Google accuses Spanish spyware company of ties to zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-42298 | Microsoft Defender Remote Code Execution Vulnerability | 7.8 | 6% | ||
| CVE-2022-26485 | Use-After-Free in Mozilla Firefox XSLT Processing Exploited in the Wild | 8.8 | 14% | KEVPoC | KEV |
From the original article
4 min read at therecord.media
A Spanish commercial spyware company is likely tied to an exploitation framework known to take advantage of vulnerabilities in Chrome, Firefox and Microsoft Defender, according to new research. Google’s Threat Analysis Group said the Heliconia framework – which “provides all the tools necessary to deploy a payload to a target device” – is likely linked to Variston IT, a company based in Barcelona.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.