XE Hacker Group Exploits VeraCore Zero-Day to Deploy Persistent Web Shells

VeraCore Zero-Day
February 10, 2025
by Ady DeeJay
Comments (0)

Feb 10, 2025Ravie LakshmananVulnerability / Malware Threat actors have been observed exploiting multiple security flaws in various software products, including Progress Telerik UI for ASP.NET AJAX and Advantive VeraCore, to drop reverse shells and web shells, and maintain persistent remote access to compromised systems. The zero-day exploitation of security flaws

Read More

Chinese Hacking Group Exploits Barracuda Zero-Day to Target Government, Military, and Telecom

Barracuda Zero-Day
August 29, 2023
by Ady DeeJay
Comments (0)

A suspected Chinese-nexus hacking group exploited a recently disclosed zero-day flaw in Barracuda Networks Email Security Gateway (ESG) appliances to breach government, military, defense and aerospace, high-tech industry, and telecom sectors as part of a global espionage campaign. Mandiant, which is tracking the activity under the name UNC4841, described the

Read More

Zero-Day Vulnerability Actively Being Exploited

June 2, 2023
by Ady DeeJay
Comments (0)

A critical flaw in Progress Software’s in MOVEit Transfer managed file transfer application has come under widespread exploitation in the wild to take over vulnerable systems. The shortcoming, which is assigned the CVE identifier CVE-2023-34362, relates to a severe SQL injection vulnerability that could lead to escalated privileges and potential

Read More