/
data_types_exposed:network_information × victim_sectors:telecommunications × limpar

Resultados

2 casos · pág. 1/1

unit42.paloaltonetworks.com · · 2 fontes · 2 atualizações high

CL-STA-0954 (UNC5820) chains FortiJump and CVE-2025-61624 to deploy memory-resident PEERSTITCH on FortiGate in telecom MSP intrusion

Unit 42 detailed a multi-stage intrusion in September 2024 against a telecommunications managed service provider, tracked as CL-STA-0954 (aka UNC5820). The attackers gained initial access by exploiting CVE-2024-47575 (FortiJump) on a central FortiManager and exfiltrated an archive with running configurations, credentials and private keys …

CVE-2024-47575 CVE-2025-61624 CVE-2024-26008 UNC5820 CL-STA-0954 telecommunications
greynoise.io · critical

Chinese-speaking actor tied to Red Heron exploits WordPress wp2shell, ZyXEL GS1900 CVE-2026-7273 and Ubiquiti; steals 18,000+ government records

GreyNoise reports that a single malicious cyber actor, tracked since 7 May 2026, is a suspected Chinese speaker working in UTC+8 and is the same as or related to Red Heron (reported by Acronis), based on the shared C2 domain, malware family, Gitea exploitation and other TTPs. The actor exploited the wp2shell WordPress chain (CVE-2026-6303…

CVE-2026-7273 CVE-2026-34908 CVE-2026-34909 Red Heron government law enforcement