/
initial_access_vector:exploit_public_facing × criticity:high × victim_sectors:defense × limpar

Resultados

4 casos · pág. 1/1

cisa.gov · high

LAUNDRY BEAR exploits Zimbra CVE-2025-66376 (zero-day since July 2025) to exfiltrate email from Western organizations

A multinational advisory (CISA, NSA, FBI, AIVD, MIVD, NCSC-UK and others) warns that the Russian state-supported APT LAUNDRY BEAR (aka Void Blizzard, TA488) has compromised Western government, defense industrial base and NGO organizations running Zimbra Collaboration Suite (ZCS) since at least July 2025. The campaign uses a view-based XSS…

sentinelone.com · high

Weekly CTI roundup: Bitget $387M DPRK-linked heist, Pentagon DMDC breach of 3M, KillSec takedown, ex-military cybercrime sentences

This SentinelOne weekly roundup covers law enforcement wins and two major breaches. A federal court sentenced former U.S. Army soldier Cameron John Wagenius to 70 months for attacks on technology and telecom firms, and former U.S. Air Force members Chijioke Timothy Odimegwu and Harafat Mogaji received a combined 189 months for business em…

gbhackers.com · · 3 fontes · 3 atualizações high

APT28 (Swallowtail) breaches NATO naval shipbuilder, aircraft engine maker and law enforcement agency with HOOKEDGE backdoor and new ld.exe loader

Symantec reports that the Russia-linked APT28 (aka Swallowtail, Fancy Bear, Forest Blizzard, BlueDelta), which the U.S. government links to the GRU, targeted organizations in two NATO member states. Victims were a naval shipbuilder, a manufacturer of military aircraft engines and a law enforcement agency (thehackernews.com, cyberscoop.com…

securityweek.com · high

China-linked Storm-0940 uses AI pentest framework Artex to automate ConnectWise-related intrusions into hundreds of Microsoft 365 tenants

Microsoft reports that the China-linked APT Storm-0940 (active since at least 2021) used the open source AI penetration testing framework Artex to automate a mid-October 2026 campaign against ConnectWise customers. ConnectWise suspended several services in response, including Cloud Backup, SaaS Security and Cloud Management. Huntress obse…