Houken

Reports per quarter

CVEs named in reports

• CVE-2021-26855 KEV ransomware
• CVE-2023-46747 KEV ransomware
• CVE-2024-1709 KEV ransomware
• CVE-2024-3400 KEV ransomware
• CVE-2024-8190 KEV
• CVE-2024-8963 KEV
• CVE-2024-9379 KEV
• CVE-2024-9380 KEV
• CVE-2024-9381
• CVE-2025-31324 KEV ransomware

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 7 July 2025

   ANSSI Exposes "Houken": China-Linked APT Exploiting Ivanti CSA Zero-Days & Deploying Linux Rootkits

   Malpedia library date fromORKL

   The original link failed its last check. Original publisher Detailsfor ANSSI Exposes "Houken": China-Linked APT Exploiting Ivanti CSA Zero-Days & Deploying Linux Rootkits

2. 1 July 2025

   CERTFR-2025-CTI-009.pdf

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor CERTFR-2025-CTI-009.pdf

Newest first. Details opens the report in Explore.