/
attack_type:credential_theft × latest_source_host:sentinelone.com × limpar

Resultados

2 casos · pág. 1/1

sentinelone.com · high

APT29 CaptiveCrunch: LLMNR/DNS poisoning and captive-portal lures deliver CornFlake and ChocoShell; payloads blocked pre-execution

SentinelOne reports observing APT29 (Midnight Blizzard / Cozy Bear, Russia's SVR) running the CaptiveCrunch campaign, disclosed by Microsoft in July 2026, across multiple customer environments in three regions. The operation abuses captive-portal behaviour and forged name resolution to push fake browser updater downloads to roaming Window…

APT29 Midnight Blizzard
sentinelone.com · critical

Atlassian Data Center CVE-2026-21589 exploited within hours of PoC; BitB phishing targets AI ad portals; ShinyHunters member arrested

This SentinelOne weekly roundup (Week 41, 2026) covers law enforcement actions, a phishing campaign and an actively exploited vulnerability. The most urgent item is CVE-2026-21589, a critical (CVSS 9.3) unauthenticated arbitrary file access flaw in Atlassian Data Center products. Exploitation attempts began about two hours after a public …

CVE-2026-21589 ShinyHunters technology advertising