vulnerabilities
CISA: "Permanently disconnect these devices on or before September 30, 2025"
Expect this to get exploited - like the bug before it...
The bug was discovered by its government-backed attacks focused research group.
Dassault Systèmes software used by major manufacturers including Boeing supplier.
The threat actor has been moving laterally, stealing user tokens and maintaining persistence via a range of techniques.
Vulnerability chained with Apple exploit patched in August but Android users may also be affected.
"Publishing security advisories for such critical issues with such limited information only serves to hurt defenders and threat hunters"
"Malicious" images giving hackers access.
"A great way to potentially lock out other adversaries."