Threat actor
ENERGETIC BEAR
Tracked by CyberSIXT since 13 Jul · last activity 23 Oct
- CVEs linked · all time
- 3
- in CISA KEV · all time
- 3
- articles · all time
- 10
9 articles since 11 Sep.
Show as table
| Day (UTC) | Articles |
|---|---|
| Thu 15 Oct | 1 |
| Fri 16 Oct | 6 |
| Wed 21 Oct | 1 |
| Fri 23 Oct | 1 |
CVEs
3 CVEsCVE-2026-76519Cisco Secure Email Gateway Relative Path Traversal VulnerabilityCVSS9.8CriticalExploited2.1%EPSS9articles
CVE-2026-102764BeyondTrust Remote Support Authentication Bypass by Spoofing VulnerabilityCVSS9.3CriticalExploited1.2%EPSS12articles
CVE-2026-104935Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityCVSS8.6HighExploited26%EPSS15articles
- Sophos Uncovers BRONZE SANDCASTLE Using Sandboxie to Load MalwareSecurityOnline
- China Aligned Bronze Sandcastle Uses DLL Sideloading to Spy on OrganisationsThe Hacker News
- China-linked hackers exploited BeyondTrust zero-day to steal credentialsDark Reading
- BeyondTrust Patches Zero-Day Flaw Used to Gain Root AccessSOCRadar
- Chinese APT exploited BeyondTrust Remote Support flaw to steal filesSecurityWeek
- China-Linked Hackers Exploited BeyondTrust Flaw to Install Root BackdoorInfosecurity
- BeyondTrust Patches Remote Access Flaw Exploited to Steal CredentialsSecurityOnline
- China Linked Hackers Exploited BeyondTrust Zero Day to Steal CredentialsThe Hacker News
- China Linked ARMORY CASTLE Exploited BeyondTrust Flaw as a Zero DayGoogle Cloud
- UK, EU sanction Russian hackers using weak SNMP router passwordsInfosecurity · first in our coverage