/
initial_access_vector:exploit_public_facing × criticity:critical × victim_sectors:manufacturing × limpar

Resultados

2 casos · pág. 1/1

greynoise.io · critical

Chinese-speaking actor tied to Red Heron exploits WordPress wp2shell, ZyXEL GS1900 CVE-2026-7273 and Ubiquiti; steals 18,000+ government records

GreyNoise reports that a single malicious cyber actor, tracked since 7 May 2026, is a suspected Chinese speaker working in UTC+8 and is the same as or related to Red Heron (reported by Acronis), based on the shared C2 domain, malware family, Gitea exploitation and other TTPs. The actor exploited the wp2shell WordPress chain (CVE-2026-6303…

CVE-2026-7273 CVE-2026-34908 CVE-2026-34909 Red Heron government law enforcement
theregister.com · · 3 fontes · 3 atualizações critical

Qilin, INC and Settra ransomware crews exploit PAN-OS GlobalProtect bug CVE-2026-0257 since June, pivoting to ESXi

Multiple ransomware groups, including Qilin and INC, are exploiting CVE-2026-0257, an authentication bypass in Palo Alto Networks PAN-OS GlobalProtect portals and gateways. Unit 42 has been investigating intrusions since early June across many sectors, including finance, healthcare and manufacturing. The flaw was patched on May 13 and ini…

CVE-2026-0257 CVE-2023-27532 Spikey Scorpius Qilin healthcare education