/
ttps_attack:T1068 × latest_source_host:securelist.com × limpar

Resultados

2 casos · pág. 1/1

securelist.com · exploit público high

Kaspersky Q2 2026 vulnerability report: record CVE volume, Linux Dirty Frag LPEs, Windows zero-day exploit leaks and APT use of AI tool flaws

Kaspersky's Q2 2026 vulnerability landscape report records an unprecedented number of registered CVEs, including critical ones. It attributes the surge mainly to AI-assisted vulnerability discovery and AI-generated code. Researchers are also publishing exploits for unpatched flaws more often. One example is Nightmare Eclipse (Chaotic Ecli…

CVE-2026-25253 CVE-2026-41948 CVE-2026-45386
securelist.com · high

PAYLOAD extortion group abuses domain-root GPO to disrupt a Middle East manufacturer without deploying a Windows encryptor

In April 2026, Kaspersky GERT responded to an incident at a Middle East manufacturing organization where the actor gained domain admin-equivalent control of Active Directory. The actor created and linked a malicious GPO named PAYLOAD at the domain root. It pushed ransom notes, a wallpaper and lock screen, a logon banner and a local admini…

manufacturing