Security
"Threat actors have recently developed workarounds to current mitigations and detection methods and have been able to exploit weaknesses, move laterally, and escalate privileges without detection..."
"This actor is not doing the quiet intelligence collection and theft of secrets... they can disrupt major services if, and when, the order comes down,"
POCs validated, over 45,000 instances still publicly exposed after critical Jenkins vulnerability disclosed.
The attack has been claimed by the prolific LockBit group, which has hit numerous high-profile companies in recent months, often using unpatched Citrix Bleed vulnerabilities.
"Cozy Bear" gained unauthorized access to HPE’s cloud-based email environment