RansomwarecriticalExploited in the wild

Week in review: Microsoft confirms DDoS attacks on M365 and Azure Portal, Infosecurity Europe 2023

Help Net Securityby @helpnetsecurityJun 25, 2023 · 00:00 UTC (Jun 25, 2023)5 min read2 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-32435 CVE-2023-32434 CVE-2023-32439 CVE-2023-20887 CVE-2023-27992 CVE-2023-35708

Tags: cve-2023-32435 cve-2023-32434 cve-2023-32439 cve-2023-20887 cve-2023-27992 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-20887	Unauthenticated Command Injection RCE in VMware Aria Operations for Networks	9.8	98%	KEVPoC	Jun 7, 2023 KEV Jun 22, 2023
CVE-2023-27992	Unauthenticated Command Injection in Zyxel NAS326, NAS540, NAS542	9.8	82%	KEV	Jun 19, 2023 KEV Jun 23, 2023
CVE-2023-32439 +2 related CVEs CVE-2023-32435 CVE-2023-32434	Type Confusion in Apple WebKit (Safari, iOS, iPadOS, macOS) Enables Code Execution	8.8 group max	24%	KEV	Jun 23, 2023 KEV Jun 23, 2023
CVE-2023-35708	In Progress MOVEit Transfer before 2021.0.8 (13.0.8), 2021.1.6 (13.1.6), 2022.0.6 (14.0.6), 2022.1.7 (14.1.7), and 2023.0.3 (15.0.3), a SQL injection…	9.8	97%		Jun 16, 2023

From the original article

5 min read at helpnetsecurity.com

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Unraveling the multifaceted threats facing telecom companies In this Help Net Security interview, Georgia Bafoutsou, Cybersecurity Officer at the European Union Agency for Cybersecurity (ENISA), explores some of the common attack vectors that target telecom companies, their third-party providers, and the subscribers of…

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.