3 casos · pág. 1/1
CERT-FR bulletin CERTFR-2026-ACT-044 covers significant vulnerabilities for week 42 of 2026 and recalls three recent CERT-FR alerts. These are a security incident targeting remote controllers of refrigeration installations, recommendations for the secure use of XWEB supervisors, and a vulnerability in Ivanti Connect Secure (ICS) tracked a…
F5 Labs, using Efflux sensor telemetry, reports on the most exploited CVEs of April 2025 and on internet-wide scanning for SparkRAT command-and-control servers. A single actor, using three IPs in DigitalOcean ASN 14061, sent identical HTTP POST requests to the SparkRAT in-place update endpoint, each IP scanning for about 13 hours and reac…
FortiGuard Labs describes ClingSTUN, a Linux back-connect proxy backdoor that keeps persistent access and turns compromised devices into remotely controlled proxy nodes. It combines persistence, process termination, watchdog manipulation and remote command execution. It also uses legitimate public STUN servers for NAT traversal, to discov…
