Threat actorhigh

Iranian Nation-State Actors Employ Password Spray Attacks Targeting Multiple Sectors

The Hacker Newsby @TheHackersNewsSep 15, 2023 · 00:00 UTC (Sep 15, 2023)2 min read3 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-26134 CVE-2022-47966

Tags: cve-2022-26134 cve-2022-47966 threat-actor

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-26134	Unauthenticated OGNL Injection RCE in Atlassian Confluence Server/Data Center	9.8	100%	KEVRansomwarePoC ×2	Jun 3, 2022 KEV Jun 2, 2022
CVE-2022-47966	Unauthenticated SAML RCE in Zoho ManageEngine On-Premise Products	9.8	100%	KEVRansomwarePoC ×6	Jan 18, 2023 KEV Jan 23, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Sep 15, 2023 Cyber Attack / Password Security Iranian nation-state actors have been conducting password spray attacks against thousands of organizations globally between February and July 2023, new findings from Microsoft reveal.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.