countries_code:US × victim_sectors:telecommunications × latest_source_host:securityweek.com × limpar

Resultados

2 casos · pág. 1/1

securityweek.com · há 1d high

UNC7017 Compromises AOMEI Backupper Update Channel in Short-Burst Supply Chain Attacks Delivering CrossRoad and ShinyRoad

Between April and July 2026, the threat actor UNC7017 tampered with the AOMEI Backupper update infrastructure several times to deliver the CrossRoad downloader and the ShinyRoad modular backdoor. Each tampering window lasted only five to ten minutes before reverting to authentic files. This made the campaign hard to detect and suggests it…

UNC7017 higher education it services

securityweek.com · há 1d medium

MITRE ATT&CK v20 adds AI abuse, MFA bypass, Minnesota water utility PLC attacks and new threat actor entries

MITRE released version 20 of its ATT&CK framework, expanding coverage of recent adversary tradecraft across the Enterprise, ICS and Mobile domains. Enterprise gains nine techniques and sub-techniques, including two prompt injection techniques (direct and indirect), abuse of an organization's own AI agents for data theft, poisoning of web …

Nimbus Manticore Salt Typhoon water government