Malwarecritical
ThreatsDay Bulletin: CarPlay Exploit, BYOVD Tactics, SQL C2 Attacks, iCloud Backdoor Demand & More
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-7921 | Improper Authentication Bypass in Multiple Hikvision Products | 9.8 | 100% | KEVPoC | KEV |
| CVE-2024-3400 | Unauthenticated Root Command Injection in Palo Alto Networks PAN-OS GlobalProtect | 10.0 | 100% | KEVRansomwarePoC ×2 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | chatgptforchrome.com | s Unit 42 said . The queries are redirected to domains like chatgptforchrome[.]com, dinershtein[.]com, and gen-ai-search[.]com. Routers Rent |
| domain | dinershtein.com | ries are redirected to domains like chatgptforchrome[.]com, dinershtein[.]com, and gen-ai-search[.]com. Routers Rented Out for Mining a |
| domain | gen-ai-search.com | domains like chatgptforchrome[.]com, dinershtein[.]com, and gen-ai-search[.]com. Routers Rented Out for Mining and DDoS A sophisticated o |
From the original article
13 min read at thehackernews.com
From unpatched cars to hijacked clouds, this week’s Threatsday headlines remind us of one thing — no corner of technology is safe. Attackers are scanning firewalls for critical flaws, bending vulnerable SQL servers into powerful command centers, and even finding ways to poison Chrome’s settings to sneak in malicious extensions.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.