Ransomwarecritical

Extortion Gang Breaches Cybersecurity Firm Qualys Using Accellion Exploit

The Hacker Newsby @TheHackersNewsMar 8, 2021 · 07:30 UTC (Mar 8, 2021)2 min read3 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-27101 CVE-2021-27104 CVE-2021-27102 CVE-2021-27103 CVE-2021-27730 CVE-2021-27731

Tags: cve-2021-27101 cve-2021-27104 cve-2021-27102 cve-2021-27103 cve-2021-27730 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-27104 +3 related CVEs CVE-2021-27103 CVE-2021-27101 CVE-2021-27102	Unauthenticated OS Command Injection in Accellion FTA Admin Endpoints	9.8 group max	57%	KEVRansomware	Feb 16, 2021 KEV Nov 3, 2021
CVE-2021-27730 +1 related CVE CVE-2021-27731	Accellion FTA 9_12_432 and earlier is affected by argument injection via a crafted POST request to an admin endpoint	9.8 group max	1%		Mar 2, 2021

From the original article

2 min read at thehackernews.com

Enterprise cloud security firm Qualys has become the latest victim to join a long list of entities to have suffered a data breach after zero-day vulnerabilities in its Accellion File Transfer Appliance (FTA) server were exploited to steal sensitive business documents.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.