Threat actorhigh
Apt41 actors charged for attacks on more than 100 victims globally
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-11510 | Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN | 10.0 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2019-16278 | Unauthenticated Directory Traversal RCE in Nostromo nhttpd (CVE-2019-16278) | 9.8 | 99% | KEVPoC ×3 | KEV |
| CVE-2019-1652 | Authenticated Command Injection in Cisco RV320/RV3325 Small Business Routers | 7.2 | 96% | KEVPoC ×5 | KEV |
| CVE-2019-1653 | Unauthenticated Config Disclosure in Cisco RV320/RV325 Routers | 7.5 | 100% | KEVPoC ×5 | KEV |
| CVE-2019-16920 | Command Injection in Multiple D-Link Routers Enables Full Device Compromise | 9.8 | 100% | KEVPoC ×2 | KEV |
| CVE-2019-19781 | Unauthenticated path traversal RCE in Citrix ADC, Gateway, and SD-WAN WANOP | 9.8 | 100% | KEVRansomware | KEV |
| CVE-2020-10189 | Unauthenticated RCE in Zoho ManageEngine Desktop Central | 9.8 | 100% | KEVPoC ×3 | KEV |
From the original article
3 min read at securityaffairs.com
US Department of Justice announced indictments against 5 Chinese nationals alleged members of a state-sponsored hacking group known as APT41. The United States Department of Justice this week announced indictments against five Chinese nationals believed to be members of the cyber-espionage group known as APT41 ( Winnti , Barium , Wicked Panda and Wicked Spider ).
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.