vulnerabilities
Attackers dropped a webshell, collected and exfiltrated Active Directory data, then ran into some healthy obstacles...
There are approximately 38,000 Citrix Gateway appliances exposed to the public internet and a whole host of internet traffic flows through Citrix ADC...
Multiple critical unauthenticated SQL injection bugs and hard-coded credentials as well as command injection, and file upload bugs need urgent patching.
You're tired? Everyone's tired. Just patch promptly please.
CVE-2023-25717 is being exploited and affected products have been pulled into a new botnet...
Hackers "often breach the Department’s defensive perimeter and roam freely within our information systems"
"It is a pre-auth RCE [and] has been proven to be exploitable in a consistent manner; we found it during a Red Team engagement and have exploited it remotely..."
Admins should urgently modify firewall rules to deny HTTP and HTTPs traffic to MOVEit Transfer on ports 80 and 443. (Also, can we start fuzzing for SQL Injection properly, please?)
