3 casos · pág. 1/1
Indian certification authority eMudhra has publicly responded to the disclosure that private keys behind some of its root and issuing CAs were trivially weak. One key was reportedly the number "4" and others were short, easily guessed numbers. The company says a flaw in a Key Generation Ceremony (KGC) held on April 30, 2025 produced a sec…
Unit 42 detailed a multi-stage intrusion in September 2024 against a telecommunications managed service provider, tracked as CL-STA-0954 (aka UNC5820). The attackers gained initial access by exploiting CVE-2024-47575 (FortiJump) on a central FortiManager and exfiltrated an archive with running configurations, credentials and private keys …
Palo Alto Networks Unit 42 reports that a suspected advanced actor tracked as CL-STA-0954 (aka UNC5820) deployed a previously unreported memory-resident ARM64 implant, PEERSTITCH, on Fortinet FortiGate firewalls. The group exploited the FortiOS path traversal flaw CVE-2025-61624 for the final stage. The intrusion hit a telecommunications …
