Threat Source Newsletter (April 22, 2021)
Summary: Cisco Talos reported that the U.S. National Security Agency released an advisory formally attributing the SolarWinds supply chain attack to Russian Foreign Intelligence Services (SVR) and detailing five CVEs the group is exploiting in the wild against VPN solutions, collaboration suite software and virtualization technologies. Google also issued multiple Chrome updates after researchers found zero-day vulnerabilities in its V8 engine and Blink rendering engine with exploits in the wild, and Talos highlighted new research on an actor it calls "Fajan" sending spam emails to primarily Middle Eastern targets claiming to be from Bloomberg BNA.
What's compelling: All five SVR-linked CVEs are patched, but some already have working Metasploit modules and are being widely exploited, so unpatched VPN, collaboration and virtualization systems remain exposed to a state-sponsored actor the U.S. has now named publicly.
Read the original at Cisco Talos ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026