/
initial_access_vector:exploit_public_facing × victim_sectors:"managed service providers" × limpar

Resultados

2 casos · pág. 1/1

thehackernews.com · high

CL-STA-0954 exploits FortiOS CVE-2025-61624 to deploy memory-resident ARM64 implant PEERSTITCH after FortiJump breach

Palo Alto Networks Unit 42 reports that a suspected advanced actor tracked as CL-STA-0954 (aka UNC5820) deployed a previously unreported memory-resident ARM64 implant, PEERSTITCH, on Fortinet FortiGate firewalls. The group exploited the FortiOS path traversal flaw CVE-2025-61624 for the final stage. The intrusion hit a telecommunications …

CVE-2025-61624 CVE-2024-47575 CVE-2024-26009 CL-STA-0954 UNC5820 telecommunications managed service providers
gbhackers.com · exploit público critical

INC and The Gentlemen ransomware affiliates leak AI-assisted intrusion ops: 8,257 Claude messages, 46 INC encryptor builds, 62 victims

SOCRadar's Threat Research Unit (STRU) found open directories on 45.227.254.43 in late September 2026. They led to six more adversary servers tied to INC Ransom and The Gentlemen affiliates. The servers held 8,257 AI messages across 133 sessions, source code, stolen credentials, victim workspaces and 46 victim-specific INC encryptor build…

CVE-2026-35616 CVE-2024-57727 CVE-2026-41940 INC Ransom The Gentlemen managed service providers finance