Vulnerabilitycritical

Chinese-Speaking Hacker Group Targets Human Rights Studies in Middle East

The Hacker Newsby @TheHackersNewsSep 5, 2024 · 16:19 UTC (Sep 5, 2024)2 min read3 · 2 reads

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-26360 CVE-2021-34473 CVE-2021-34523 CVE-2021-31207

Tags: cve-2023-26360 cve-2021-34473 cve-2021-34523 cve-2021-31207 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-31207	Security feature bypass in Microsoft Exchange Server (ProxyShell) enables webshell RCE	6.6	100%	KEVRansomwarePoC	May 11, 2021 KEV Nov 3, 2021
CVE-2021-34473 +1 related CVE CVE-2021-34523	SSRF (CWE-918) in Microsoft Exchange Server Enabling RCE (ProxyShell)	9.1 group max	100%	KEVRansomwarePoC	Jul 14, 2021 KEV Nov 3, 2021
CVE-2023-26360	Unauthenticated RCE via Improper Access Control in Adobe ColdFusion	8.6	97%	KEVPoC	Mar 23, 2023 KEV Mar 15, 2023

From the original article

2 min read at thehackernews.com

Unnamed government entities in the Middle East and Malaysia are the target of a persistent cyber campaign orchestrated by a threat actor known as Tropic Trooper since June 2023.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.