Malwarecritical

US Agencies and FireEye Were Hacked Using SolarWinds Software Backdoor

The Hacker Newsby @TheHackersNewsDec 15, 2020 · 00:00 UTC (Dec 15, 2020)4 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2019-11510 CVE-2020-1472 CVE-2020-10189 CVE-2019-0708

Tags: cve-2019-11510 cve-2020-1472 cve-2020-10189 cve-2019-0708 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-0708	Unauthenticated RCE in Microsoft Remote Desktop Services (BlueKeep)	9.8	100%	KEVRansomwarePoC ×4	May 16, 2019 KEV Nov 3, 2021
CVE-2019-11510	Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN	10.0	100%	KEVRansomwarePoC ×2	May 8, 2019 KEV Nov 3, 2021
CVE-2020-10189	Unauthenticated RCE in Zoho ManageEngine Desktop Central	9.8	100%	KEVPoC ×3	Mar 6, 2020 KEV Nov 3, 2021
CVE-2020-1472	Unauthenticated Privilege Escalation (Zerologon) in Microsoft Netlogon Domain Controllers	5.5	99%	KEVRansomwarePoC	Aug 17, 2020 KEV Nov 3, 2021

From the original article

4 min read at thehackernews.com

State-sponsored actors allegedly working for Russia have targeted the US Treasury, the Commerce Department's National Telecommunications and Information Administration (NTIA), and other government agencies to monitor internal email traffic as part of a widespread cyberespionage campaign.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.