{"metadata": {"vulnerability": "cve-2023-36025", "count": 148, "kinds": {"milestone": 7, "sighting": 102, "kev": 11, "other": 28}}, "data": [{"timestamp": "2023-06-20T20:44:39.824Z", "date_only": false, "value": "2023-06-20T20:44:39.824Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-36025", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-36025", "field": "timestamps.asserted_at", "uuid": "e634de10-3a4a-478a-8d2a-7a3725eb8098", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-36025", "field": "timestamps.asserted_at", "uuid": "75ada311-a6a0-4963-8a06-695f445d99fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": true, "value": "2023-11-14", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-36025", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-36025", "field": "evidence.0.details.added_date", "uuid": "75ada311-a6a0-4963-8a06-695f445d99fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": true, "value": "2023-11-14", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2023-36025", "field": "evidence.0.details.date_added", "uuid": "e634de10-3a4a-478a-8d2a-7a3725eb8098", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2023-36025", "field": "timestamps.first_seen_at", "uuid": "e634de10-3a4a-478a-8d2a-7a3725eb8098", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-36025", "field": "timestamps.first_seen_at", "uuid": "75ada311-a6a0-4963-8a06-695f445d99fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2023-36025", "field": "status.status_updated_at", "uuid": "e634de10-3a4a-478a-8d2a-7a3725eb8098", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-36025", "field": "status.status_updated_at", "uuid": "75ada311-a6a0-4963-8a06-695f445d99fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-36025", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2023-11-14T08:00:00Z", "date_only": false, "value": "2023-11-14T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-11-14T08:00:00Z", "date_only": false, "value": "2023-11-14T08:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-11-14T08:00:00Z", "date_only": false, "value": "2023-11-14T08:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "cve-2023-36025", "field": "containers.cna.datePublic"}, {"timestamp": "2023-11-14T08:00:00Z", "date_only": false, "value": "2023-11-14T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-11-14T17:57:39.104Z", "date_only": false, "value": "2023-11-14T17:57:39.104Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-36025", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-11-14T18:15:00Z", "date_only": false, "value": "2023-11-14T18:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-36025", "record": "GSD-2023-36025", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-11-14T18:15:31Z", "date_only": false, "value": "2023-11-14T18:15:31Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4JFF-227J-6G3V", "record": "GHSA-4JFF-227J-6G3V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-11-14T18:15:31.867Z", "date_only": false, "value": "2023-11-14T18:15:31.867", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-36025", "record": "FKIE_CVE-2023-36025", "field": "published"}, {"timestamp": "2023-11-14T18:30:28Z", "date_only": false, "value": "2023-11-14T18:30:28Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4JFF-227J-6G3V", "record": "GHSA-4JFF-227J-6G3V", "field": "published"}, {"timestamp": "2023-11-14T21:10:02Z", "date_only": false, "value": "2023-11-14T21:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "8bbb9b91-9b31-4a7f-8934-cbd02c57c7db"}, {"timestamp": "2023-11-14T23:00:00Z", "date_only": false, "value": "2023-11-14T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2890", "record": "WID-SEC-W-2023-2890", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-11-14T23:00:00Z", "date_only": false, "value": "2023-11-14T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2890", "record": "WID-SEC-W-2023-2890", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-11-14T23:00:00Z", "date_only": false, "value": "2023-11-14T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2890", "record": "WID-SEC-W-2023-2890", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-11-15T00:00:00Z", "date_only": false, "value": "2023-11-15T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0944", "record": "CERTFR-2023-AVI-0944", "field": "last_revision_date"}, {"timestamp": "2023-11-15T00:00:00Z", "date_only": false, "value": "2023-11-15T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0944", "record": "CERTFR-2023-AVI-0944", "field": "initial_release_date"}, {"timestamp": "2023-11-15T00:00:00Z", "date_only": false, "value": "2023-11-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0944", "record": "CERTFR-2023-AVI-0944", "field": "revisions.0.revision_date"}, {"timestamp": "2023-11-15T04:00:00Z", "date_only": false, "value": "2023-11-15T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1160", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "c90258e6-77ed-4558-a6b0-b01511070d70", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1160"}, {"timestamp": "2023-11-15T12:34:59Z", "date_only": false, "value": "2023-11-15T12:34:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/5085", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "90b5da76-2fe2-43cd-94ba-bc18bc74bcd1", "content": "Microsoft \u0432 \u043d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c PatchTuesday \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 5 0-day \u0438 58 \u043e\u0448\u0438\u0431\u043e\u043a, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 15 - RCE (\u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0434\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f) \u0438 3 - \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 - \u044d\u0442\u043e\u00a0\u043e\u0448\u0438\u0431\u043a\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 Azure, RCE \u0432 Windows Internet Connection Sharing (ICS) \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Hyper-V, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u043d\u0430 \u0445\u043e\u0441\u0442\u0435 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u043b\u0438\u0441\u044c \u043a \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u044f\u043c: 16 - \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 6 - \u043e\u0431\u0445\u043e\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, 15 - RCE, 6 - \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 5 - DoS \u0438 11 - \u0441\u043f\u0443\u0444\u0438\u043d\u0433. \u041d\u0430\u0431\u043e\u0440 \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 5 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Mariner \u0438 20 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Microsoft Edge.\n\n\u0418\u0437 \u043f\u044f\u0442\u0438 0-day \u0442\u0440\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e, \u0438 \u0442\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u0418\u0437 \u043d\u0438\u0445:\n\n- CVE-2023-36036\u00a0- \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u043c\u0438\u043d\u0438-\u0444\u0438\u043b\u044c\u0442\u0440\u0430 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 Windows Cloud Files, \u043f\u043e\u0432\u044b\u0448\u0430\u044e\u0449\u0430\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0438 Microsoft Threat Intelligence Microsoft Security Response Center, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n- CVE-2023-36033\u00a0- \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Windows DWM, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0415\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0426\u044e\u0430\u043d\u044c \u0426\u0437\u0438\u043d\u044c(@jq0904) \u0438 DBAPPSecurity WeBin Lab, \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442\u0441\u044f.\n\n- CVE-2023-36025\u00a0- \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Windows SmartScreen \u0431\u0435\u0437 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u044f\u0440\u043b\u044b\u043a \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 (.URL) \u0438\u043b\u0438 \u0433\u0438\u043f\u0435\u0440\u0441\u0441\u044b\u043b\u043a\u0443, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u043d\u0430 \u0444\u0430\u0439\u043b \u044f\u0440\u043b\u044b\u043a\u0430. \u0411\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0423\u0438\u043b\u043b\u043e\u043c \u041c\u0435\u0442\u043a\u0430\u043b\u0444\u043e\u043c (Splunk), Microsoft Threat Intelligence \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0433\u0440\u0443\u043f\u043f\u044b \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Microsoft Office.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-36413 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Microsoft Office) \u0438 CVE-2023-36038 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c DoS \u044f\u0434\u0440\u0430 ASP.NET). \u0412 Microsoft \u0437\u0430\u044f\u0432\u043b\u044f\u044e\u0442, \u0447\u0442\u043e \u043e\u043d\u0438 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u043a\u0430\u0436\u0434\u043e\u0439 \u0438\u0437 \u043d\u0438\u0445 \u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0437\u0434\u0435\u0441\u044c.", "url": "https://t.me/true_secator/5085"}, {"timestamp": "2023-11-17T08:13:29Z", "date_only": false, "value": "2023-11-17T08:13:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hackyourmom/5983", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "212c6534-0df8-40a0-93e1-783871aa1a0c", "content": "\u041d\u0430 \u0446\u044c\u043e\u043c\u0443 \u0442\u0438\u0436\u043d\u0456 \u043a\u043e\u043c\u043f\u0430\u043d\u0456\u044f Microsoft \u0432\u0438\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043b\u0438\u0441\u0442\u043e\u043f\u0430\u0434\u043e\u0432\u0438\u0439 \u043d\u0430\u0431\u0456\u0440 \u043f\u0430\u0442\u0447\u0456\u0432, \u044f\u043a\u0456 \u0437\u0430\u0433\u0430\u043b\u043e\u043c \u0443\u0441\u0443\u043d\u0443\u043b\u0438 58 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0437\u0430 \u0432\u0438\u043d\u044f\u0442\u043a\u043e\u043c \u0449\u0435 20 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044c \u0434\u043b\u044f Microsoft Edge, \u0432\u0438\u043f\u0443\u0449\u0435\u043d\u0438\u0445 \u0440\u0430\u043d\u0456\u0448\u0435), \u0443 \u0442\u043e\u043c\u0443 \u0447\u0438\u0441\u043b\u0456 \u043f'\u044f\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0442\u0438\u043f\u0443 0-day.\n\u0425\u043e\u0447\u0430 \u0446\u044c\u043e\u0433\u043e \u043c\u0456\u0441\u044f\u0446\u044f \u0431\u0443\u043b\u043e \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e 14 \u043f\u043e\u043c\u0438\u043b\u043e\u043a, \u043f\u043e\u0432'\u044f\u0437\u0430\u043d\u0438\u0445 \u0437 \u0432\u0456\u0434\u0434\u0430\u043b\u0435\u043d\u0438\u043c \u0432\u0438\u043a\u043e\u043d\u0430\u043d\u043d\u044f\u043c \u043a\u043e\u0434\u0443 (RCE), \u043b\u0438\u0448\u0435 \u043e\u0434\u043d\u0443 \u0437 \u043d\u0438\u0445 \u0444\u0430\u0445\u0456\u0432\u0446\u0456 Microsoft \u043e\u0446\u0456\u043d\u0438\u043b\u0438 \u044f\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0443: \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c CVE-2023-36052 \u0432 Azure CLI, \u0437\u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0434\u043e\u0441\u043b\u0456\u0434\u043d\u0438\u043a\u0430\u043c\u0438 Palo Alto Networks.\n\n\u0426\u0435\u0439 \u0431\u0430\u0433 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0432 \u0437\u043b\u043e\u0432\u043c\u0438\u0441\u043d\u0438\u043a\u0430\u043c \u0432\u043a\u0440\u0430\u0441\u0442\u0438 \u043e\u0431\u043b\u0456\u043a\u043e\u0432\u0456 \u0434\u0430\u043d\u0456 \u0437 GitHub Actions \u0430\u0431\u043e \u0436\u0443\u0440\u043d\u0430\u043b\u0456\u0432 Azure DevOps, \u0441\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u0445 \u0437\u0430 \u0434\u043e\u043f\u043e\u043c\u043e\u0433\u043e\u044e Azure CLI. \u0423\u0441\u043f\u0456\u0448\u043d\u0435 \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u0430\u043d\u043d\u044f \u0446\u044c\u043e\u0433\u043e \u0431\u0430\u0433\u0443 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0456\u043a\u043e\u0432\u0430\u043d\u0438\u043c \u0442\u0440\u0435\u0442\u0456\u043c \u043e\u0441\u043e\u0431\u0430\u043c \u043e\u0442\u0440\u0438\u043c\u0443\u0432\u0430\u0442\u0438 \u0432\u0456\u0434\u0434\u0430\u043b\u0435\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043e \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u0432\u043c\u0456\u0441\u0442\u0443, \u0437\u0430\u043f\u0438\u0441\u0430\u043d\u043e\u0433\u043e Azure CLI \u0443 \u0436\u0443\u0440\u043d\u0430\u043b\u0438 CI/CD.\n\"\u0417\u043b\u043e\u0432\u043c\u0438\u0441\u043d\u0438\u043a, \u044f\u043a\u0438\u0439 \u0443\u0441\u043f\u0456\u0448\u043d\u043e \u0435\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0443\u0454 \u0446\u044e \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c, \u043c\u043e\u0436\u0435 \u0432\u0456\u0434\u043d\u043e\u0432\u043b\u044e\u0432\u0430\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0456 \u0442\u0430 \u0456\u043c\u0435\u043d\u0430 \u043a\u043e\u0440\u0438\u0441\u0442\u0443\u0432\u0430\u0447\u0456\u0432 \u0443 \u0432\u0456\u0434\u043a\u0440\u0438\u0442\u043e\u043c\u0443 \u0432\u0438\u0433\u043b\u044f\u0434\u0456 \u0437 \u0444\u0430\u0439\u043b\u0456\u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0456\u0432, \u0441\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u0445 \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u043d\u0438\u043c\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c\u0438 CLI \u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0456\u043a\u043e\u0432\u0430\u043d\u0438\u0445 Azure DevOps \u0430\u0431\u043e GitHub Actions\", - \u043f\u043e\u044f\u0441\u043d\u044e\u0454 Microsoft. - \"\u041a\u043b\u0456\u0454\u043d\u0442\u0438, \u044f\u043a\u0456 \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u044e\u0442\u044c \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456 \u043a\u043e\u043c\u0430\u043d\u0434\u0438 CLI, \u043f\u043e\u0432\u0438\u043d\u043d\u0456 \u043e\u043d\u043e\u0432\u0438\u0442\u0438 Azure CLI \u0434\u043e \u0432\u0435\u0440\u0441\u0456\u0457 2.53.1 \u0430\u0431\u043e \u0432\u0438\u0449\u0435, \u0449\u043e\u0431 \u0437\u0430\u0445\u0438\u0441\u0442\u0438\u0442\u0438\u0441\u044f \u0432\u0456\u0434 \u0440\u0438\u0437\u0438\u043a\u0456\u0432, \u043f\u043e\u0432'\u044f\u0437\u0430\u043d\u0438\u0445 \u0437 \u0446\u0456\u0454\u044e \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044e. \u0426\u0435 \u0442\u0430\u043a\u043e\u0436 \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u043a\u043b\u0456\u0454\u043d\u0442\u0456\u0432 \u0437 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u043c\u0438, \u0441\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u043c\u0438 \u0437\u0430 \u0434\u043e\u043f\u043e\u043c\u043e\u0433\u043e\u044e \u0446\u0438\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0447\u0435\u0440\u0435\u0437 Azure DevOps \u0442\u0430 GitHub Actions\".\n\u0417\u0430 \u0441\u043b\u043e\u0432\u0430\u043c\u0438 \u0444\u0430\u0445\u0456\u0432\u0446\u0456\u0432, \u043a\u043b\u0456\u0454\u043d\u0442\u0438, \u044f\u043a\u0456 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u0432\u0430\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0438 Azure CLI, \u0432\u0436\u0435 \u0431\u0443\u043b\u0438 \u043f\u043e\u0432\u0456\u0434\u043e\u043c\u043b\u0435\u043d\u0456 \u043f\u0440\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0447\u0435\u0440\u0435\u0437 Azure Portal.\n\u0421\u0435\u0440\u0435\u0434 \u0456\u043d\u0448\u0438\u0445 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0445 \u0443 \u043b\u0438\u0441\u0442\u043e\u043f\u0430\u0434\u0456 RCE-\u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0443\u043b\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \u0432 Windows Internet Connection Sharing (ICS) \u0442\u0430 Hyper-V, \u044f\u043a\u0456 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0445\u043e\u0441\u0442\u0456 \u0437 \u043f\u0440\u0438\u0432\u0456\u043b\u0435\u044f\u043c\u0438 \u0440\u0456\u0432\u043d\u044f SYSTEM.\n\u0429\u043e\u0434\u043e \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 0-day, \u0446\u044c\u043e\u0433\u043e \u043c\u0456\u0441\u044f\u0446\u044f \u0457\u0445 \u0431\u0443\u043b\u043e \u043f'\u044f\u0442\u044c, \u043f\u0440\u0438\u0447\u043e\u043c\u0443 \u0442\u0440\u0438 \u0437 \u043d\u0438\u0445 \u0432\u0436\u0435 \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u0432\u0430\u043b\u0438\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0430 \u0456\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0456\u044f \u0449\u0435 \u043f\u0440\u043e \u0442\u0440\u0438 \u0431\u0443\u043b\u0430 \u043f\u0443\u0431\u043b\u0456\u0447\u043d\u043e \u0440\u043e\u0437\u043a\u0440\u0438\u0442\u0430 \u0434\u043e \u0432\u0438\u0445\u043e\u0434\u0443 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044c.\n\u0414\u043e \u0441\u043f\u0438\u0441\u043a\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0435\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u043e\u0432\u0430\u043d\u0438\u0445 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u0443\u0432\u0456\u0439\u0448\u043b\u0438:\nCVE-2023-36036 - \u043f\u0456\u0434\u0432\u0438\u0449\u0435\u043d\u043d\u044f \u043f\u0440\u0438\u0432\u0456\u043b\u0435\u0457\u0432 \u0443 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0456 Windows Cloud Files Mini Filter. Microsoft \u043f\u043e\u043f\u0435\u0440\u0435\u0434\u0436\u0443\u0454, \u0449\u043e \u0446\u044e \u043f\u043e\u043c\u0438\u043b\u043a\u0443 \u043c\u043e\u0436\u043d\u0430 \u0431\u0443\u043b\u043e \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u0432\u0430\u0442\u0438 \u0434\u043b\u044f \u043f\u0456\u0434\u0432\u0438\u0449\u0435\u043d\u043d\u044f \u043f\u0440\u0438\u0432\u0456\u043b\u0435\u0457\u0432 \u0434\u043e \u0440\u0456\u0432\u043d\u044f SYSTEM. \u041f\u043e\u043a\u0438 \u043d\u0435 \u043f\u043e\u0432\u0456\u0434\u043e\u043c\u043b\u044f\u0454\u0442\u044c\u0441\u044f, \u044f\u043a \u0441\u0430\u043c\u0435 \u0446\u0435\u0439 \u0431\u0430\u0433 \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u0432\u0430\u043b\u0438 \u0445\u0430\u043a\u0435\u0440\u0438.\nCVE-2023-36033 - \u043f\u0456\u0434\u0432\u0438\u0449\u0435\u043d\u043d\u044f \u043f\u0440\u0438\u0432\u0456\u043b\u0435\u0457\u0432 \u0443 \u0431\u0456\u0431\u043b\u0456\u043e\u0442\u0435\u0446\u0456 \u044f\u0434\u0440\u0430 Windows Desktop Manager (WDM). \u0426\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u043e\u0436 \u043c\u043e\u0433\u043b\u0430 \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u0432\u0430\u0442\u0438\u0441\u044f \u0434\u043b\u044f \u043f\u0456\u0434\u0432\u0438\u0449\u0435\u043d\u043d\u044f \u043f\u0440\u0438\u0432\u0456\u043b\u0435\u0457\u0432 \u0434\u043e \u0440\u0456\u0432\u043d\u044f SYSTEM. Microsoft \u043f\u043e\u0432\u0456\u0434\u043e\u043c\u0438\u043b\u0430, \u0449\u043e \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u0431\u0443\u043b\u0430 \u0432\u0438\u044f\u0432\u043b\u0435\u043d\u0430 \u0444\u0430\u0445\u0456\u0432\u0446\u0435\u043c DBAPPSecurity WeBin Lab, \u0430\u043b\u0435 \u043d\u0435 \u043d\u0430\u0434\u0430\u043b\u0430 \u0436\u043e\u0434\u043d\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u0438\u0446\u044c \u0449\u043e\u0434\u043e \u0457\u0457 \u0435\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0456\u0457.\nCVE-2023-36025 - \u043e\u0431\u0445\u0456\u0434 \u0437\u0430\u0445\u0438\u0441\u0442\u0443 Windows Defender SmartScreen. \u0412\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0448\u043a\u0456\u0434\u043b\u0438\u0432\u043e\u043c\u0443 \u044f\u0440\u043b\u0438\u043a\u0443 Internet Shortcut \u043e\u0431\u0456\u0439\u0442\u0438 \u043f\u0435\u0440\u0435\u0432\u0456\u0440\u043a\u0438 \u0442\u0430 \u043f\u043e\u0432'\u044f\u0437\u0430\u043d\u0456 \u0437 \u043d\u0438\u043c\u0438 \u043f\u043e\u043f\u0435\u0440\u0435\u0434\u0436\u0435\u043d\u043d\u044f \u0449\u043e\u0434\u043e \u0431\u0435\u0437\u043f\u0435\u043a\u0438.\n\"\u041a\u043e\u0440\u0438\u0441\u0442\u0443\u0432\u0430\u0447\u0435\u0432\u0456 \u0434\u043e\u0441\u0442\u0430\u0442\u043d\u044c\u043e \u043a\u043b\u0456\u043a\u043d\u0443\u0442\u0438 \u043f\u043e \u0441\u043f\u0435\u0446\u0456\u0430\u043b\u044c\u043d\u043e \u0441\u0442\u0432\u043e\u0440\u0435\u043d\u043e\u043c\u0443 \u044f\u0440\u043b\u0438\u043a\u0443 Internet Shortcut (.URL) \u0430\u0431\u043e \u0433\u0456\u043f\u0435\u0440\u043f\u043e\u0441\u0438\u043b\u0430\u043d\u043d\u044e, \u044f\u043a\u0435 \u0432\u043a\u0430\u0437\u0443\u0454 \u043d\u0430 \u0444\u0430\u0439\u043b Internet Shortcut, \u0449\u043e\u0431 \u043f\u043e\u0442\u0440\u0430\u043f\u0438\u0442\u0438 \u043f\u0456\u0434 \u0430\u0442\u0430\u043a\u0443 \u0437\u043b\u043e\u0432\u043c\u0438\u0441\u043d\u0438\u043a\u0430\", - \u043f\u0438\u0448\u0443\u0442\u044c \u0444\u0430\u0445\u0456\u0432\u0446\u0456 \u043a\u043e\u043c\u043f\u0430\u043d\u0456\u0457.\n\u041a\u0440\u0456\u043c \u0442\u043e\u0433\u043e, Microsoft \u043f\u043e\u0432\u0456\u0434\u043e\u043c\u043b\u044f\u0454, \u0449\u043e \u0443 \u0440\u0430\u043c\u043a\u0430\u0445 \u0446\u044c\u043e\u0433\u043e \"\u0432\u0456\u0432\u0442\u043e\u0440\u043a\u0430 \u043e\u043d\u043e\u0432\u043b\u0435\u043d\u044c\" \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0449\u0435 \u0434\u0432\u0456 \u043f\u0443\u0431\u043b\u0456\u0447\u043d\u043e \u0440\u043e\u0437\u043a\u0440\u0438\u0442\u0456 \u0440\u0430\u043d\u0456\u0448\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0438 0-day: \u043e\u0431\u0445\u0456\u0434 \u0437\u0430\u0445\u0438\u0441\u043d\u0438\u0445 \u0444\u0443\u043d\u043a\u0446\u0456\u0439 Microsoft Office (CVE-2023-36413) \u0442\u0430 \u0432\u0456\u0434\u043c\u043e\u0432\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0433\u043e\u0432\u0443\u0432\u0430\u043d\u043d\u0456, \u043f\u043e\u0432'\u044f\u0437\u0430\u043d\u0443 \u0437 ASP.NET (CVE-2023-36038). \u0426\u0456 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \u043d\u0435 \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u0432\u0430\u043b\u0438\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.", "url": "https://t.me/hackyourmom/5983"}, {"timestamp": "2023-11-21T01:33:00Z", "date_only": false, "value": "2023-11-21T01:33Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-36025", "record": "GSD-2023-36025", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-11-21T22:42:02Z", "date_only": false, "value": "2023-11-21T22:42:02.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/73772", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "b6be1171-8355-400f-ae6c-b08fe6eea79a", "content": "\ud83d\udd74 Exploit for Critical Windows Defender Bypass Goes Public \ud83d\udd74\n\nThreat actors were actively exploiting CVE-2023-36025 in Windows SmartScreen as a zero-day vulnerability before Microsoft patched it in November.\n\n\ud83d\udcd6 Read\n\nvia \"Dark Reading\".", "url": "https://t.me/cibsecurity/73772"}, {"timestamp": "2023-11-22T08:00:00Z", "date_only": false, "value": "2023-11-22T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-11-22T08:00:00Z", "date_only": false, "value": "2023-11-22T08:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-11-22T11:21:24Z", "date_only": false, "value": "2023-11-22T11:21:24.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/SecLabNews/14566", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "286e5780-0ed6-4df7-908f-45305a188e52", "content": "CVE-2023-36025: \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442 SmartScreen \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows\n\n\ud83d\udcbbMicrosoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 SmartScreen, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 Windows Defender \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\ud83d\udcbb\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2023-36025, \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 TA544, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430 \u0442\u0440\u043e\u044f\u043d\u044b Ursnif, WikiLoader \u0438 Remcos \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 .URL \u0444\u0430\u0439\u043b\u044b.\n\n\ud83d\udcbb\u0412 \u0441\u0435\u0442\u0438 \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 (Proof of Concept, PoC) \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0447\u0442\u043e \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a. CVE-2023-36025 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 SmartScreen \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443.\n\n#Microsoft #SmartScreen #Exploit #Windows @SecLabNews", "url": "https://t.me/SecLabNews/14566"}, {"timestamp": "2023-11-22T23:38:53Z", "date_only": false, "value": "2023-11-22T23:38:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/371", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "da45ba20-3694-4357-a160-1a2fadc6b0cb", "content": "#ExploitObserverAlert\n\nCVE-2023-36025\n\nDESCRIPTION: Exploit Observer has 8 entries related to CVE-2023-36025. Windows SmartScreen Security Feature Bypass Vulnerability\n\nFIRST-EPSS: 0.007930000\nNVD-IS: 5.9\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/371"}, {"timestamp": "2023-11-25T01:16:12Z", "date_only": false, "value": "2023-11-25T01:16:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/558", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "14a4f86f-b703-42f4-9438-ed6dcc05196e", "content": "#ExploitObserverAlert\n\nCVE-2023-36025\n\nDESCRIPTION: Exploit Observer has 8 entries related to CVE-2023-36025. Windows SmartScreen Security Feature Bypass Vulnerability\n\nFIRST-EPSS: 0.007930000\nNVD-IS: 5.9\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/558"}, {"timestamp": "2023-11-27T22:12:00Z", "date_only": false, "value": "2023-11-27T22:12:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/598", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "acaa69cc-112d-4082-9cf0-bf618ca2cd39", "content": "#ExploitObserverAlert\n\nCVE-2023-36025\n\nDESCRIPTION: Exploit Observer has 20 entries related to CVE-2023-36025. Windows SmartScreen Security Feature Bypass Vulnerability\n\nFIRST-EPSS: 0.007930000\nNVD-IS: 5.9\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/598"}, {"timestamp": "2023-11-28T10:51:36Z", "date_only": false, "value": "2023-11-28T10:51:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5981", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "a985d80f-187f-498d-b590-602a35f8db65", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1atest repo for CVE-2023-36025\nURL\uff1ahttps://github.com/louiselalanne/CVE-2023-49314\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5981"}, {"timestamp": "2023-11-28T11:53:00Z", "date_only": false, "value": "2023-11-28T11:53:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5983", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "7f042b37-61f3-45df-a703-5a6314c270b4", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1atest repo for CVE-2023-36025\nURL\uff1ahttps://github.com/J466Y/test_CVE-2023-36025\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5983"}, {"timestamp": "2023-11-28T13:22:41Z", "date_only": false, "value": "2023-11-28T13:22:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/5989", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "68455040-6f10-4c94-bd17-e6bb0bba40c1", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1atest repo for CVE-2023-36025\nURL\uff1ahttps://github.com/louiselalanne/CVE-2023-49313\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5989"}, {"timestamp": "2023-11-29T04:44:51Z", "date_only": false, "value": "2023-11-29T04:44:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1607", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "fdaa2510-ce78-4af1-8a12-9b4c6a08004f", "content": "https://github.com/J466Y/test_CVE-2023-36025\n\nWindows SmartScreen Security Feature Bypass Vulnerability\n#github", "url": "https://t.me/CNArsenal/1607"}, {"timestamp": "2023-11-29T10:37:41Z", "date_only": false, "value": "2023-11-29T10:37:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5998", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "6ae3d01c-c0e0-4b15-aceb-152509a4c6e6", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aQuick test for CVE-2023-26025 behaviours\nURL\uff1ahttps://github.com/ka7ana/CVE-2023-36025\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5998"}, {"timestamp": "2023-11-29T11:00:35Z", "date_only": false, "value": "2023-11-29T11:00:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9483", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "5fa003fb-215b-43ee-8a85-6741f2c27e01", "content": "#exploit\n1. CVE-2023-49314:\nAsana Desktop 2.1.0 (macOS) allows code injection because of specific Electron Fuses\nhttps://github.com/louiselalanne/CVE-2023-49314\n\n2. CVE-2023-36025:\nWindows SmartScreen Security Feature Bypass Vulnerability\nhttps://github.com/J466Y/test_CVE-2023-36025", "url": "https://t.me/CyberSecurityTechnologies/9483"}, {"timestamp": "2023-11-29T13:02:42Z", "date_only": false, "value": "2023-11-29T13:02:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/738", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "ce1c24b6-2541-4c7c-829c-d6b462d89d5c", "content": "#ExploitObserverAlert\n\nCVE-2023-36025\n\nDESCRIPTION: Exploit Observer has 19 entries related to CVE-2023-36025. Windows SmartScreen Security Feature Bypass Vulnerability\n\nFIRST-EPSS: 0.007930000\nNVD-IS: 5.9\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/738"}, {"timestamp": "2023-12-05T00:00:00Z", "date_only": true, "value": "2023-12-05", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2023-36025", "field": "evidence.0.details.due_date", "uuid": "e634de10-3a4a-478a-8d2a-7a3725eb8098", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-13T01:20:34.340Z", "date_only": false, "value": "2023-12-13T01:20:34.340541Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-36025", "record": "GSD-2023-36025", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-22T10:21:41Z", "date_only": false, "value": "2023-12-22T10:21:41.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f0ef984c-2467-40aa-83c6-7c671a6379cb", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "2d8036e1-0c8b-495d-adec-587183f3fc71"}, {"timestamp": "2024-01-12T08:26:53Z", "date_only": false, "value": "2024-01-12T08:26:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/167123", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "f0ffba73-1202-455a-b738-891e3750c98b", "content": "https://ift.tt/NxoDRTk\nCVE-2023-36025 Exploited for Defense Evasion in Phemedrone Stealer Campaign", "url": "https://t.me/ctinow/167123"}, {"timestamp": "2024-01-12T08:41:42Z", "date_only": false, "value": "2024-01-12T08:41:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/167128", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "4c6bbe69-c5ad-4649-be59-7121f611b509", "content": "https://ift.tt/NxoDRTk\nCVE-2023-36025 Exploited for Defense Evasion in Phemedrone Stealer Campaign", "url": "https://t.me/ctinow/167128"}, {"timestamp": "2024-01-12T19:21:58Z", "date_only": false, "value": "2024-01-12T19:21:58.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/167451", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "25873a83-eb27-464a-b610-bdfed79462ba", "content": "https://ift.tt/RIzBEV2\nCVE-2023-36025 Exploited for Defense Evasion in Phemedrone Stealer Campaign", "url": "https://t.me/ctinow/167451"}, {"timestamp": "2024-01-15T14:46:38Z", "date_only": false, "value": "2024-01-15T14:46:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/168386", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "04f069d9-a04a-4fce-9036-512fb00de162", "content": "https://ift.tt/neZgEm5\nWindows SmartScreen bug exploited to deliver powerful info-stealer (CVE-2023-36025)", "url": "https://t.me/ctinow/168386"}, {"timestamp": "2024-01-15T21:47:59Z", "date_only": false, "value": "2024-01-15T21:47:59.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/19234", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "31fa0d8b-8bbb-40e8-b2f3-cbf472814800", "content": "\u200aWindows SmartScreen flaw exploited to drop Phemedrone malware\n\nA Phemedrone information-stealing malware campaign exploits a Microsoft Defender SmartScreen vulnerability (CVE-2023-36025) to bypass Windows security prompts when opening URL files. [...]\n\nhttps://www.bleepingcomputer.com/news/security/windows-smartscreen-flaw-exploited-to-drop-phemedrone-malware/", "url": "https://t.me/BleepingComputer/19234"}, {"timestamp": "2024-01-16T08:16:56Z", "date_only": false, "value": "2024-01-16T08:16:56.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/4406", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "40a5a7a7-92d6-4bd7-8766-2684dee350d9", "content": "\u26a0\ufe0f Windows users, beware! \n \nCybercriminals are weaponizing the CVE-2023-36025 Windows vulnerability to deploy \"Phemedrone Stealer,\" an open-source data stealer, that targets browsers, crypto wallets, and chat apps. \n \nLearn more: https://thehackernews.com/2024/01/hackers-weaponize-windows-flaw-to.html", "url": "https://t.me/thehackernews/4406"}, {"timestamp": "2024-01-16T08:33:18Z", "date_only": false, "value": "2024-01-16T08:33:18.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/tengkorakcybercrewz/278", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "48ab33e6-3506-4087-b2de-7547f93e8ce8", "content": "\u26a0\ufe0f Windows users, beware! \n \nCybercriminals are weaponizing the CVE-2023-36025 Windows vulnerability to deploy \"Phemedrone Stealer,\" an open-source data stealer, that targets browsers, crypto wallets, and chat apps. \n \nLearn more: https://thehackernews.com/2024/01/hackers-weaponize-windows-flaw-to.html", "url": "https://t.me/tengkorakcybercrewz/278"}, {"timestamp": "2024-01-16T08:33:18Z", "date_only": false, "value": "2024-01-16T08:33:18.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/tengkorakcybercrewz/3130", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "4dfccc86-2415-4b4f-807d-cb5863c84f06", "content": "\u26a0\ufe0f Windows users, beware! \n \nCybercriminals are weaponizing the CVE-2023-36025 Windows vulnerability to deploy \"Phemedrone Stealer,\" an open-source data stealer, that targets browsers, crypto wallets, and chat apps. \n \nLearn more: https://thehackernews.com/2024/01/hackers-weaponize-windows-flaw-to.html", "url": "https://t.me/tengkorakcybercrewz/3130"}, {"timestamp": "2024-01-16T08:45:22Z", "date_only": false, "value": "2024-01-16T08:45:22.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/HelangMerahGroup/1742", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "e8423bd5-2b03-46f5-a4bc-557edef9ecc5", "content": "\u26a0\ufe0f Windows users, beware! \n \nCybercriminals are weaponizing the CVE-2023-36025 Windows vulnerability to deploy \"Phemedrone Stealer,\" an open-source data stealer, that targets browsers, crypto wallets, and chat apps. \n \nLearn more: https://thehackernews.com/2024/01/hackers-weaponize-windows-flaw-to.html", "url": "https://t.me/HelangMerahGroup/1742"}, {"timestamp": "2024-01-16T08:45:22Z", "date_only": false, "value": "2024-01-16T08:45:22.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/HelangMerahGroup/301", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "8517974a-ba48-48e6-a28b-740e1260d44c", "content": "\u26a0\ufe0f Windows users, beware! \n \nCybercriminals are weaponizing the CVE-2023-36025 Windows vulnerability to deploy \"Phemedrone Stealer,\" an open-source data stealer, that targets browsers, crypto wallets, and chat apps. \n \nLearn more: https://thehackernews.com/2024/01/hackers-weaponize-windows-flaw-to.html", "url": "https://t.me/HelangMerahGroup/301"}, {"timestamp": "2024-01-16T17:37:42Z", "date_only": false, "value": "2024-01-16T17:37:42.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberSecurityTechnologies/9795", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "5f4bddbe-74ef-41ff-8e38-793afe832088", "content": "#Malware_analysis\n1. One File, Two Payloads\nhttps://isc.sans.edu/diary/One%20File%2C%20Two%20Payloads/30558\n2. Phemedrone Stealer Campaign\nhttps://www.trendmicro.com/en_us/research/24/a/cve-2023-36025-exploited-for-defense-evasion-in-phemedrone-steal.html", "url": "https://t.me/CyberSecurityTechnologies/9795"}, {"timestamp": "2024-01-16T20:56:55Z", "date_only": false, "value": "2024-01-16T20:56:55.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/glbKRe3vV4RZBJOpOK8agV-TA1TC43-7PyjeSYZWmtNc_Ts", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "29d464bd-8007-45dc-9ccf-5fb5976f0bd0"}, {"timestamp": "2024-01-17T16:18:19Z", "date_only": false, "value": "2024-01-17T16:18:19.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/026e6f72-ed6b-491e-9f18-ad89c156cb61", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "320b825a-2a41-4b56-8690-87fc3b73be07"}, {"timestamp": "2024-01-18T08:40:16Z", "date_only": false, "value": "2024-01-18T08:40:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/anti_malware/16582", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "23d8bd85-f4cb-4e23-8f0a-85938117026e", "content": "\u0417\u0430\u0442\u043e\u0447\u0435\u043d\u043d\u044b\u0439 \u043f\u043e\u0434 \u043a\u0440\u0430\u0436\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441 Phemedrone \u0431\u044b\u043b \u0437\u0430\u043c\u0435\u0447\u0435\u043d \u0432 \u043d\u043e\u0432\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438. \u0427\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0442\u0440\u043e\u044f\u043d \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0436\u0435\u0440\u0442\u0432\u044b, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Microsoft Defender SmartScreen (CVE-2023-36025).", "url": "https://t.me/anti_malware/16582"}, {"timestamp": "2024-01-25T11:42:02Z", "date_only": false, "value": "2024-01-25T11:42:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/1gfzyqYNI9-_G3zC9diFZmyK2rlGnUa7SyID4auMqibFbLU", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "3b05e9d8-167b-4d4a-82dd-7b87915feb78"}, {"timestamp": "2024-01-31T23:00:00Z", "date_only": false, "value": "2024-01-31T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2890", "record": "WID-SEC-W-2023-2890", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-02-05T21:55:45Z", "date_only": false, "value": "2024-02-05T21:55:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9917", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "33f11385-c7ec-4bb7-b7a9-2c137d112541", "content": "#exploit\n1. CVE-2023-32233:\nUAF in Netfilter nf_tables when processing batch requests\nhttps://github.com/RogelioPumajulca/TEST-CVE-2023-32233\n\n2. CVE-2023-36025:\nWindows SmartScreen Security Feature Bypass\nhttps://github.com/coolman6942o/-EXPLOIT-CVE-2023-36025", "url": "https://t.me/CyberSecurityTechnologies/9917"}, {"timestamp": "2024-02-07T19:10:58Z", "date_only": false, "value": "2024-02-07T19:10:58.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/35a3073a-9193-4c4d-9b90-caeb2e44c06a", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "83074e71-52b2-434e-b98b-0f1bb2ee299d"}, {"timestamp": "2024-04-04T14:05:41Z", "date_only": false, "value": "2024-04-04T14:05:41.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/5601", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "e4414547-221b-4270-8ca7-d9d45faecbff", "content": "\u0414\u0435\u0440\u0436\u0438\u0441\u044c \u0415\u0432\u0440\u043e\u043f\u0430! \u0422\u0440\u043e\u044f\u043d Mispadu, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u0441\u0432\u043e\u0438\u043c\u0438 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u041b\u0430\u0442\u0438\u043d\u0441\u043a\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0438 \u0438 \u0438\u0441\u043f\u0430\u043d\u043e\u044f\u0437\u044b\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u043b \u0441\u0432\u043e\u044e \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0437\u0430 \u0435\u0435 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0438 \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u0441\u044f \u043d\u0430 \u0418\u0442\u0430\u043b\u0438\u044e, \u041f\u043e\u043b\u044c\u0448\u0443 \u0438 \u0428\u0432\u0435\u0446\u0438\u044e. \n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Morphisec, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e\u0434 \u0443\u0434\u0430\u0440 \u043f\u043e\u043f\u0430\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0441\u0444\u0435\u0440\u0430\u0445 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432, \u0443\u0441\u043b\u0443\u0433, \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0430 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439, \u044e\u0440\u0438\u0434\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0444\u0438\u0440\u043c \u0438 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432 \u0441\u0432\u043e\u0435\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0433\u0435\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0443\u0433\u0440\u043e\u0437\u044b, \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0430\u0442\u0430\u043a \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u041c\u0435\u043a\u0441\u0438\u043a\u0430.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0431\u044b\u043b\u0438 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u044b \u0442\u044b\u0441\u044f\u0447\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u043e\u0431\u0440\u0430\u043d\u043d\u044b\u0445 \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0430\u043f\u0440\u0435\u043b\u044f 2023 \u0433\u043e\u0434\u0430 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u0435\u043b\u0435\u0439.\n\nMispadu, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043a\u0430\u043a URSA, \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0431\u044b\u043b \u0437\u0430\u043c\u0435\u0447\u0435\u043d \u0432 2019 \u0433\u043e\u0434\u0443, \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u043a\u0440\u0430\u0436\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0435\u0439 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0445 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 \u0411\u0440\u0430\u0437\u0438\u043b\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043e\u0431\u043c\u0430\u043d\u043a\u0443 \u0441 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u044e\u0449\u0438\u043c\u0438 \u043e\u043a\u043d\u0430\u043c\u0438.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 Delphi \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0434\u0435\u043b\u0430\u0442\u044c \u0441\u043d\u0438\u043c\u043a\u0438 \u044d\u043a\u0440\u0430\u043d\u0430 \u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043d\u0430\u0436\u0430\u0442\u0438\u044f \u043a\u043b\u0430\u0432\u0438\u0448. \u041e\u0431\u044b\u0447\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0430\u043c-\u043f\u0438\u0441\u044c\u043c\u0430.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b Windows SmartScreen (CVE-2023-36025, CVSS: 8.8) \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u041c\u0435\u043a\u0441\u0438\u043a\u0435.\n\n\u0421\u0445\u0435\u043c\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430\u044f, \u043d\u043e \u0442\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 PDF-\u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432 \u043f\u0438\u0441\u044c\u043c\u0430\u0445 \u0441 \u0442\u0435\u043c\u043e\u0439 \u0441\u0447\u0435\u0442\u0430-\u0444\u0430\u043a\u0442\u0443\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u0435\u043b\u044e \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043f\u043e \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0435 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0441\u0447\u0435\u0442\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0435 \u0430\u0440\u0445\u0438\u0432\u0430 ZIP.\n\n\u0412 \u0430\u0440\u0445\u0438\u0432\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a MSI \u0438\u043b\u0438 \u0441\u043a\u0440\u0438\u043f\u0442 HTA, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u043d\u0430 Visual Basic (VBScript) \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432\u0442\u043e\u0440\u043e\u0439 VBScript, \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 Mispadu \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043a\u0440\u0438\u043f\u0442\u0430 AutoIT \u043f\u043e\u0441\u043b\u0435 \u0435\u0433\u043e \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 \u0438 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430. \n\n\u0410\u0442\u0430\u043a\u0438 Mispadu \u0442\u0430\u043a\u0436\u0435 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0437\u0443\u044e\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0432\u0443\u0445 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 C2: \u043e\u0434\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0445 \u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0438 \u0434\u0440\u0443\u0433\u043e\u0433\u043e - \u0434\u043b\u044f \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 200 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.", "url": "https://t.me/true_secator/5601"}, {"timestamp": "2024-07-22T14:18:36Z", "date_only": false, "value": "2024-07-22T14:18:36.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/l8HrqQCUzlXu_1uMegNue6rCf6-Sn9GfDuSkIgNFGZzbX2Y", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "90c6c98e-0714-4c7a-a80e-2d117950635b"}, {"timestamp": "2024-07-22T18:19:15Z", "date_only": false, "value": "2024-07-22T18:19:15.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/JYYq_NE_QRTP0mmwpmj5_oSMR5qGgan6gTVp_opsPNLdoCM", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "11d4ff7b-cf00-4215-be94-9cc9cf17c782"}, {"timestamp": "2024-08-02T16:37:41.259Z", "date_only": false, "value": "2024-08-02T16:37:41.259Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-36025", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-06T17:54:30Z", "date_only": false, "value": "2024-08-06T17:54:30.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/5416", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "11cd6933-002d-4dea-81aa-096716ec3e41", "content": "\u034f\u0424\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u0438\u0439 PatchTuesday \u043e\u0442 Microsoft \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f 73 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 5 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 2 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 0-day, \u0430 \u0442\u0430\u043a\u0436\u0435 6 - Microsoft Edge \u0438 1 - Mariner.\n\n\u0415\u0441\u043b\u0438 \u043f\u043e \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u044f\u043c, \u0442\u043e 16 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 3 - \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, 30 - RCE, 5 - \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 9 - DoS \u0438 10 - \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u043e\u043c.\n\n\u041f\u043e\u043b\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043a\u0430\u0436\u0434\u043e\u0439 \u0438\u0437 \u043d\u0438\u0445 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 - \u0437\u0434\u0435\u0441\u044c.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 0-day \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u042d\u0440\u0438\u043a\u043e\u043c \u041b\u043e\u0443\u0440\u0435\u043d\u0441\u0435\u043c\u00a0\u0438\u0437 Microsoft \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-21351, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Windows SmartScreen.\n\n\u0410\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0438 \u0443\u0431\u0435\u0434\u0438\u0442\u044c \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0435\u0433\u043e, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 SmartScreen.\n\n\u041a\u0430\u043a \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a \u0438 \u043a\u0430\u043a\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0435\u0435, Microsoft \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442.\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2024-21412\u00a0\u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f Mark of the Web (MoTW) \u0432 Windows, \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0435\u043c\u044b\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Microsoft, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Windows Server 2019, Server 2022, Windows 10 \u0438 11.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e: Zero Day Initiative Trend Micro, Aura Information Security \u0438 \u0433\u0440\u0443\u043f\u043f\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 Google.\n\n\u041a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438 Trend Micro, CVE-2024-21412 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 APT-\u0433\u0440\u0443\u043f\u043f\u043e\u0439 DarkCasino (Water Hydra), \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0442\u0440\u0435\u0439\u0434\u0435\u0440\u043e\u0432 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e DarkMe \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u044b \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0433\u0440\u0430\u0444\u0438\u043a \u0430\u043a\u0446\u0438\u0439, \u0441\u0441\u044b\u043b\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u043d\u0430 \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0439 \u0442\u0440\u0435\u0439\u0434\u0435\u0440\u0441\u043a\u0438\u0439 \u0441\u0430\u0439\u0442 (fxbulls[.]ru), \u0432\u044b\u0434\u0430\u044e\u0449\u0438\u0439 \u0441\u0435\u0431\u044f \u0437\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0444\u043e\u0440\u0435\u043a\u0441-\u0431\u0440\u043e\u043a\u0435\u0440\u0430 (fxbulls[.]com).\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043d\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u044d\u0442\u0430\u043f\u0430\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0435\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u0446\u0435\u043b\u044c \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f ransomware.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 (IoC) \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 DarkMe \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u00a0\u0437\u0434\u0435\u0441\u044c.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0432\u0448\u0438\u0435 \u0437\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 Trend Micro \u043f\u0440\u0438\u0448\u043b\u0438 \u043a \u0432\u044b\u0432\u043e\u0434\u0443, \u0447\u0442\u043e CVE-2024-21412 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0434\u0440\u0443\u0433\u043e\u0439 0-day \u0432 Defender SmartScreen (CVE-2023-36025), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043f\u043e\u043a\u0430 DarkCasino \u043e\u0440\u0443\u0434\u0443\u0435\u0442 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043a\u0440\u0438\u0432\u043e\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Windows \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043f\u0430\u0442\u0447 \u043e\u0442 Microsoft \ud83d\udc47", "url": "https://t.me/true_secator/5416"}, {"timestamp": "2024-08-15T15:41:52Z", "date_only": false, "value": "2024-08-15T15:41:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.thezdi.com/blog/2024/8/14/cve-2024-38213-copy2pwn-exploit-evades-windows-web-protections", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "88394dd2-ab6e-4ba7-aa67-bdb26eb7d3e2", "url": "https://www.thezdi.com/blog/2024/8/14/cve-2024-38213-copy2pwn-exploit-evades-windows-web-protections"}, {"timestamp": "2024-08-16T08:53:00Z", "date_only": false, "value": "2024-08-16T08:53:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/2134", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "53ce621d-9629-4b77-b723-5cf2d7fa864a", "content": "#exploit\n1. CVE-2023-49314:\nAsana Desktop 2.1.0 (macOS) allows code injection because of specific Electron Fuses\nhttps://github.com/louiselalanne/CVE-2023-49314\n\n2. CVE-2023-36025:\nWindows SmartScreen Security Feature Bypass Vulnerability\nhttps://github.com/J466Y/test_CVE-2023-36025", "url": "https://t.me/Rootsec_2/2134"}, {"timestamp": "2024-08-16T09:13:18Z", "date_only": false, "value": "2024-08-16T09:13:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/2720", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "d964814c-dd82-467a-b3cf-3828d0acc44e", "content": "#exploit\n1. CVE-2023-32233:\nUAF in Netfilter nf_tables when processing batch requests\nhttps://github.com/RogelioPumajulca/TEST-CVE-2023-32233\n\n2. CVE-2023-36025:\nWindows SmartScreen Security Feature Bypass\nhttps://github.com/coolman6942o/-EXPLOIT-CVE-2023-36025", "url": "https://t.me/Rootsec_2/2720"}, {"timestamp": "2024-08-19T19:02:26Z", "date_only": false, "value": "2024-08-19T19:02:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/6107", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "71679ac8-febb-4194-8630-924566084041", "content": "Check Point \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 OpSec \u0432 \u043d\u043e\u0432\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u041f\u041e Styx Stealer, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0438 \u0440\u0430\u0437\u043e\u0431\u043b\u0430\u0447\u0438\u0442\u044c \u0435\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430, \u0442\u0443\u0440\u0435\u0446\u043a\u043e\u0433\u043e \u0445\u0430\u043a\u0435\u0440\u0430 Sty1x.\n\n\u0412\u0441\u0435 \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0441 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e Check Point \u0432 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0434\u043d\u043e\u0439 \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u041f\u041e, \u043a\u043e\u0440\u043d\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0442\u044f\u043d\u0443\u0442\u0441\u044f \u043e\u0442\u00a0Phemedrone Stealer.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0441\u0442\u0430\u043b \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 2024 \u0433\u043e\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u043d\u0430\u0447\u0430\u043b \u0448\u0438\u0440\u043e\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-36025 \u0432 Microsoft Windows Defender SmartScreen.\n\nPhemedrone \u043a\u043e\u0433\u0434\u0430-\u0442\u043e \u0431\u044b\u043b \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043d\u0430 GitHub, \u043d\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u0442\u0435\u0445 \u043f\u043e\u0440 \u0431\u044b\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u044b, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044e \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0444\u043e\u0440\u043a\u043e\u0432. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f Styx Stealer, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u043c\u044b\u0439 \u043d\u0430 styxcrypter[.]com.\n\nStyx Stealer - \u044d\u0442\u043e \u043c\u043e\u0449\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0435 \u043a\u0440\u0430\u0441\u0442\u044c \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438, \u0444\u0430\u0439\u043b\u044b cookie \u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0430\u0432\u0442\u043e\u0437\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u0437 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 Chromium \u0438 Gecko, \u0438\u0437 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 Telegram \u0438 Discord.\n\n\u041e\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0439 IP-\u0430\u0434\u0440\u0435\u0441, \u0438 \u043c\u043e\u0436\u0435\u0442 \u0434\u0435\u043b\u0430\u0442\u044c \u0441\u043d\u0438\u043c\u043a\u0438 \u044d\u043a\u0440\u0430\u043d\u0430, \u0447\u0442\u043e\u0431\u044b \u043b\u0443\u0447\u0448\u0435 \u043f\u043e\u043d\u044f\u0442\u044c \u0441\u0440\u0435\u0434\u0443, \u043f\u0435\u0440\u0435\u0434 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\nStyx Stealer, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435 \u0441\u0442\u0430\u0440\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Phemedrone Stealer.\n\n\u041e\u0442\u043a\u0443\u0434\u0430 \u0443\u043d\u0430\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u044b \u0432\u0441\u0435 \u044d\u0442\u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u043d\u043e \u0441 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \n\u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f\u043c\u0438.\n\nStyx Stealer \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0435 \u2014 $75 \u0437\u0430 \u0435\u0436\u0435\u043c\u0435\u0441\u044f\u0447\u043d\u0443\u044e \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u044e, $230 \u0437\u0430 \u0442\u0440\u0438 \u043c\u0435\u0441\u044f\u0446\u0430 \u0438 $350 \u0437\u0430 \u043f\u043e\u0436\u0438\u0437\u043d\u0435\u043d\u043d\u0443\u044e \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0443.\u00a0\n\n\u0420\u0435\u043a\u043b\u0430\u043c\u0430 \u0441\u0442\u0438\u043b\u0435\u0440\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2024 \u0433\u043e\u0434\u0430, \u0447\u0442\u043e \u0441\u043e\u0432\u043f\u0430\u043b\u043e \u0441 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u043c \u0441\u0430\u0439\u0442\u0430 styxcrypter[.]com.\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 2024 \u0433\u043e\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u043f\u0430\u043c-\u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u0435\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0430\u0440\u0445\u0438\u0432 TAR \u0441 Agent Tesla.\n\n\u041e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b API Telegram Bot \u0434\u043b\u044f \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0420\u0435\u0441\u0435\u0440\u0447\u0435\u0432\u0430\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0442\u043e\u043a\u0435\u043d Telegram Bot \u0438\u0437 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u0412 \u0445\u043e\u0434\u0435 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0431\u043e\u0442\u0430 \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b \u0442\u0438\u043f\u0438\u0447\u043d\u043e\u0439 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043e\u0442\u0447\u0435\u0442\u0430 Agent Tesla.\n\n\u0414\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u0430\u0440\u0445\u0438\u0432\u043e\u043c, \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e Phemedrone Stealer, \u043d\u043e \u0441 \u0434\u0440\u0443\u0433\u0438\u043c \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u043c, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 Styx Stealer.\n\n\u0420\u0430\u0437\u043c\u043e\u0442\u0430\u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443, \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a Styx Stealer \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043b \u0444\u0430\u0442\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0438 \u0441\u043b\u0438\u043b \u0434\u0430\u043d\u043d\u044b\u0435 \u0441\u043e \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430, \u043e\u0442\u043b\u0430\u0434\u0438\u0432 \u0441\u0442\u0438\u043b\u043b\u0435\u0440 \u043d\u0430 \u0441\u0432\u043e\u0435\u043c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0442\u043e\u043a\u0435\u043d\u0430 \u0431\u043e\u0442\u0430 Telegram, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c, \u0443\u0447\u0430\u0441\u0442\u0432\u043e\u0432\u0430\u0432\u0448\u0438\u043c \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 Agent Tesla.\n\n\u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0447\u0435\u043c\u0443 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043e\u0431\u044a\u0435\u043c \u0440\u0430\u0437\u0432\u0435\u0434\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 54 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 Agent Tesla.", "url": "https://t.me/true_secator/6107"}, {"timestamp": "2024-08-20T21:17:24Z", "date_only": false, "value": "2024-08-20T21:17:24.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a167352e-ca18-4ea3-905d-7dec3b2d649c", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "c83ab8e3-fcc0-4e2f-82c1-824f47979af3"}, {"timestamp": "2024-12-24T20:35:40.394Z", "date_only": false, "value": "2024-12-24T20:35:40.394803Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971921", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "7aee5fe0-3924-4ac4-9066-5e23c72a6cf2", "url": "https://feedsin.space/feed/CISAKevBot/items/2971921"}, {"timestamp": "2025-01-07T21:40:29.838Z", "date_only": false, "value": "2025-01-07T21:40:29.838034Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-36025", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-07T21:40:29.838Z", "date_only": false, "value": "2025-01-07T21:40:29.838034Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-36025", "record": "FKIE_CVE-2023-36025", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-07T22:38:35Z", "date_only": false, "value": "2025-01-07T22:38:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/592", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "2baf6bbe-9272-4c3e-a501-0445e06ccbd7", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-36025\n\ud83d\udd39 Description: Windows SmartScreen Security Feature Bypass Vulnerability\n\ud83d\udccf Published: 2023-11-14T17:57:39.104Z\n\ud83d\udccf Modified: 2025-01-07T21:41:51.812Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36025", "url": "https://t.me/DarkWebInformer_CVEAlerts/592"}, {"timestamp": "2025-01-08T16:07:59Z", "date_only": false, "value": "2025-01-08T16:07:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.thezdi.com/blog/2025/1/8/zdi-threat-hunting-2024-highlights-trends-amp-challenges", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "e8c1c845-eb8f-4539-babc-68f3ea7d0973", "url": "https://www.thezdi.com/blog/2025/1/8/zdi-threat-hunting-2024-highlights-trends-amp-challenges"}, {"timestamp": "2025-01-27T06:59:50.503Z", "date_only": false, "value": "2025-01-27T06:59:50.503610Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redvello.bsky.social/post/3lgpejmauvc2w", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "a67fbb32-4717-4917-bcbb-aa17d0a0a326", "url": "https://bsky.app/profile/redvello.bsky.social/post/3lgpejmauvc2w"}, {"timestamp": "2025-02-23T02:10:49Z", "date_only": false, "value": "2025-02-23T02:10:49.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "fb956b3b-411e-4411-81ff-9a458b8e7eef"}, {"timestamp": "2025-04-30T00:12:35Z", "date_only": false, "value": "2025-04-30T00:12:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13952", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "b1ab7977-1e2c-4d12-b08e-d2f8b6d2dc3a", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-36025\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C)\n\ud83d\udd39 Description: Windows SmartScreen Security Feature Bypass Vulnerability\n\ud83d\udccf Published: 2023-11-14T17:57:39.104Z\n\ud83d\udccf Modified: 2025-04-29T23:34:47.472Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36025", "url": "https://t.me/DarkWebInformer_CVEAlerts/13952"}, {"timestamp": "2025-08-31T03:01:01Z", "date_only": false, "value": "2025-08-31T03:01:01.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "14ec65e0-cfa7-492b-b8db-75a37409c293"}, {"timestamp": "2025-10-08T23:59:26.021Z", "date_only": false, "value": "2025-10-08T23:59:26.021Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-09T00:00:07.842Z", "date_only": false, "value": "2025-10-09T00:00:07.842Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "cve-2023-36025", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:05:32.342Z", "date_only": false, "value": "2025-10-21T23:05:32.342Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-36025", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:05:32.342Z", "date_only": false, "value": "2025-10-21T23:05:32.342Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-36025", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:53Z", "date_only": false, "value": "2025-10-22T00:32:53Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4JFF-227J-6G3V", "record": "GHSA-4JFF-227J-6G3V", "field": "modified"}, {"timestamp": "2026-02-02T12:26:46.548Z", "date_only": false, "value": "2026-02-02T12:26:46.548580Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a996d344-b7d6-4411-8b62-58e42ee6c18a", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "5a483e57-1b93-43d8-b16b-2af4f5b0c139", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a996d344-b7d6-4411-8b62-58e42ee6c18a"}, {"timestamp": "2026-02-02T12:26:46.548Z", "date_only": false, "value": "2026-02-02T12:26:46.548580Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a996d344-b7d6-4411-8b62-58e42ee6c18a", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "e8102bd2-e707-43de-b655-3a2959870a48", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a996d344-b7d6-4411-8b62-58e42ee6c18a"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2023-36025", "field": "timestamps.recorded_at", "uuid": "e634de10-3a4a-478a-8d2a-7a3725eb8098", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-06T23:22:28Z", "date_only": false, "value": "2026-02-06T23:22:28.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/026e6f72-ed6b-491e-9f18-ad89c156cb61", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "df3da7f3-0b40-46f2-be67-f39a7abd0719"}, {"timestamp": "2026-04-10T09:02:58Z", "date_only": false, "value": "2026-04-10T09:02:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/N3mes1s/b5b0b96782b9f832819d2db7c6684f84", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "5602e6fe-0266-43fa-99b8-741b89578a47", "url": "https://gist.github.com/N3mes1s/b5b0b96782b9f832819d2db7c6684f84"}, {"timestamp": "2026-04-13T22:00:00Z", "date_only": false, "value": "2026-04-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2890", "record": "WID-SEC-W-2023-2890", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-04-13T22:00:00Z", "date_only": false, "value": "2026-04-13T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2890", "record": "WID-SEC-W-2023-2890", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-04-14T08:54:18.549Z", "date_only": false, "value": "2026-04-14T08:54:18.549+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2890", "record": "WID-SEC-W-2023-2890", "field": "document.tracking.generator.date"}, {"timestamp": "2026-04-21T08:36:02Z", "date_only": false, "value": "2026-04-21T08:36:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/shikorido/f4fe82140c5f849bd9fbb44a4451f4de", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "0bbc2475-96b4-4725-857b-7e03164ba2d4", "url": "https://gist.github.com/shikorido/f4fe82140c5f849bd9fbb44a4451f4de"}, {"timestamp": "2026-06-17T06:05:41.527Z", "date_only": false, "value": "2026-06-17T06:05:41.527", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-36025", "record": "FKIE_CVE-2023-36025", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:45.707Z", "date_only": false, "value": "2026-06-19T12:46:45.707702Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4504419c-5014-45a9-946a-4b51434b5a4d", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "f4b0cd91-78bb-4824-9237-41226c4ada33", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4504419c-5014-45a9-946a-4b51434b5a4d"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-36025", "field": "timestamps.recorded_at", "uuid": "75ada311-a6a0-4963-8a06-695f445d99fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:12.500Z", "date_only": false, "value": "2026-06-23T11:14:12.500767Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/75ada311-a6a0-4963-8a06-695f445d99fd", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "5fc5023c-71f4-4291-8b24-70b6f26bf244", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/75ada311-a6a0-4963-8a06-695f445d99fd"}, {"timestamp": "2026-06-23T14:05:47.990Z", "date_only": false, "value": "2026-06-23T14:05:47.990673Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8abe9e5d-f450-4570-ad5c-01ad549d709b", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "f5646001-9320-4846-9dd9-d30746a50d0b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8abe9e5d-f450-4570-ad5c-01ad549d709b"}, {"timestamp": "2026-07-06T11:00:12.523Z", "date_only": false, "value": "2026-07-06T11:00:12.523093Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/191", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "542ff0cb-6a23-4684-b643-cf1a297434fd", "url": "https://t.me/ZerodayAlert/191"}, {"timestamp": "2026-07-06T11:00:14.966Z", "date_only": false, "value": "2026-07-06T11:00:14.966003Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/94", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "75902a70-c854-4cb9-85d2-c3b102da0f9f", "url": "https://t.me/ZerodayAlert/94"}, {"timestamp": "2026-07-06T11:00:15.115Z", "date_only": false, "value": "2026-07-06T11:00:15.115073Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/87", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "a2c6a24e-8278-4258-8ae1-d453372a8898", "url": "https://t.me/ZerodayAlert/87"}, {"timestamp": "2026-07-07T00:00:20.511Z", "date_only": false, "value": "2026-07-07T00:00:20.511296Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/191", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "2745b8e5-a921-4abd-b32c-2a5cc6688180", "url": "https://t.me/ZerodayAlert/191"}, {"timestamp": "2026-07-07T00:00:23.264Z", "date_only": false, "value": "2026-07-07T00:00:23.264037Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/94", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "51bf864e-3917-4a2b-b1c6-d07798a5b8da", "url": "https://t.me/ZerodayAlert/94"}, {"timestamp": "2026-07-07T00:00:23.431Z", "date_only": false, "value": "2026-07-07T00:00:23.431489Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/87", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "2b395069-6358-4894-a5d4-cad8314b39f9", "url": "https://t.me/ZerodayAlert/87"}, {"timestamp": "2026-07-12T01:00:03.809Z", "date_only": false, "value": "2026-07-12T01:00:03.809539Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/191", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "39209876-c721-4325-985d-7f6aa15c1fd2", "url": "https://t.me/ZerodayAlert/191"}, {"timestamp": "2026-07-12T04:00:04.230Z", "date_only": false, "value": "2026-07-12T04:00:04.230617Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/87", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "7cfca270-9b9b-4839-b573-2319681fd34d", "url": "https://t.me/ZerodayAlert/87"}, {"timestamp": "2026-07-12T04:00:04.486Z", "date_only": false, "value": "2026-07-12T04:00:04.486270Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/94", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "455324fa-3cdc-455c-acfd-5736463781ec", "url": "https://t.me/ZerodayAlert/94"}, {"timestamp": "2026-07-13T00:00:52.687Z", "date_only": false, "value": "2026-07-13T00:00:52.687741Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/87", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "60447c70-5404-41b2-8a7d-35e1fb1b0485", "url": "https://t.me/ZerodayAlert/87"}, {"timestamp": "2026-07-13T00:00:52.885Z", "date_only": false, "value": "2026-07-13T00:00:52.885360Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/94", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "be77bd37-eb2d-4043-ac19-391e55410fc2", "url": "https://t.me/ZerodayAlert/94"}, {"timestamp": "2026-07-13T00:00:55.880Z", "date_only": false, "value": "2026-07-13T00:00:55.880254Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/191", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "af243d95-d97d-4a40-b83e-a1132e063006", "url": "https://t.me/ZerodayAlert/191"}, {"timestamp": "2026-07-17T11:00:07.033Z", "date_only": false, "value": "2026-07-17T11:00:07.033912Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/208", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "6df7fff9-e019-4eab-a3d3-f55aa96b6a4f", "url": "https://t.me/cyberwarehouse/208"}, {"timestamp": "2026-07-18T00:00:28.605Z", "date_only": false, "value": "2026-07-18T00:00:28.605792Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/208", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "e70cf3a0-a0f1-40ab-a7ee-36d2e1f0843d", "url": "https://t.me/cyberwarehouse/208"}, {"timestamp": "2026-07-26T02:02:00.403Z", "date_only": false, "value": "2026-07-26T02:02:00.403013Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/3465", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "1456c220-2465-41f2-940b-89e23cd6526e", "url": "https://t.me/EchelonEyes/3465"}, {"timestamp": "2026-07-26T02:02:11.783Z", "date_only": false, "value": "2026-07-26T02:02:11.783606Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2640", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "82225192-9e54-4a4a-bc0d-8e5e98dd59e5", "url": "https://t.me/EchelonEyes/2640"}, {"timestamp": "2026-07-26T02:02:12.659Z", "date_only": false, "value": "2026-07-26T02:02:12.659350Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2556", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "abe0c4a4-1d18-4c39-87c8-240491a4babe", "url": "https://t.me/EchelonEyes/2556"}, {"timestamp": "2026-07-26T02:02:18.995Z", "date_only": false, "value": "2026-07-26T02:02:18.995196Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2167", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "f2dbed20-909c-4204-8512-e4d77645293f", "url": "https://t.me/EchelonEyes/2167"}, {"timestamp": "2026-07-26T07:01:23.719Z", "date_only": false, "value": "2026-07-26T07:01:23.719761Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/2086", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "c55fe92e-78ac-4e87-9b73-d11ae1379d27", "url": "https://t.me/Positive_Technologies/2086"}, {"timestamp": "2026-07-27T00:00:39.898Z", "date_only": false, "value": "2026-07-27T00:00:39.898812Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/3465", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "5352e332-fa88-4444-99d6-00488bea0c8e", "url": "https://t.me/EchelonEyes/3465"}, {"timestamp": "2026-07-27T00:00:48.887Z", "date_only": false, "value": "2026-07-27T00:00:48.887865Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2640", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "7882a607-6609-4f70-bdcc-c8fdc35e60a6", "url": "https://t.me/EchelonEyes/2640"}, {"timestamp": "2026-07-27T00:00:49.770Z", "date_only": false, "value": "2026-07-27T00:00:49.770906Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2556", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "4ca9978e-c636-4b64-a321-71f1ba8e008e", "url": "https://t.me/EchelonEyes/2556"}, {"timestamp": "2026-07-27T00:00:55.660Z", "date_only": false, "value": "2026-07-27T00:00:55.660056Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2167", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "9ebefda4-d28c-45c8-b95d-e2f0eb070bdd", "url": "https://t.me/EchelonEyes/2167"}, {"timestamp": "2026-07-27T00:01:26.826Z", "date_only": false, "value": "2026-07-27T00:01:26.826270Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/2086", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "c485ee56-94da-435c-9bc5-e486ef0fe54d", "url": "https://t.me/Positive_Technologies/2086"}, {"timestamp": "2026-07-28T00:00:32.321Z", "date_only": false, "value": "2026-07-28T00:00:32.321010Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2167", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "d951ac97-119e-4bb8-8376-063afd969d63", "url": "https://t.me/EchelonEyes/2167"}, {"timestamp": "2026-07-28T00:00:38.112Z", "date_only": false, "value": "2026-07-28T00:00:38.112337Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/2556", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "e3075219-4287-4f5d-9c4f-8db05b923fe3", "url": "https://t.me/EchelonEyes/2556"}, {"timestamp": "2026-07-28T00:00:39.541Z", "date_only": false, "value": "2026-07-28T00:00:39.541924Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/2640", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "48358a2f-a4e2-41fd-ba4c-1f5b73785ea9", "url": "https://t.me/EchelonEyes/2640"}, {"timestamp": "2026-07-28T00:00:49.519Z", "date_only": false, "value": "2026-07-28T00:00:49.519431Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/3465", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "f488c0c0-3526-40c7-9e33-00865ce125f0", "url": "https://t.me/EchelonEyes/3465"}, {"timestamp": "2026-07-28T18:00:06.344Z", "date_only": false, "value": "2026-07-28T18:00:06.344616Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Positive_Technologies/2086", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "55a200fa-bf0e-4553-a4a0-05757a350e5c", "url": "https://t.me/Positive_Technologies/2086"}, {"timestamp": "2026-07-29T00:00:29.742Z", "date_only": false, "value": "2026-07-29T00:00:29.742195Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Positive_Technologies/2086", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "52399140-4a61-4576-b034-c244b1b08fa0", "url": "https://t.me/Positive_Technologies/2086"}, {"timestamp": "2026-07-29T12:02:19.761Z", "date_only": false, "value": "2026-07-29T12:02:19.761971Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4203", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "694e7917-30b3-41c3-bad1-f35b362ff2b5", "url": "https://t.me/reverseame/4203"}, {"timestamp": "2026-07-30T00:02:23.304Z", "date_only": false, "value": "2026-07-30T00:02:23.304182Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4203", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "d99fb572-08bc-4618-b6a6-e3632eba57ce", "url": "https://t.me/reverseame/4203"}, {"timestamp": "2026-08-02T09:00:04.381Z", "date_only": false, "value": "2026-08-02T09:00:04.381715Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4203", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "abe6b704-bad1-4302-9746-fa1293ca9185", "url": "https://t.me/reverseame/4203"}, {"timestamp": "2026-08-03T02:07:15.882Z", "date_only": false, "value": "2026-08-03T02:07:15.882526Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4203", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "1f6b1316-8a31-43f6-b6f2-cb91b44d0dad", "url": "https://t.me/reverseame/4203"}, {"timestamp": "2026-09-01T17:00:06.686Z", "date_only": false, "value": "2026-09-01T17:00:06.686063Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Hackme_news/911", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "3b40be6a-ee70-425a-b6a3-81f2e23853da", "url": "https://t.me/Hackme_news/911"}, {"timestamp": "2026-09-01T20:00:42.870Z", "date_only": false, "value": "2026-09-01T20:00:42.870597Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/126604", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "c68793d8-a612-4d9a-9881-807218333412", "url": "https://t.me/hacking_Attack/126604"}, {"timestamp": "2026-09-01T20:00:42.951Z", "date_only": false, "value": "2026-09-01T20:00:42.951136Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/126451", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "1ad68cce-041c-4ef8-bdfe-77ba7c964173", "url": "https://t.me/hacking_Attack/126451"}, {"timestamp": "2026-09-01T20:00:43.214Z", "date_only": false, "value": "2026-09-01T20:00:43.214531Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/126442", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "4e957c13-dd62-4690-872b-45fa719899be", "url": "https://t.me/hacking_Attack/126442"}, {"timestamp": "2026-09-01T20:00:43.266Z", "date_only": false, "value": "2026-09-01T20:00:43.266519Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/126449", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "73ca7365-9bce-4a67-9fa1-0dc3322e622c", "url": "https://t.me/hacking_Attack/126449"}, {"timestamp": "2026-09-04T01:00:04.812Z", "date_only": false, "value": "2026-09-04T01:00:04.812431Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/126449", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "6dce15d3-0360-46c6-a548-2019e338f31a", "url": "https://t.me/hacking_Attack/126449"}, {"timestamp": "2026-09-04T01:00:05.170Z", "date_only": false, "value": "2026-09-04T01:00:05.170362Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/126451", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "05b7c572-59d1-4929-b6b4-eab7f9db3de3", "url": "https://t.me/hacking_Attack/126451"}, {"timestamp": "2026-09-08T00:00:07.214Z", "date_only": false, "value": "2026-09-08T00:00:07.214455Z", "kind": "sighting", "label": "Seen", "source": "Telegram/B-15478wwQOjMOaoaVA0h8pku4eXhSRPXQWjKT1NHNCbCU8", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "9802718a-a131-4692-93c4-40036d55d44c"}, {"timestamp": "2026-09-08T22:00:05.017Z", "date_only": false, "value": "2026-09-08T22:00:05.017747Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Hackme_news/911", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "cdba90a0-d7d4-498b-ae72-191aab58136b", "url": "https://t.me/Hackme_news/911"}, {"timestamp": "2026-09-09T00:00:49.067Z", "date_only": false, "value": "2026-09-09T00:00:49.067743Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/B-15478wwQOjMOaoaVA0h8pku4eXhSRPXQWjKT1NHNCbCU8", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "8153fe95-9f2c-427b-a33e-04a85b5732bc"}]}