Security
"It is clear that the internet is so, so brittle" and possibly held together with duct tape
The threat group has also used a wide range of attacker scripts to get vpxuser credentials, enumerate ESXi hosts and their guest VMs, and manipulate connected ESXi host firewall rules in order to steal data.
Government promises a new "National Biosurveillance Network" that would join up "syndromic, epidemiological and promising environmental surveillance capabilities" in a new "Biothreats Radar" but promised funding is far from huge...
"It is a pre-auth RCE [and] has been proven to be exploitable in a consistent manner; we found it during a Red Team engagement and have exploited it remotely..."
The Stack is seeing exposed instances associated with scores of high profile blue chips
Admins should urgently modify firewall rules to deny HTTP and HTTPs traffic to MOVEit Transfer on ports 80 and 443. (Also, can we start fuzzing for SQL Injection properly, please?)
Apple: "We have never worked with any government to insert a backdoor into any Apple product and never will..."
John Scimone had one hell of an introducton to life as a CISO...
Customers were first hit in October 2022. End user telemetry flagged something remiss this month... IOCs and Yara rules now shared.