attack_type:web_shell × has_exploit:true × victim_sectors:government × limpar

Resultados

2 casos · pág. 1/1

unit42.paloaltonetworks.com · há 1d exploit público high

CL-UNK-1211 uses AI-generated payloads and SysGoRAT RAT to spy on government Linux servers

Unit 42 reports a campaign, tracked as CL-UNK-1211, that targeted government entities and state-affiliated infrastructure between October 2025 and April 2026. The cluster has not been attributed to a nation-state or to cybercrime. The attackers focused on Linux servers for reconnaissance, persistence and intelligence collection, including…

CVE-2025-55182 CVE-2021-4034 CL-UNK-1211 government

thehackernews.com · há 1d exploit público critical

Weekly Recap: BeyondTrust 0-day by Armory Castle, Ledger supply-chain implants, French refrigeration attacks, ConnectWise breach

This weekly recap covers several concurrent incidents. ConnectWise disabled seven application identities and suspended Cloud Backup after unknown actors abused them to compromise Microsoft 365 tenants. China-nexus Armory Castle (UNC5221 / Warp Panda) exploited BeyondTrust Remote Support flaw CVE-2026-102764 (CVSS 9.3) as a zero-day in lat…

CVE-2026-102764 CVE-2026-110447 CVE-2021-36260 Armory Castle UNC5221 retail technology