FactualRisk — 🌍 Géopolitique & Threat Actors

Pays attaquants

Threat Actors connus

Acteurs observés

CVEs attribués

🌍 Pays d'origine identifiés

🇷🇺 RU26 CVE(s)

🌐 ??19 CVE(s)

🇨🇳 CN19 CVE(s)

🇰🇵 KP9 CVE(s)

🇮🇷 IR4 CVE(s)

🕵️ Threat Actors (base + observés)

🇷🇺 APT29observé11 CVE(s)

🇷🇺 APT28observé9 CVE(s)

🇰🇵 Lazarusobservé9 CVE(s)

🇨🇳 Volt Typhoonobservé9 CVE(s)

🌐 Cl0pobservé7 CVE(s)

🇨🇳 APT41observé6 CVE(s)

🇷🇺 Sandwormobservé6 CVE(s)

🌐 RansomHubobservé5 CVE(s)

🇨🇳 Salt Typhoonobservé4 CVE(s)

🇮🇷 MuddyWaterobservé4 CVE(s)

🌐 Akiraobservé3 CVE(s)

🌐 LockBitobservé2 CVE(s)

🌐 BlackCatobservé2 CVE(s)

CVEs avec attribution géopolitique

CVE-2023-46604 P0

🕵️ RansomHub🌐 ??Score: 218

Apache ActiveMQ Deserialization of Untrusted Data Vulnerability

CVE-2022-40684 P0

🕵️ Volt Typhoon🇨🇳 CNScore: 218

Fortinet Multiple Products Authentication Bypass Vulnerability

CVE-2024-21887 P0

🕵️ Volt Typhoon🇨🇳 CNScore: 218

Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

CVE-2023-44487 P0

🕵️ Sandworm🇷🇺 RUScore: 218

HTTP/2 Rapid Reset Attack Vulnerability

CVE-2023-22518 P0

🕵️ LockBit🌐 ??Score: 218

Atlassian Confluence Data Center and Server Improper Authorization Vulnerability

CVE-2023-0669 P0

🕵️ Cl0p🌐 ??Score: 218

Fortra GoAnywhere MFT Remote Code Execution Vulnerability

CVE-2023-46805 P0

🕵️ Volt Typhoon🇨🇳 CNScore: 218

Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability

CVE-2023-29357 P0

🕵️ APT29🇷🇺 RUScore: 218

Microsoft SharePoint Server Privilege Escalation Vulnerability

CVE-2021-44228 P0

🕵️ Lazarus🇰🇵 KPScore: 218

Apache Log4j2 Remote Code Execution Vulnerability

CVE-2023-4966 P0

🕵️ Akira🌐 ??Score: 218

Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

CVE-2023-22515 P0

🕵️ RansomHub🌐 ??Score: 218

Atlassian Confluence Data Center and Server Broken Access Control Vulnerability

CVE-2024-1212 P0

🕵️ Sandworm🇷🇺 RUScore: 218

Progress Kemp LoadMaster OS Command Injection Vulnerability

CVE-2023-34362 P0

🕵️ Cl0p🌐 ??Score: 218

Progress MOVEit Transfer SQL Injection Vulnerability

CVE-2023-38831 P0

🕵️ APT28🇷🇺 RUScore: 218

RARLAB WinRAR Code Execution Vulnerability

CVE-2024-21412 P0

🕵️ Lazarus🇰🇵 KPScore: 218

Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability

CVE-2023-3519 P0

🕵️ RansomHub🌐 ??Score: 217

Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

CVE-2024-21413 P0

🕵️ APT29🇷🇺 RUScore: 217

Microsoft Outlook Improper Input Validation Vulnerability

CVE-2023-42793 P0

🕵️ APT29🇷🇺 RUScore: 216

JetBrains TeamCity Authentication Bypass Vulnerability

CVE-2023-27997 P0

🕵️ Volt Typhoon🇨🇳 CNScore: 213

Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability

CVE-2023-27532 P0

🕵️ Sandworm🇷🇺 RUScore: 205

Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability

CVE-2022-1388 P0

🕵️ Lazarus🇰🇵 KPScore: 183

F5 BIG-IP Missing Authentication Vulnerability

CVE-2022-29464 P0

🕵️ MuddyWater🇮🇷 IRScore: 183

WSO2 Multiple Products Unrestrictive Upload of File Vulnerability

CVE-2022-47966 P0

🕵️ Lazarus🇰🇵 KPScore: 183

Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

CVE-2024-3400 P0

🕵️ RansomHub🌐 ??Score: 183

Palo Alto Networks PAN-OS Command Injection Vulnerability

CVE-2021-44077 P0

🕵️ APT41🇨🇳 CNScore: 183

Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability

CVE-2023-20198 P0

🕵️ Salt Typhoon🇨🇳 CNScore: 183

Cisco IOS XE Web UI Privilege Escalation Vulnerability

CVE-2022-42475 P0

🕵️ Volt Typhoon🇨🇳 CNScore: 183

Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability

CVE-2021-42321 P0

🕵️ APT28🇷🇺 RUScore: 182

Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2022-30190 P0

🕵️ APT28🇷🇺 RUScore: 182

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

CVE-2023-23397 P0

🕵️ APT29🇷🇺 RUScore: 182

Microsoft Office Outlook Privilege Escalation Vulnerability

🎯 Attaques APT / espionnage (flux RSS)

Traffic violation scams switch to QR codes in new phishing texts

📅 05 April 2026📰 BleepingComputer

Scammers are sending fake "Notice of Default" traffic violation text messages impersonating state courts across the U.S., pressuring recipients to scan a QR code that leads to a phishing site demandin