Coyote Banking Trojan Becomes First to Exploit Microsoft UI Automation in Active Attacks on Banks and Crypto Platforms
Source: https://hackread.com/coyote-trojan-use-microsoft-ui-automation-bank-attacks/
Microsoft Reveals 3 Chinese State Hacker Groups Exploiting SharePoint Flaws
Source: https://hackread.com/microsoft-chinese-state-hackers-exploit-sharepoint-flaws/
Microsoft Confirms Active Exploits of SharePoint Flaws, Urges Immediate Patching for On-Prem Users
Source: https://hackread.com/microsoft-hackers-exploit-sharepoint-flaws-patch-now/
The U. S. Cybersecurity and Infrastructure Security Agency (CISA) has added a vulnerability affecting Fortinet FortiWeb products to its Known Exploited Vulnerabilities catalog. Although specific technical details and affected versions are not provided, the inclusion in this catalog indicates active or imminent exploitation risks. The vulnerability is currently assessed as medium severity, with no known exploits in the wild reported yet. FortiWeb is a widely used web application firewall (WAF) product, often deployed by enterprises to protect web applications from attacks. European organizations using FortiWeb appliances could face risks to their web infrastructure, potentially impacting confidentiality, integrity, or availability if exploited. Mitigation should focus on closely monitoring Fortinet advisories for patches, implementing compensating controls such as enhanced network segmentation, and applying strict access controls to FortiWeb management interfaces. Countries with significant Fortinet market presence and critical infrastructure reliance on FortiWeb are more likely to be affected, including Germany, France, the UK, and the Netherlands. Given the lack of detailed exploit information but the critical role of FortiWeb, the suggested severity is high to ensure proactive defensive measures.
