CISA, FBI, CNMF detail multiple nation-state hackers striking aeronautical sector using Zoho ManageEngine vulnerabilities 

U.S. agencies released on Thursday a joint advisory to highlight the presence of indicators of compromise (IOCs) at an aeronautical sector organization as early as January 2023. The document confirms nation-state advanced persistent threat (APT) actors exploited CVE-2022-47966 to gain unauthorized access to a public-facing application (Zoho ManageEngine ServiceDesk Plus), establish persistence, and move laterally through the network. The vulnerability

Read more

Related Posts

• Rockwell reveals ControlLogix vulnerabilities affect communication modules deployed across critical infrastructurea
• Hackers exploiting RCE vulnerability in NetScaler, Gateway devices to implant webshells, CISA warnsa
• Global cybersecurity authorities release details on top routinely exploited vulnerabilities in 2022a
• CISA warns of hackers exploiting Ivanti EPMM vulnerabilities, after several Norwegian entities targeteda
• US, Canadian agencies warn organizations of newly identified Truebot malware variantsa