Ransomwarehigh

Iran

Security Affairsby @securityaffairsNov 17, 2021 · 10:08 UTC (Nov 17, 2021)3 min read3

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2018-13379 CVE-2021-26855 CVE-2021-26857 CVE-2021-26858 CVE-2021-27065

Tags: cve-2018-13379 cve-2021-26855 cve-2021-26857 cve-2021-26858 cve-2021-27065 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-13379	Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN	9.8	100%	KEVRansomware	Jun 4, 2019 KEV Nov 3, 2021
CVE-2021-26855 +3 related CVEs CVE-2021-27065 CVE-2021-26857 CVE-2021-26858	Unauthenticated SSRF/RCE in Microsoft Exchange Server (ProxyLogon)	9.1 group max	100%	KEVRansomwarePoC ×4	Mar 3, 2021 KEV Nov 3, 2021

From the original article

3 min read at securityaffairs.com

The researchers at Microsoft Threat Intelligence Center (MSTIC) are warning of increasingly sophisticated operations carried out by Iranian threat actors. The Microsoft Threat Intelligence Center (MSTIC) shared the results of their analysis on the evolution of Iran-linked threat actors at the CyberWarCon 2021 .

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.