Handala Hack · vendor

Microsoft

1 CVE · 1 in CISA KEV

Every dot is a CVE a source says this actor exploits; each name says which source. The named ones are the most at risk.

Connect AI

Open Handala Hack's actor page

exploited in the wild: 1

Every one of the 1 is a mark on the map. Named now: 1 to 1, most at risk first.

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote…CVE-2019-0604Microsoft · CVSS 9.8 · 100% likely · ATT&CK C0038; ATT&CK T1190
CWE-20 Microsoft Threat Group-3390 2 bounty reports

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: MITRE ATT&CK (© The MITRE Corporation, reproduced and distributed with its permission), the MISP Galaxy (CC0), and CyberSIXT's own coverage.