Security AffairsDec 22, 2025criticalIranian threat actors exploit MS MSHTML bug to steal Google and Instagram credentials4 min readcve-2021-40444threat-actor2
Security AffairsSep 16, 2024criticalRecently patched Windows flaw CVE-2024-43461 was actively exploited as a zeroExploited3 min readcve-2024-43461cve-2024-381127
Kaspersky SecurelistAug 21, 2024criticalAnalyzing the vulnerability landscape in Q2 202412 min readcve-2018-0802cve-2017-118824
The Hacker NewsJul 21, 2024criticalVoid Banshee APT Exploits Microsoft MHTML Flaw to Spread Atlantida Stealer3 min readcve-2024-38112cve-2021-404442
Security AffairsJul 17, 2024criticalVoid Banshee exploits CVE-2024-38112 zeroExploited3 min readcve-2024-38112cve-2021-404443
Security AffairsJul 7, 2024criticalSecurity Affairs newsletter Round 479 by Pierluigi Paganini2 min readcve-2021-40444cve-2024-07693
The Hacker NewsJul 3, 2024highMicrosoft MSHTML Flaw Exploited to Deliver MerkSpy Spyware Tool2 min readcve-2021-40444malware3
Security AffairsDec 5, 2023criticalRussia-linked APT28 group spotted exploiting Outlook flaw to hijack MS Exchange accounts3 min readcve-2023-23397cve-2023-388311
Infosecurity MagazineDec 5, 2023criticalRussian APT28 Exploits Outlook Bug to Access Exchangecve-2023-23397cve-2023-388313
Help Net SecurityDec 5, 2023criticalRussian hackers use old Outlook vulnerability to target Polish orgs (CVE-2023-23397)3 min readcve-2023-23397cve-2023-388314
Help Net SecurityNov 14, 2023highSeptember 2021 Patch Tuesday forecast: It's new operating system seasonExploited3 min readcve-2021-40444vulnerability2
The Hacker NewsJul 17, 2023highCybercriminals Exploit Microsoft Word Vulnerabilities to Deploy LokiBot Malware2 min readcve-2021-40444cve-2022-301902
Infosecurity MagazineJul 14, 2023LokiBot Malware Targets Windows Users in Office Document Attacks2 min readcve-2021-40444cve-2022-301903
The RecordDec 19, 2022criticalSuspected Iranian hacker looks to steal Gmail, Instagram credentialscve-2021-40444vulnerability2
The RecordDec 14, 2022criticalRussian missile fuel maker targeted with recent Office zero2 min readcve-2021-40444ransomware2
The RecordDec 13, 2022criticalMicrosoft patches Office zeroExploited2 min readcve-2021-40444cve-2021-369683
The Hacker NewsOct 2, 2022highHackers Using PowerPoint Mouseover Trick to Infect Systems with Malware2 min readcve-2021-40444malware3
The Hacker NewsJul 21, 2022criticalGoogle Uncovers 'Initial Access Broker' Working with Conti Ransomware Gang3 min readcve-2021-40444ransomware2
Security AffairsJul 3, 2022critical55% Actively Exploited Zero-Day Flaws In 2022 Are Variants Of Previous BugsExploited3 min readcve-2022-30190cve-2021-404443
Kaspersky SecurelistJun 6, 2022criticalCVE-2022-30190 (Follina) vulnerability in MSDT: description and counteractionExploited3 min readcve-2022-30190cve-2017-01994
Help Net SecurityJun 3, 2022highAttackers are leveraging Follina. What can you do?Exploited2 min readcve-2022-30190cve-2021-404441
Help Net SecurityMay 31, 2022criticalZero-day bug exploited by attackers via macro-less Office documents (CVE-2022-30190)Exploited5 min readcve-2022-30190cve-2021-404442