/
ttps_attack:T1547.001 × latest_source_host:gbhackers.com × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · · 4 fontes · 4 atualizações high

Siemens Software Center DLL side-loading flaw CVE-2026-110936 exploited in Romulus ClickFix malware campaign

Siemens has confirmed that attackers are actively exploiting CVE-2026-110936 (CVSS v4 8.4), a DLL search-path/side-loading flaw (CWE-427) in Siemens Software Center, to deliver malware. Attackers bundle a genuine, validly signed copy of the application (version 3.5.8.7) with malicious DLLs that it loads from its own folder. The activity i…

CVE-2026-110936
gbhackers.com · high

Gentlemen ransomware uses vulnerable Lenovo and Safetica drivers (BYOVD) to kill security software before encryption

Acronis Threat Research Unit found that the Gentlemen ransomware operation is using the BYOVD (bring your own vulnerable driver) technique with legitimate Lenovo and Safetica kernel drivers to terminate endpoint security software before encrypting files. Two custom dropper samples were recovered from a recent incident. They install the dr…

CVE-2025-70795 Gentlemen ArmCorp manufacturing technology