Vulnerabilities
Mandiant ties SAWFLY web shell deployments to ARMORY CASTLE’s BeyondTrust Remote Support breach
Attackers used an unauthenticated flaw in BeyondTrust Remote Support to upload files and deploy web shells on self-hosted appliances.
CISA
Everything RedTeam Monitor has reported about CISA: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Threat actors install crypto miners via AhsayCBS flaw as CISA lists six exploited vulnerabilities
The agency added six vulnerabilities to its catalog after confirming active exploitation of backup and firewall software by threat actors.
Vulnerabilities
Attackers gain root access to Cisco SEG via unpatched email flaw
Unauthenticated attackers can execute commands as root on Cisco Secure Email Gateway appliances by sending a single malicious email with an attachment.