Investigating Ephemeral Supply Chain Tampering
UNC7017 briefly hijacked AOMEI updates to deliver CROSSROAD and SHINYROAD malware.
82
- Mentions · 7d0
- Mentions · 30d1
- All mentions4
- First seenSep 23, 2026
- Last mentioned27d ago
Timeline
4 articles · newest firstManageEngine RCE Flaw Enables SYSTEM Code Execution From Windows Login Screen
Critical RCE flaw in ManageEngine ADSelfService Plus allows unauthenticated SYSTEM-level code execution from the Windows logon screen, requiring physical access.
80
Why security belongs in the network
Sponsored content advocates for embedding security directly into network infrastructure to improve agility and zero-trust enforcement.
15
Critical ManageEngine Flaw Lets Attackers Gain SYSTEM Access Through Windows Login Screen
Critical CVE-2026-74849 in ManageEngine ADSelfService Plus lets unauthenticated attackers execute SYSTEM code via the Windows login screen.
65
Related CVEs
by mentions- Unauthenticated OS Command Injection RCE in ManageEngine ADSelfService Plus GINA Client
Appears with
- ManageEngineorganization · 4
- ADSelfService Plusproduct · 2
- ManageEnginevendor · 1
- AOMEI Technologyvendor · 1
- Mandiantorganization · 1
- AOMEI Technologyvictim · 1
- AOMEI Backupperproduct · 1
- AnyViewerproduct · 1
- Google Threat Intelligence Grouporganization · 1
- CROSSROADmalware · 1
- UNC7017threat actor · 1
- SHINYROADmalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.