Malwarehigh
ThreatsDay Bulletin: GhostAd Drain, macOS Attacks, Proxy Botnets, Cloud Exploits, and 12+ Stories
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-44353+2 related CVEs | Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result… | 9.8 group max | 80% | ||
| CVE-2023-26359 | Unauthenticated Deserialization RCE in Adobe ColdFusion 2018 and 2021 | 9.8 | 17% | KEV | KEV |
CVE-2023-29300+1 related CVE | Deserialization of Untrusted Data RCE in Adobe ColdFusion (CVE-2023-29300) | 9.8 group max | 100% | KEVRansomware | KEV |
| CVE-2023-38203 | Unauthenticated Deserialization RCE in Adobe ColdFusion (Actively Exploited) | 9.8 | 97% | KEVRansomware | KEV |
CVE-2023-38205+1 related CVE | Security Feature Bypass in Adobe ColdFusion Exposes Admin CFM/CFC Endpoints | 7.5 group max | 100% | KEV | KEV |
| CVE-2024-20767 | Improper Access Control in Adobe ColdFusion Enables Arbitrary File Read | 7.4 | 99% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | ipcola.com | proxy botnet uncovered A new proxy network called IPCola ("ipcola[.]com") has claimed to offer more than 1.6 million unique IP ad |
From the original article
13 min read at thehackernews.com
The first ThreatsDay Bulletin of 2026 lands on a day that already feels symbolic — new year, new breaches, new tricks. If the past twelve months taught defenders anything, it’s that threat actors don’t pause for holidays or resolutions. They just evolve faster.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.