Latvian National Sentenced in Connection with Providing Advice to Multiple Ransomware Groups
NEOSEC enrichment — no mirror of the original source
A US federal judge in Ohio has sentenced Deniss Zolotarjovs to 102 months (8.5 years) in prison for his role as a negotiator for several ransomware groups. Zolotarjovs, who is from Latvia, was arrested in the country of Georgia in 2023 and
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesLinked advisories
- CVE-2026-23631redis-server Lua use-after-free may allow remote code execution
- CVE-2026-23631Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica sync…
- CVE-2026-0300Palo Alto Networks PAN-OS — Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
- CVE-2026-23631redis-server Lua use-after-free may allow remote code execution
- CVE-2026-25588RedisTimeSeries RESTORE invalid memory access may allow remote code execution
- CVE-2026-0073OSV-Eintrag
- CVE-2026-25588RedisTimeSeries RESTORE invalid memory access may allow remote code execution
- CVE-2026-0300A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenti…
- CVE-2026-25588RedisTimeSeries: Heap-basierter Pufferüberlauf
- CVE-2026-0073In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to re…
- CVE-2026-23631bitnami valkey: Use-After-Free
- CVE-2026-23631redis-server Lua use-after-free may allow remote code execution
- CVE-2026-23631redis-server Lua use-after-free may allow remote code execution
- CVE-2026-25588RedisTimeSeries RESTORE invalid memory access may allow remote code execution
- CVE-2026-25588Redis: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode
- CVE-2026-25588RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14 of RedisTimeSeries, the module does not properly validate serialized values…
Affected vendors and products
More on Connection
Other advisories
- Not ratedosv:CVE-2026-121581ArcReel Provider Test-Connection Endpoint test server-side request forgery
- Not ratedosv:CVE-2026-119084Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters
- Not ratedosv:CVE-2026-121455DbGate before 7.3.3 Missing Authorization via /connections/test and /connections/save
- Not ratedosv:CLEANSTART-2026-XV44707HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a r...
- Not ratedosv:CVE-2026-120250OpenAlgo 1.0.0.29 before 2.0.3.1 Improper Certificate Validation in SMTP Connections
- Not ratedosv:CLEANSTART-2023-LX38662Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc before 0
- Not ratedosv:CLEANSTART-2024-AV62895Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection...
- Not ratedosv:CLEANSTART-2024-BH81298use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1
Other news entries
- Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into ProxiesNewsKrebs on Security
- Rapid7 Analysis: Unauthenticated File Upload to RCE in BeyondTrust Remote Support (CVE-2026-102764)NewsRapid7
- Microsoft finally fixes VPN issues caused by September updatesNewsBleepingComputer
- WorkOS says an AI-driven attacker breached its internal sales tool and accessed CRM and customer-conversation dataBreachpwn.watch
- Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other ServersNewsThe Hacker News
- DreamHost forces password resets in ongoing "incident"NewsBleepingComputer
- Cisco Produkte (Emergency Responder, Prime Collaboration, Unified Communications Manager und Unity Connection): Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory AmplificationNewsThe Hacker News
Source: https://isc.sans.edu/podcastdetail/9924
ID