Automation and Vulnerability Exploitation Drive Mass Ransomware Breach
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-20269 | Unauthenticated Brute-Force VPN Access in Cisco ASA and Firepower Threat Defense | 9.1 | 27% | KEVRansomware | KEV |
| CVE-2023-27997 | Pre-Auth Heap Buffer Overflow RCE in Fortinet FortiOS/FortiProxy SSL-VPN | 9.8 | 86% | KEVRansomware | KEV |
| CVE-2023-34362 | Unauthenticated SQL Injection in Progress MOVEit Transfer | 9.8 | 100% | KEVRansomwarePoC | KEV |
| CVE-2023-46604 | Unauthenticated RCE in Apache ActiveMQ via OpenWire Deserialization | 9.8 | 100% | KEVRansomwarePoC | KEV |
| CVE-2024-21762 | Out-of-Bounds Write RCE in Fortinet FortiOS and FortiProxy | 9.8 | 85% | KEVRansomware | KEV |
| CVE-2024-40766 | Improper Access Control in SonicWall SonicOS Management (Gen 5/6/7 Firewalls) | 9.8 | 18% | KEVRansomware | KEV |
| CVE-2024-50623 | Unauthenticated RCE via Unrestricted File Upload in Cleo Harmony, VLTrader, LexiCom | 9.8 | 99% | KEVRansomware | KEV |
| CVE-2024-55591 | Unauthenticated Super-Admin Bypass in Fortinet FortiOS and FortiProxy | 9.8 | 94% | KEVRansomware | KEV |
CVE-2024-57726+2 related CVEs | Missing-Authorization Privilege Escalation in SimpleHelp Remote Support <= 5.5.7 | 9.9 group max | 66% | KEVRansomware | KEV |
From the original article
2 min read at infosecurity-magazine.com
Automated reconnaissance coupled with mass exploitation of vulnerabilities have helped ransomware-as-a-service (RaaS) groups to thrive in the past few quarters, ReliaQuest has warned. The threat intelligence firm said such tactics have empowered groups such as Qilin and Akira in Q2 2025.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.