Denim Tsunami

Reports per quarter

CVEs named in reports

• CVE-2015-1644
• CVE-2021-28550 KEV
• CVE-2021-31199 KEV
• CVE-2021-31201 KEV
• CVE-2021-35247 KEV
• CVE-2021-36948 KEV
• CVE-2022-0609 KEV
• CVE-2022-1040 KEV
• CVE-2022-20821 KEV
• CVE-2022-2204
• CVE-2022-22047 KEV
• CVE-2022-2294 KEV ransomware

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 20 March 2023

   Move, Patch, Get Out the Way- 2022 Zero-Day Exploitation Continues at an Elevated Pace

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Move, Patch, Get Out the Way- 2022 Zero-Day Exploitation Continues at an Elevated Pace

2. 23 January 2023

   Zero Day Initiative — Activation Context Cache Poisoning: Exploiting CSRSS for Privilege Escalation

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Zero Day Initiative — Activation Context Cache Poisoning: Exploiting CSRSS for Privilege Escalation

3. 2 August 2022

   PowerPoint Presentation

   file creation date fromORKL

   The original link failed its last check. Original publisher Detailsfor PowerPoint Presentation

4. 28 July 2022

   Threats of Commercialized Malware: Knotweed

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Threats of Commercialized Malware: Knotweed

5. 27 July 2022

   Untangling KNOTWEED- European private-sector offensive actor using 0-day exploits

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Untangling KNOTWEED- European private-sector offensive actor using 0-day exploits

6. 27 July 2022

   Untangling KNOTWEED: European private-sector offensive actor using 0-day exploits | Microsoft Security Blog

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Untangling KNOTWEED: European private-sector offensive actor using 0-day exploits | Microsoft Security Blog

7. 17 December 2021

   Wir enthüllen den Staatstrojaner „Subzero“ aus Österreich

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Wir enthüllen den Staatstrojaner „Subzero“ aus Österreich

8. 17 December 2021

   DSIRF: Wir enthüllen den Staatstrojaner „Subzero“ aus Österreich

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor DSIRF: Wir enthüllen den Staatstrojaner „Subzero“ aus Österreich

9. 17 December 2021

   2018-08-28_DSIRF_Company-Profile-Gov.redacted.pdf

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor 2018-08-28_DSIRF_Company-Profile-Gov.redacted.pdf

10. 19 November 2021

    Wirecard: Im Rätsel um Spionage-Software führt die Spur in den Kreml

    Malpedia library date fromORKL

    Archived copy on ORKL Detailsfor Wirecard: Im Rätsel um Spionage-Software führt die Spur in den Kreml

Newest first. Details opens the report in Explore.