Ransomwarecritical

US Warns Critical Sectors Against North Korean Ransomware Attacks

Infosecurity Magazineby Alessandro MascellinoFeb 10, 2023 · 17:00 UTC (Feb 10, 2023)2 min read2 · 1 read

Read at infosecurity-magazine.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-20038 CVE-2022-24990

Tags: cve-2021-20038 cve-2022-24990 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-20038	Unauthenticated Stack Buffer Overflow in SonicWall SMA 100 Appliances	9.8	100%	KEVRansomwarePoC ×2	Dec 8, 2021 KEV Jan 28, 2022
CVE-2022-24990	Unauthenticated RCE via Admin Password Leak in TerraMaster TOS 4.2.29 and earlier	7.5	83%	KEVRansomwarePoC ×3	Feb 7, 2023 KEV Feb 10, 2023

From the original article

2 min read at infosecurity-magazine.com

The US Cybersecurity and Infrastructure Security Agency (CISA) issued a new Cybersecurity Advisory (CSA) on Thursday warning critical infrastructure sector entities against ongoing North Korean state-sponsored ransomware activity.

Infosecurity Magazine

By Alessandro Mascellino · infosecurity-magazine.com

Read the full article at Infosecurity Magazine

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.