Topic: mitigation guidance

  • Hackers Exploit Gladinet CentreStack Flaw for RCE Attacks

    Hackers Exploit Gladinet CentreStack Flaw for RCE Attacks

    A critical security flaw in Gladinet's CentreStack and Triofox platforms, due to hardcoded AES encryption keys, allows attackers to forge authentication tickets and gain remote code execution on servers. Attackers are actively exploiting this vulnerability, combining it with a known local file in...

    Read More »
  • Microsoft cancels 200 certificates for malicious Teams installers

    Microsoft cancels 200 certificates for malicious Teams installers

    Microsoft revoked 200 software-signing certificates to neutralize the Vanilla Tempest ransomware group's ability to distribute malware disguised as the Microsoft Teams installer, protecting users from cyberattacks. Vanilla Tempest used deceptive domains and SEO poisoning to trick users into downl...

    Read More »