Vulnerabilitymedium

Thailand's Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant Staged

Security Affairsby @securityaffairsJul 24, 2026 · 12:10 UTC (Jul 24, 2026)4 min read4 · 1 read

Read at securityaffairs.com

Analyze CVE-2021-4034 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-4034 CVE-2021-3156 CVE-2017-7269

Tags: cve-2017-7269 cve-2021-3156 cve-2021-4034 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-7269	Buffer Overflow in Microsoft IIS 6.0 via WebDAV PROPFIND Header	9.8	100%	KEVPoC ×5	Mar 27, 2017 KEV Nov 3, 2021
CVE-2021-3156	Heap-Based Buffer Overflow in Sudo Enables Local Privilege Escalation (CVE-2021-3156)	7.8	100%	KEVPoC ×12	Jan 26, 2021 KEV Apr 6, 2022
CVE-2021-4034	Out-of-Bounds Read/Write Local Privilege Escalation in polkit pkexec (PwnKit)	7.8	95%	KEVRansomwarePoC ×4	Jan 28, 2022 KEV Jun 27, 2022

From the original article

4 min read at securityaffairs.com

Hunt. io uncovered a cyber-espionage attack on Thailand’s Finance Ministry using Hermes AI agent and Hades malware for reconnaissance and persistence. Researchers at Hunt.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.