PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2024-21762] Thai Broadband Provider Targeted via FortiGate SSL-VPN and MeshCentral Persistence

hunt.io | research | CVE-2024-21762 | #threat-intelligence | #ioc | #ssl-vpn | #fortigate | #cve-2024-21762 | #intrusion-analysis | #meshcentral
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Hunt.io uncovered an open directory revealing an active intrusion into Thai ISP 3BB: FortiGate SSL-VPN exploitation via CVE-2024-21762, MeshCentral persistence, and RADIUS credential theft.
CVE
CVE-2024-21762
Published
Collected

Related coverage

vulnerability · bishopfox.com
CVE-2024-21762 Vulnerability Scanner for FortiGate Firewalls
Bishop Fox built a scanner that safely detects FortiGate appliances affected by CVE-2024-21762, an out-of-bounds write in FortiOS SSL VPN, via chunked-encoding validation changes in the patch.
research · slcyber.io
Two Bytes is Plenty: FortiGate RCE with CVE-2024-21762
# Two Bytes is Plenty: FortiGate RCE with CVE-2024-21762 Get research alerts Share on social March 15, 2024 39 min read ### Table of Contents TOC Element Disclaimer Introduction Extracting the...
research · hunt.io
Ukraine’s State Data-Exchange System Targeted by Russian-Speaking Operator via Graylog Log4Shell
An exposed open directory revealed a solo operator's full Log4Shell chain against a Graylog host holding Trembita logs, with the access log that proves execution.
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
research · blog.viettelcybersecurity.com
Cảnh báo chiến dịch APT tấn công vào ngân hàng tại Việt Nam
Viettel warns of an APT campaign against Vietnamese banks: recruitment-themed phishing lures download a macro file from Dropbox that side-loads propsys.dll and beacons to a C2 server.
research · volexity.com
Sophisticated Phishing Campaign Targets Corporate Credentials
Volexity has been tracking a series of phishing campaigns focused on harvesting Microsoft Office 365 account credentials. While many commodity phishing kits are available to purchase containing Office 365 themes, […]
Back