Advisorycritical
Kaspersky Security Bulletin: APT predictions 2024
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-12641 | Command Injection RCE in Roundcube Webmail (CVE-2020-12641) | 9.8 | 84% | KEVPoC | KEV |
| CVE-2020-35730 | Cross-Site Scripting in Roundcube Webmail Plain-Text Email Link Handling | 6.1 | 33% | KEV | KEV |
| CVE-2021-44026 | SQL Injection in Roundcube Webmail via Search Parameters | 9.8 | 70% | KEV | KEV |
| CVE-2023-2868 | Unauthenticated Command Injection in Barracuda Email Security Gateway Appliances via .tar Files | 9.8 | 87% | KEV | KEV |
From the original article
13 min read at securelist.com
Advanced persistent threats (APTs) are the most dangerous threats, as they employ complex tools and techniques, and often are highly targeted and hard to detect. Amid the global crisis and escalating geopolitical confrontations, these sophisticated cyberattacks are even more dangerous, as there is often more at stake.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.