{
 "type": "bundle",
 "id": "bundle--e94f7561-bbb0-4872-b6da-6983320d894f",
 "objects": [
  {
   "type": "marking-definition",
   "spec_version": "2.1",
   "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
   "created": "2017-01-20T00:00:00.000Z",
   "definition_type": "tlp",
   "name": "TLP:WHITE",
   "definition": {
    "tlp": "white"
   }
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "SecurityStudies.info",
   "identity_class": "organization",
   "description": "Open-source security intelligence on Asia-Pacific. Incidents are detected by rules in the news unless marked curated."
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--1bc09e60-d48b-59ff-9227-e5d911f09a5f",
   "created": "2026-11-11T20:35:29.928Z",
   "modified": "2026-11-13T00:02:47.695Z",
   "name": "SonicWall SSL-VPN authentication bypass vulnerability exploited in actual attacks, multi-factor authentication also neutralized",
   "description": "Detected automatically from 1 article in 1 outlet (Dailysecu (Korean)), Nov 9, 2026. Title machine-translated from Korean. Type: exploitation. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "exploitation",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/sonicwall-ssl-vpn-authentication-bypass-vulnerability-exploited-in-act-20261109/"
    },
    {
     "source_name": "Dailysecu (Korean)",
     "url": "https://www.dailysecu.com/news/articleView.html?idxno=209394",
     "description": "소닉월 SSL-VPN 인증 우회 취약점 실제 공격에 악용, 다중인증도 무력화"
    }
   ],
   "x_securitystudies_occurred_on": "2026-11-09",
   "x_securitystudies_severity": 4,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "location",
   "id": "location--81a671e7-38c1-562b-8b65-125fadcac6b4",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "South Korea",
   "country": "KR"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--fe97fcb5-287d-56c6-a798-914b08267c23",
   "created": "2026-11-11T20:35:29.928Z",
   "modified": "2026-11-11T20:35:29.928Z",
   "relationship_type": "related-to",
   "source_ref": "incident--1bc09e60-d48b-59ff-9227-e5d911f09a5f",
   "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "vulnerability",
   "id": "vulnerability--502a9f8f-a5b4-5afc-abed-dfd1c77c5cd6",
   "created": "2026-11-12T05:15:34.500Z",
   "modified": "2026-11-12T05:15:34.500Z",
   "name": "CVE-2026-19868",
   "external_references": [
    {
     "source_name": "cve",
     "external_id": "CVE-2026-19868"
    }
   ],
   "description": "SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--fa591481-207c-519e-a125-a9c868ca1360",
   "created": "2026-11-11T20:35:29.928Z",
   "modified": "2026-11-11T20:35:29.928Z",
   "relationship_type": "related-to",
   "source_ref": "incident--1bc09e60-d48b-59ff-9227-e5d911f09a5f",
   "target_ref": "vulnerability--502a9f8f-a5b4-5afc-abed-dfd1c77c5cd6",
   "description": "vulnerability exploited"
  }
 ]
}