PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2020-0688] Dark Halo Leverages SolarWinds Compromise to Breach Organizations

volexity.com | vulnerability | CVE-2020-0688 | #vulnerability-research | #threat-intelligence | #malware | #solarwinds | #exchange | #darkhalo
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Volexity is releasing additional research and indicators associated with compromises impacting customers of the SolarWinds Orion software platform. Volexity has also published a guide for responding to the SolarWinds breach, […]
CVE
CVE-2020-0688
Published
Collected

Related coverage

vulnerability · volexity.com
Microsoft Exchange Control Panel (ECP) Vulnerability CVE-2020-0688 Exploited
On February 11, 2020, as part of Patch Tuesday, Microsoft released cumulative updates and a service pack that addressed a remote code execution vulnerability found in Microsoft Exchange 2010, 2013, […]
vulnerability · horizon3.ai
[CVE-2021-34473] ProxyShell: More Ways for More Shells
In August, Orange Tsai released details and also spoke at BlackHat and DEFCON detailing his security research into Microsoft Exchange. His latest blog post…
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
vulnerability · volexity.com
Mind the (Patch) Gap: Multiple Chinese Threat Actors Chain 0-day Exploits in Chrome & Windows
On September 1, 2026, Volexity’s Network Security Monitoring service detected a spear-phishing campaign from a Chinese threat actor it tracks as UTA0560 targeting customers at multiple non-governmental organizations (NGOs). The emails contained a message encouraging the users to a click a link that led to the website of a US-based university. These links abused a reflected cross-site scripting (XSS) vulnerability on the website, redirecting recipients to threat-actor-controlled infrastructure hosting a multi-stage exploit chain that included a Google Chrome zero-day, CVE-2026-85046. Volexity analyzed its email telemetry and discovered that another Chinese threat actor it tracks as JungleBamboo (also known as APT31/Violet Typhoon/TA412) was also exploiting the same vulnerability chain against a different set of targets using different infrastructure and post-exploitation malware.
vulnerability · volexity.com
[CVE-2022-0847] DISGOMOJI Malware Used to Target Indian Government
# DISGOMOJI Malware Used to Target Indian Government June 13, 2024 Volexity Threat Research > _Note: Volexity has reported the activity described in this blog and details of the impacted systems...
vulnerability · volexity.com
DriftingCloud: Zero-Day Sophos Firewall Exploitation and an Insidious Breach
Volexity frequently works with individuals and organizations heavily targeted by sophisticated, motivated, and well-equipped threat actors from around the world. Some of these individuals or organizations are attacked infrequently or […]
Back