/
initial_access_vector:brute_force × limpar

Resultados

3 casos · pág. 1/1

cisa.gov · high

Pro-Russia hacktivists (CARR, Z-Pentest, NoName057(16), Sector16) compromise internet-exposed VNC HMIs in critical infrastructure OT

A joint advisory (AA25-343A) from FBI, CISA, NSA and some 18 other US, European, Five Eyes and Czech agencies warns that pro-Russia hacktivist groups are conducting opportunistic, low-sophistication attacks on critical infrastructure OT. The groups named are Cyber Army of Russia Reborn (CARR), Z-Pentest, NoName057(16) and Sector16. They e…

Cyber Army of Russia Reborn Z-Pentest water and wastewater food and agriculture
cisa.gov · high

CISA advisory links Flax Typhoon-style actors to Integrity Tech, detailing XSS, SoftEther persistence and mass email theft in Southeast Asia

A joint advisory (AA26-281A) attributes China-based malicious cyber activity to Integrity Technology Group (Integrity Tech), a for-profit company with links to the Chinese government. The company builds and sells tools, hosts infrastructure and compromises networks worldwide. The actors' TTPs are consistent with Flax Typhoon, Ethereal Pan…

Flax Typhoon Ethereal Panda government law enforcement
cisa.gov · high

CISA and partners publish #StopRansomware advisory on SafePay ransomware: 600+ victims, VPN and edge-device exploitation

A joint StopRansomware advisory (AA26-293A) from the FBI, CISA, USSS, Germany's Landeskriminalamt Rheinland-Pfalz, the UK's National Crime Agency and the North West Regional Organised Crime Unit details SafePay ransomware activity observed through August 2026. SafePay has been highly active since August 2024 and was among the most active …

CVE-2020-3259 CVE-2023-20269 CVE-2023-27532 SafePay critical infrastructure government