vulnerabilities
The bug was discovered by its government-backed attacks focused research group.
Dassault Systèmes software used by major manufacturers including Boeing supplier.
The threat actor has been moving laterally, stealing user tokens and maintaining persistence via a range of techniques.
Vulnerability chained with Apple exploit patched in August but Android users may also be affected.
"Publishing security advisories for such critical issues with such limited information only serves to hurt defenders and threat hunters"
"Malicious" images giving hackers access.
"A great way to potentially lock out other adversaries."
Issues include a faulty fix to an issue disclosed two years ago.
Attacks appear to be "linked to legacy credential use during migrations from Gen 6 to Gen 7 firewalls"