Data breachcritical
Five Eyes agencies detail how Chinese hackers breached US infrastructure
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-27860 | Unauthenticated Arbitrary File Upload in FatPipe WARP, IPVPN, and MPVPN | 8.8 | 40% | KEVPoC | KEV |
| CVE-2021-40539 | Unauthenticated RCE via REST API auth bypass in Zoho ManageEngine ADSelfService Plus | 9.8 | 99% | KEVRansomwarePoC | KEV |
From the original article
1 min read at helpnetsecurity.com
The National Security Agency (NSA) and Five Eyes partner agencies have identified indicators of compromise associated with a People’s Republic of China (PRC) state-sponsored cyber actor dubbed Volt Typhoon, which is using living off the land techniques to target networks across US critical infrastructure. The joint cybersecurity advisory provides an overview of hunting guidance and associated best practices.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.