PHP RCE Attack
FortiGuard Labs has observed increased exploitation attempts targeting the new PHP vulnerability on over 25,000 unique IPS devices. The TellYouThePass ransomware gang has been leveraging CVE-2024-4577, a remote code execution …
SolarWinds Orion Attack
SolarWinds [signed] software containing a planted vulnerability released in March 2020 as a regular (trusted) software patch. The backdoor was not discovered until the FireEye breach became public 9 months …
Oracle WebLogic Server Vulnerability
Known exploited vulnerabilities in the Oracle WebLogic Server. The vulnerabilities allows an unauthenticated attacker with network to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized …
D-link Multiple Devices Attack
Multiple D-link device vulnerabilities are being actively targeted. Many of the Routers and NAS device are end-of-life D-Link devices that does not have any patches available.
Black Basta Ransomware
Post Content
Zoho ManageEngine Vulnerability
APT Actors are actively exploiting Zoho ManageEngine ServiceDesk Plus which is an IT help desk software with asset management. The exploit is tracked via CVE-2021-44077 and rated critical due to …
C-DATA Web Management System RCE Attack
FortiGuard labs observed a critical level of attack attempts in the wild targeting a 2 year old vulnerability found on C-DATA Web Management Systems.
Akira Ransomware
FortiGuard Labs continue to observe detections in the wild related to the Akira ransomware group. According to the new report by CISA it has targeted over 250 organizations since the …
PAN-OS GlobalProtect Command Injection Vulnerability
The on-going attack on PAN-OS GlobalProtect devices identified as CVE-2024-3400 allows a malicious actor to remotely exploit an unauthenticated OS Command Injection vulnerability. Once established, the attacker can further collect …