Latvian National Sentenced in Connection with Providing Advice to Multiple Ransomware Groups
NEOSEC enrichment — no mirror of the original source
A US federal judge in Ohio has sentenced Deniss Zolotarjovs to 102 months (8.5 years) in prison for his role as a negotiator for several ransomware groups. Zolotarjovs, who is from Latvia, was arrested in the country of Georgia in 2023 and
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesLinked advisories
- CVE-2026-23631redis-server Lua use-after-free may allow remote code execution
- CVE-2026-23631Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica sync…
- CVE-2026-0300Palo Alto Networks PAN-OS — Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
- CVE-2026-23631redis-server Lua use-after-free may allow remote code execution
- CVE-2026-25588RedisTimeSeries RESTORE invalid memory access may allow remote code execution
- CVE-2026-0073OSV-Eintrag
- CVE-2026-25588RedisTimeSeries RESTORE invalid memory access may allow remote code execution
- CVE-2026-0300A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenti…
- CVE-2026-25588RedisTimeSeries: Heap-basierter Pufferüberlauf
- CVE-2026-0073In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to re…
- CVE-2026-23631bitnami valkey: Use-After-Free
- CVE-2026-23631redis-server Lua use-after-free may allow remote code execution
- CVE-2026-23631redis-server Lua use-after-free may allow remote code execution
- CVE-2026-25588RedisTimeSeries RESTORE invalid memory access may allow remote code execution
- CVE-2026-25588Redis: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode
- CVE-2026-25588RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14 of RedisTimeSeries, the module does not properly validate serialized values…
Affected vendors and products
More on Connection
Other advisories
- MediumCVE-2026-106036Szafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS connections without authenticating the…
- HighCVE-2026-93446Apache Tomcat: Possible TLS 1.3 connection failures
- MediumCVE-2026-99216Drivers: hv: Don't reset VMBus connection state on error/exit paths
- HighCVE-2026-118665GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications
- HighCVE-2026-118665GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications
- Not ratedosv:CVE-2026-118665GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications
- Not ratedosv:CVE-2026-118262Echo: WebSocket proxy can retain connections and handlers after client disconnect
- Not ratedosv:CVE-2026-99216Drivers: hv: Don't reset VMBus connection state on error/exit paths
Other news entries
- Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other ServersNewsThe Hacker News
- DreamHost forces password resets in ongoing "incident"NewsBleepingComputer
- Cisco Produkte (Emergency Responder, Prime Collaboration, Unified Communications Manager und Unity Connection): Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory AmplificationNewsThe Hacker News
- Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP ConnectionsNewsSecurityWeek
- WordPress sites compromised after TeamUpdraft credential exposureNewsCSO Online
- Attackers Hijacked Over 300 Tor Exit Relays to Intercept SSH ConnectionsNewsThe Hacker News
- Microsoft says October updates didn’t actually fix VPN issuesNewsBleepingComputer
Source: https://isc.sans.edu/podcastdetail/9924
ID