Vulnerabilityhigh

Iranian Peach Sandstorm group behind recent password spray attacks

Security Affairsby @securityaffairsSep 16, 2023 · 13:36 UTC (Sep 16, 2023)3 min read1

Read at securityaffairs.com

Analyze CVE-2022-47966 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-47966 CVE-2022-26134

Tags: cve-2022-47966 cve-2022-26134 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-26134	Unauthenticated OGNL Injection RCE in Atlassian Confluence Server/Data Center	9.8	100%	KEVRansomwarePoC ×2	Jun 3, 2022 KEV Jun 2, 2022
CVE-2022-47966	Unauthenticated SAML RCE in Zoho ManageEngine On-Premise Products	9.8	100%	KEVRansomwarePoC ×6	Jan 18, 2023 KEV Jan 23, 2023

From the original article

3 min read at securityaffairs.com

Iran-linked Peach Sandstorm APT is behind password spray attacks against thousands of organizations globally between February and July 2023. Microsoft researchers observed a series of password spray attacks conducted by Iran nation-state actors as part of a campaign named Peach Sandstorm (aka Holmium , APT33 , Elfin , and Magic Hound ).

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.