/
ttps_attack:T1574.001 × criticity:high × latest_source_host:gbhackers.com × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · · 4 fontes · 4 atualizações high

Siemens Software Center DLL side-loading flaw CVE-2026-110936 exploited in Romulus ClickFix malware campaign

Siemens has confirmed that attackers are actively exploiting CVE-2026-110936 (CVSS v4 8.4), a DLL search-path/side-loading flaw (CWE-427) in Siemens Software Center, to deliver malware. Attackers bundle a genuine, validly signed copy of the application (version 3.5.8.7) with malicious DLLs that it loads from its own folder. The activity i…

CVE-2026-110936
gbhackers.com · high

UNC7017 hijacks AOMEI update infrastructure to deliver CROSSROAD downloader and SHINYROAD backdoor

A supply chain campaign tracked as UNC7017 hijacked the update infrastructure of AOMEI Technology between April and July 2026 to distribute the CROSSROAD downloader and the SHINYROAD backdoor through AOMEI Backupper and AnyViewer update workflows. The attackers tampered with server configurations only briefly, then restored legitimate con…

UNC7017 it services telecommunications