	230
≤7	118
≤8	68
≤9	28
≤10	2

CVSSv3 Temp

≤1	0
≤2	2
≤3	18
≤4	58
≤5	144
≤6	314
≤7	86
≤8	30
≤9	12
≤10	2

VulDB

≤1	0
≤2	4
≤3	16
≤4	62
≤5	140
≤6	232
≤7	118
≤8	70
≤9	22
≤10	2

NVD

≤1	666
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	594
≤2	0
≤3	2
≤4	4
≤5	16
≤6	10
≤7	8
≤8	18
≤9	12
≤10	2

供应商

≤1	576
≤2	0
≤3	0
≤4	0
≤5	2
≤6	4
≤7	22
≤8	48
≤9	14
≤10	0

零日攻击

<1k	26
<2k	106
<5k	20
<10k	294
<25k	114
<50k	72
<100k	34
≥100k	0

本日攻击

<1k	194
<2k	196
<5k	116
<10k	88
<25k	72
<50k	0
<100k	0
≥100k	0

攻击市场容量

IOB - Indicator of Behavior (1000)

时间轴

语言

en	956
de	18
zh	12
fr	8
ar	2

国家/地区

us	264
de	68
cn	28
fr	20
ru	16

演员

Sandworm	2
Cobalt Strike	2
Moobot	1
Cuba Ransomware	1
Mirai	1

活动

利益

时间轴

类型

Operating System	102
Router Operating System	8
Web Browser	4
Firewall Software	4
Office Suite Software	2

供应商

Microsoft	98
Linux	8
TP-Link	6
Google	4
Not Defined	2

产品

Microsoft Windows	94
Linux Kernel	8
TP-Link AC1350	6
TP-Link N300	6
Microsoft Edge	2

漏洞

#	漏洞	Base	Temp	0day	今天	易	修正	CTI	CVE
1	Microsoft Windows SmartScreen Prompt 权限升级	8.8	8.2	$25k-$100k	$5k-$25k	Functional	Official Fix	1.22-	CVE-2024-29988
2	Microsoft Windows Distributed File System 竞争条件	7.2	6.3	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.93-	CVE-2024-29066
3	Microsoft Windows Secure Boot 竞争条件	7.1	6.2	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.82-	CVE-2024-29062
4	Microsoft Windows Hyper-V 拒绝服务	5.8	5.1	$5k-$25k	$0-$5k	Unproven	Official Fix	0.76-	CVE-2024-29064
5	Microsoft Windows Secure Boot 内存损坏	7.8	6.8	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.74-	CVE-2024-29061
6	Microsoft Windows Authentication 弱加密	4.3	3.8	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.72-	CVE-2024-29056
7	Microsoft Windows Storage 权限升级	7.8	6.8	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.55-	CVE-2024-29052
8	Microsoft Windows Cryptographic Services Local Privilege Escalation	8.1	7.0	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.59-	CVE-2024-29050
9	Microsoft Windows Proxy Driver 权限升级	6.7	5.8	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.57-	CVE-2024-26234
10	Microsoft Windows WDAC OLE DB Provider for SQL Server 内存损坏	8.8	7.7	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.52-	CVE-2024-26244
11	Microsoft Windows libarchive 内存损坏	8.3	7.3	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.55-	CVE-2024-26256
12	Microsoft Windows Secure Boot 内存损坏	8.0	7.0	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.42-	CVE-2024-28925
13	Microsoft Windows Secure Boot 内存损坏	6.4	5.6	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.40-	CVE-2024-28923
14	Microsoft Windows WDAC OLE DB Provider for SQL Server 内存损坏	8.8	7.7	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.67-	CVE-2024-26210
15	Microsoft Windows Remote Access Connection Manager 信息公开	5.5	4.8	$5k-$25k	$0-$5k	Unproven	Official Fix	0.41-	CVE-2024-28902
16	Microsoft Windows Routing/Remote Access Service 内存损坏	8.8	7.7	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.65-	CVE-2024-26205
17	Microsoft Windows Virtual Machine Bus 内存损坏	7.5	6.5	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.32-	CVE-2024-26254
18	Microsoft Windows Secure Boot 内存损坏	6.7	5.8	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.34-	CVE-2024-28924
19	Microsoft Windows Secure Boot 权限升级	4.2	3.7	$0-$5k	$0-$5k	Unproven	Official Fix	0.40-	CVE-2024-28922
20	Microsoft Windows rndismp6.sys 权限升级	6.8	5.9	$5k-$25k	$5k-$25k	Unproven	Official Fix	0.36-	CVE-2024-26253

IOC - Indicator of Compromise (15)

These indicators of compromise highlight associated network ranges which are known to be part of research and attack activities.

ID	IP range	参与者	类型	可信度
1	2.57.122.0/24	Mirai	predictive	高
2	39.109.86.0/24	Cobalt Strike	predictive	高
3	XX.XXX.XXX.X/XX	Xxxxxx Xxxxxx	predictive	高
4	XX.XXX.XXX.X/XX	Xxxxxxx Xxxxxxx	predictive	高
5	XX.X.XX.X/XX	Xxxxxxxxx	predictive	高
6	XX.XXX.XXX.X/XX	Xxxxxxx	predictive	高
7	XX.XX.XXX.X/XX	Xxxxxxxx	predictive	高
8	XX.XX.XXX.X/XX	Xxxxx	predictive	高
9	XXX.XXX.XX.X/XX	Xxxxxx	predictive	高
10	XXX.XXX.XXX.X/XX	Xxxxx	predictive	高
11	XXX.XXX.XXX.X/XX	Xxxxxxxx	predictive	高
12	XXX.XXX.XXX.X/XX	Xxxxxxxx	predictive	高
13	XXX.XX.XX.X/XX	Xxxxxxxx	predictive	高
14	XXX.XX.XX.X/XX	Xxxxx	predictive	高
15	XXX.XX.XXX.X/XX	Xxxxxx	predictive	高

TTP - Tactics, Techniques, Procedures (16)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	漏洞	访问向量	类型	可信度
1	T1006	CWE-22	Path Traversal	predictive	高
2	T1055	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	高
3	T1059.007	CWE-79, CWE-80	Cross Site Scripting	predictive	高
4	T1068	CWE-250, CWE-269, CWE-274, CWE-284	Execution with Unnecessary Privileges	predictive	高
5	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
6	TXXXX	CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	高
7	TXXXX	CWE-XX	Xxx Xxxxxxxxx	predictive	高
8	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	高
9	TXXXX	CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
10	TXXXX.XXX	CWE-XXX	Xxxxxxx Xxxxxxxxxx Xxx Xxxxxxxx Xxxxxxx Xx Xx-xxxx Xxxxxx Xxxxxxxx	predictive	高
11	TXXXX.XXX	CWE-XXX	Xxxxxxxxxxxx	predictive	高
12	TXXXX	CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	高
13	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
14	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
15	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	高
16	TXXXX	CWE-XXX	Xxxxxxxxxxx Xxxxxx	predictive	高

IOA - Indicator of Attack (81)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	分类	Indicator	类型	可信度
1	File	/cgi-bin/gui.cgi	predictive	高
2	File	/login	predictive	低
3	File	/setup.cgi	predictive	中
4	File	androidmanifest.xml	predictive	高
5	File	Ap4Atom.cpp	predictive	中
6	File	Ap4ByteStream.cpp	predictive	高
7	File	Ap4Dec3Atom.cpp	predictive	高
8	File	Ap4MdhdAtom.cpp	predictive	高
9	File	Ap4Sample.h	predictive	中
10	File	Ap4StsdAtom.cpp	predictive	高
11	File	Ap4Utils.cpp	predictive	中
12	File	arch/x86/kernel/fpu/core.c	predictive	高
13	File	xxxx_xxxxxx.x	predictive	高
14	File	xxxxx/xxx-xxxxxx.x	predictive	高
15	File	xxxxx/xxx-xx-xxx.x	predictive	高
16	File	xxx_xxx.xxxx	predictive	中
17	File	xxxxxxxxxxxxxx.xxx	predictive	高
18	File	xxxxxxxxx.xxx	predictive	高
19	File	xxxxxxx/xxxxx/xxxxxxx/xx_xxxxxxxxx.x	predictive	高
20	File	xxxx.x	predictive	低
21	File	xx/xxxxx/xxxx-xx.x	predictive	高
22	File	xx/xxxxx/xxxxxxxxxxx.x	predictive	高
23	File	xx/xxxxx/xxxx-xxx.x	predictive	高
24	File	xx/xxxx/xxxx.x	predictive	高
25	File	xx/xxxx/xxxxxxx_xxxxxx.x	predictive	高
26	File	xxxxx	predictive	低
27	File	xxxxx_xxxxxx	predictive	中
28	File	xxxxx.x	predictive	低
29	File	xxxxxx/xxx/xxxxxxx.x	predictive	高
30	File	xxxxxx/xxx/xxxxx.x	predictive	高
31	File	xxxxxx/xxx/xxxx.x:	predictive	高
32	File	xxx.x	predictive	低
33	File	xxxxxxxxx.xx	predictive	中
34	File	xxx.x	predictive	低
35	File	xx/xxxx_xxxxx.x	predictive	高
36	File	xx/xxxxxxxx.x	predictive	高
37	File	xxx/xxxx/xxx.x	predictive	高
38	File	xxx/xxxx/xxxxxx.x	predictive	高
39	File	xxx/xxx/xxx_xxxxxx.x	predictive	高
40	File	xxx/xxxx/xxxxx.x	predictive	高
41	File	xxx/xxxxxxxxx/xx_xxxxxxxxx_xxxxxx.x	predictive	高
42	File	xxx/xxxxxxxxxxx/xxxx.x	predictive	高
43	File	xxx/xxxxxx/xxxxxxxxxxxxx.x	predictive	高
44	File	xxxxx.x	predictive	低
45	File	xxxxx.x	predictive	低
46	File	xxxxxxxxx.xxx	predictive	高
47	File	xxxxx/xxx/xxxx/xxxxx-xxx-xxx.x	predictive	高
48	File	xxx.x	predictive	低
49	File	xxxxxxx/xx/xxxx/xxx/xxxxxx/xxxxxxxxx.xx	predictive	高
50	Library	xxxx/xxx/xxxxxxx/xxx/xxxx.x	predictive	高
51	Library	xxxx.xxx	predictive	中
52	Library	xxxxxxx/xxxxx/xxx.x	predictive	高
53	Library	xxxxxxx/xxxxx/xxxx.x	predictive	高
54	Library	xxxxxxx/xxx/xxxx_xxx.x	predictive	高
55	Library	xxx/xxx_xxxx.x	predictive	高
56	Library	xxx/xxxxxxxxxxxx.x	predictive	高
57	Library	xxx/xxxx_xxxxx.x	predictive	高
58	Library	xxx/xxxxxxxx.x	predictive	高
59	Library	xxx/xxx_xxxx.x	predictive	高
60	Library	xxx/xxx	predictive	低
61	Library	xxx/xxxxxxxx.x	predictive	高
62	Library	xxxxxxxx.xxx	predictive	中
63	Library	xxxx.x	predictive	低
64	Argument	xxxxxx	predictive	低
65	Argument	xxxx	predictive	低
66	Argument	xx-xxxxxx	predictive	中
67	Argument	xx_xxxx_xxx	predictive	中
68	Argument	xxxxxx_xxxx	predictive	中
69	Argument	xxxxx_xxx	predictive	中
70	Argument	xxxxxxx	predictive	低
71	Argument	xxxx_xxxx	predictive	中
72	Argument	xxx_xxxxxx	predictive	中
73	Argument	xxxxxx	predictive	低
74	Argument	xxx_xxxxxx	predictive	中
75	Argument	xx_xxxxx_xxxxxxx	predictive	高
76	Argument	xxxx_xxxxxx_xxxxx	predictive	高
77	Argument	xxxxxxx	predictive	低
78	Argument	xxxxxxxxxxx	predictive	中
79	Argument	xxxx_xxxxxxx_xxxx	predictive	高
80	Argument	xxxx	predictive	低
81	Argument	xxxx/xxxxxxxx	predictive	高

◂ 上一步一览下一步 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!