/
attack_type:zero_day_exploitation × victim_sectors:telecommunications × limpar

Resultados

3 casos · pág. 1/1

unit42.paloaltonetworks.com · · 2 fontes · 2 atualizações high

CL-STA-0954 (UNC5820) chains FortiJump and CVE-2025-61624 to deploy memory-resident PEERSTITCH on FortiGate in telecom MSP intrusion

Unit 42 detailed a multi-stage intrusion in September 2024 against a telecommunications managed service provider, tracked as CL-STA-0954 (aka UNC5820). The attackers gained initial access by exploiting CVE-2024-47575 (FortiJump) on a central FortiManager and exfiltrated an archive with running configurations, credentials and private keys …

CVE-2024-47575 CVE-2025-61624 CVE-2024-26008 UNC5820 CL-STA-0954 telecommunications
sentinelone.com · high

Weekly CTI roundup: Bitget $387M DPRK-linked heist, Pentagon DMDC breach of 3M, KillSec takedown, ex-military cybercrime sentences

This SentinelOne weekly roundup covers law enforcement wins and two major breaches. A federal court sentenced former U.S. Army soldier Cameron John Wagenius to 70 months for attacks on technology and telecom firms, and former U.S. Air Force members Chijioke Timothy Odimegwu and Harafat Mogaji received a combined 189 months for business em…

KillSec ShinyHunters cryptocurrency government
krebsonsecurity.com · critical

ShinyHunters Suspect Arrested in Netherlands as Group Mass-Exploits Oracle PeopleSoft CVE-2026-35273 and Breaches FBI Jobs Site

Dutch authorities arrested a 24-year-old, reportedly Pepijn van der Stap (alias "Umbreon"), around Sept. 16, 2026 on suspicion of aiding data thefts and extortions by ShinyHunters. Van der Stap was previously convicted in 2023 for data theft and extortion. Days after the arrest, remaining ShinyHunters members escalated, breaching the FBI …

CVE-2026-35273 ShinyHunters ScatteredLapsussHunters government law enforcement