/
ttps_attack:T1114 × victim_sectors:manufacturing × limpar

Resultados

2 casos · pág. 1/1

securityweek.com · · 11 fontes · 20 atualizações critical

Storm-0940 abuses ARTEX AI agents and stolen ConnectWise Cloud Backup (SkyKick) app credentials against 2,250+ Microsoft 365 tenants

Microsoft attributes the supply-chain compromise of ConnectWise Cloud Backup (formerly SkyKick) to Storm-0940, a China-linked actor active since at least 2021. The group has used the AI penetration-testing framework ARTEX since at least September 2026 against hundreds of organizations (cyberscoop.com, thehackernews.com, securityweek.com).…

UNC7017 Storm-0940 managed service providers policy
cisa.gov · high

CISA and FBI #StopRansomware advisory on Gunra, a Conti-derived RaaS exploiting Fortinet and VPN flaws for double extortion

The FBI, CISA, DC3, NSA, USSS and the Republic of Korea's KNPA issued joint advisory AA26-222A on Gunra ransomware. Gunra appeared in April 2025 as a double-extortion variant derived from the leaked Conti source code. It launched a structured RaaS affiliate program in January 2026, also operating under the alias Golden Community, and recr…

CVE-2024-55591 CVE-2025-24472 Gunra Golden Community healthcare financial services