cybersecurity
Expect this to get exploited - like the bug before it...
"By submitting the vulnerability, I had implicitly agreed to a set of legal terms that prohibited any form of public disclosure, indefinitely. It was now locked in a box. No advisory. No community alert..."
Brussels, Berlin, Heathrow all impacted.
Was the test getting too hard for security vendors?
Thieves expected to exploit "SessionReaper" fast and at scale.
OT security is in the spotlight in the UK, where the e-CAF framework is putting growing pressure on CISOs at utilities and beyond...
Run yourselves a little Trufflehog, at bare minimum, and check these IOCs
Vulnerability chained with Apple exploit patched in August but Android users may also be affected.