A pair of recently disclosed zero-day flaws in Ivanti Connect Secure (ICS) virtual private network (VPN) devices have been exploited to deliver a Rust-based payload called KrustyLoader that’s used to drop the open-source Sliver adversary simulation tool.
The security vulnerabilities, tracked as CVE-2023-46805 (CVSS score: 8.2) and CVE-2024-21887 (CVSS score: 9.1), could be abused
Related Post
- November 27, 2024
INTERPOL Busts African Cybercrime: 1,006 Arrests, 134,089 Malicious
An INTERPOL-led operation has led to the arrest of 1,006 suspects across 19 African countries and the takedown of 134,089
- November 27, 2024
Matrix Botnet Exploits IoT Devices in Widespread DDoS
A threat actor named Matrix has been linked to a widespread distributed denial-of-service (DoD) campaign that leverages vulnerabilities and misconfigurations
- November 27, 2024
Hacker in Snowflake Extortions May Be a U.S.
Two men have been arrested for allegedly stealing data from and extorting dozens of companies that used the cloud data
- November 26, 2024
7 Cybersecurity Wins to Be Proud of This
7 Cybersecurity Wins to Be Proud of This Thanksgiving “Individual commitment to a group effort – that is what makes a team