/
initial_access_vector:phishing × latest_source_host:sentinelone.com × victim_sectors:technology × limpar

Resultados

3 casos · pág. 1/1

sentinelone.com · critical

Atlassian Data Center CVE-2026-21589 exploited within hours of PoC; BitB phishing targets AI ad portals; ShinyHunters member arrested

This SentinelOne weekly roundup (Week 41, 2026) covers law enforcement actions, a phishing campaign and an actively exploited vulnerability. The most urgent item is CVE-2026-21589, a critical (CVSS 9.3) unauthenticated arbitrary file access flaw in Atlassian Data Center products. Exploitation attempts began about two hours after a public …

CVE-2026-21589 ShinyHunters technology advertising
sentinelone.com · exploit público critical

Weekly roundup: China-linked ARTEX agentic AI hits ConnectWise Cloud Backup; PHP2Shell patched; Interpol Serengeti III

This SentinelOne weekly roundup (Week 43, 2026) covers several separate stories. The most significant is a suspected Chinese state-aligned actor using ARTEX, a Go-based multi-agent LLM penetration testing framework, to compromise ConnectWise Cloud Backup and pivot into downstream Microsoft 365 tenants. The actor reportedly reached privile…

CVE-2026-109618 CVE-2026-109619 aerospace defense
sentinelone.com · high

Weekly CTI roundup: Ryuk access broker sentenced, TraderTraitor FLATROOF/ROOFDECK macOS backdoors, AI-agent skimming of 600K cards

This SentinelOne weekly roundup (Week 39, 2026) covers one law enforcement success and two active threat campaigns. A US court sentenced Armenian national Karen Serobovich Vardanyan ("Maneeken"/"Karl Lagerfeld"), an initial access specialist for Ryuk ransomware, to two years in prison and over $1.2 million in restitution. SentinelLABS ide…

TraderTraitor Lazarus healthcare technology