Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers
Teaser from the source
Snoops 'likely still' have access to US government-affiliated network
This is the RSS-feed teaser. Read the full article at the original source.
Read at The Register — SecurityMore on Suspected
Other advisories
- Not ratedosv:CLEANSTART-2024-CD43434suspected race condition when calling getaddrinfo led to memory corruption and a potentially exploitable crash
- CriticalCVE-2024-8963Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor
- MediumCVE-2024-302571Panel's password verification is suspected to have a timing attack vulnerability in github.com/1Panel-dev/1Panel
- MediumCVE-2024-302571Panel's password verification is suspected to have a timing attack vulnerability
- Not ratedosv:CVE-2024-302571Panel's password verification is suspected to have a timing attack vulnerability
Other news entries
- Trezor warns of suspected crypto-theft implant in hardware walletNewsBleepingComputer
- Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilisNewsThe Hacker News
- Polymarket halts trading after crypto-draining script breach, $2.5M tracedNewsBleepingComputer
- Ireland's Employment Permits Portal taken offline after unauthorised activity; names, emails and roles may be exposedBreachpwn.watch
- Polymarket halts trading after a compromised third-party provider drains user wallets through its websiteBreachpwn.watch
- PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated NetworkNewsThe Hacker News
- PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning ActivityNewsThe Hacker News
- BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing RevocationsNewsThe Hacker News
ID