Sednit reloaded: Back in the trenches
ESET researchers document how the Sednit APT group has reemerged with a modern toolkit centered on two paired implants – BeardShell and Covenant.
⚠️ Critical #XSS flaw actively exploited in Zimbra Collaboration Suite, putting over 129,000 servers at risk. Researchers suspect involvement of #Sednit (aka Fancy Bear).
Read: https://hackread.com/zimbra-cve-2024-27443-xss-flaw-hit-sednit-servers/
#CyberSecurity #Vulnerability #FancyBear #Zimbra
Zimbra CVE-2024-27443 XSS Flaw Hits 129K Servers, Sednit Suspected
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
Spies hack high-value mail servers using an exploit from yesteryear
https://arstechni.ca/98Fq #cross-sitescripting
#Security #webmail #Biz&IT
#sednit #xss
Spies hack high-value mail servers using an exploit from yesteryear
Attacks spilled contacts and emails from targeted accounts.
Webmailer Roundcube: Attacken auf Zero-Day-Lücke
Im Webmailer Roundcube missbrauchen Cyberkriminelle eine Sicherheitslücke, um verwundbare Einrichtungen anzugreifen. Ein Update schließt das Leck.
Zebrocy Retools for New Political Attacks - Researchers warn that the Russia-linked APT has freshened up their tools with an improved download... more:
https://threatpost.com/zebrocy-retools-political-attacks/148593/ #spearphishing #fancybear #backdoor #phishing #malware #dropbox #zebrocy #delphi #golang #sednit #apt28Zebrocy Retools for New Political Attacks
Researchers warn that the Russia-linked APT has freshened up their tools with an improved downloader and more.
The Threat Codex
Hackread.com
Ars Technica News
Marcel SIneM(S)US
ITSEC News
Cyb3ric