PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Security flash: Salt Typhoon

bugcrowd.com | blog | #threat-intelligence | #attack-surface | #apt | #bugcrowd | #breach | #salt-typhoon | #telecom
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Casey Ellis and Trey Ford break down Salt Typhoon's intrusions into nine US telecom firms, how edge attack surface expansion enabled access, and why ejecting attackers from telco stacks is so hard.
Published
Collected

Related coverage

research · hunt.io
Ukraine’s State Data-Exchange System Targeted by Russian-Speaking Operator via Graylog Log4Shell
An exposed open directory revealed a solo operator's full Log4Shell chain against a Graylog host holding Trembita logs, with the access log that proves execution.
vulnerability · volexity.com
DriftingCloud: Zero-Day Sophos Firewall Exploitation and an Insidious Breach
Volexity frequently works with individuals and organizations heavily targeted by sophisticated, motivated, and well-equipped threat actors from around the world. Some of these individuals or organizations are attacked infrequently or […]
vulnerability · volexity.com
Active Exploitation of Newly Patched ColdFusion Vulnerability (CVE-2018-15961)
If your organization is running an Internet-facing version of ColdFusion, you may want to take a close look at your server. Volexity recently observed active exploitation of a newly patched […]
vulnerability · volexity.com
Patchwork APT Group Targets US Think Tanks
In March and April 2018, Volexity identified multiple spear phishing campaigns attributed to Patchwork, an Indian APT group also known as Dropping Elephant. This increase in threat activity was consistent […]
research · volexity.com
OceanLotus Blossoms: Mass Digital Surveillance and Attacks Targeting ASEAN, Asian Nations, the Media, Human Rights Groups, and Civil Society
In May 2017, Volexity identified and started tracking a very sophisticated and extremely widespread mass digital surveillance and attack campaign targeting several Asian nations, the ASEAN organization, and hundreds of […]
research · volexity.com
Real News, Fake Flash: Mac OS X Users Targeted
Volexity recently identified a breach to the website of a well regarded media outlet in the country of Georgia. As part of this breach, the media organization’s website was being […]
Back