Exploit / PoCcritical
Iranian Government-Backed Hackers Targeting U.S. Energy and Transit Systems
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-47966 | Unauthenticated SAML RCE in Zoho ManageEngine On-Premise Products | 9.8 | 100% | KEVRansomwarePoC ×6 | KEV |
| CVE-2022-47986 | YAML Deserialization RCE in IBM Aspera Faspex | 9.8 | 100% | KEVRansomware | KEV |
From the original article
3 min read at thehackernews.com
An Iranian government-backed actor known as Mint Sandstorm has been linked to attacks aimed at critical infrastructure in the U. S. between late 2021 to mid-2022.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.