/
ttps_attack:T1135 × limpar

Resultados

3 casos · pág. 1/1

unit42.paloaltonetworks.com · medium

Opportunistic Intruder Abuses Third-Party-Managed VPN Gateway Without MFA to Probe European Bank; WSUS RCE Attempt Blocked by Cortex XDR

Unit 42 investigated a months-long intrusion against a European bank, which began with unauthorized VPN-based access through a third-party-managed external gateway appliance that did not enforce strict authentication. Using compromised credentials, the attacker ran noisy, high-volume internal reconnaissance and brute-force campaigns again…

securityaffairs.com · high

SafePay ransomware has hit 600+ organizations since 2024, according to joint FBI/CISA advisory

CISA, the FBI, the US Secret Service, Germany's Landeskriminalamt Rheinland-Pfalz and two UK law enforcement agencies published a joint advisory on the SafePay ransomware group. The group has compromised at least 600 organizations across critical infrastructure sectors in North America, South America, Europe and Australia since August 202…

hipaajournal.com · · 5 fontes · 5 atualizações critical

CISA and partners warn SafePay ransomware has hit 600+ organizations since Aug 2024, via edge-device exploits and backup destruction

A joint StopRansomware advisory (AA26-293A) from CISA, the FBI, the USSS, Germany's Landeskriminalamt Rheinland-Pfalz, the UK's National Crime Agency and the North West Regional Organised Crime Unit details SafePay ransomware activity observed through August 2026 (cisa.gov). The group has been active since August 2024 and has compromised …