Threats Tagged 'APT'

This article provides a detailed technical breakdown of the active exploitation of the critical VMware vCenter vulnerability CVE-2026-59310 by a suspected APT group. It covers the attack chain, including the use of a directory traversal flaw to deploy persistent reverse SSH tools and web shells, and offers specific indicators of compromise and mitigation guidance.

Apple has released an emergency iOS update to patch a critical zero-click vulnerability actively exploited in the wild, primarily targeting US users. The exploit bypasses iOS security to grant attackers root access via malicious iMessage media files, enabling silent data extraction and surveillance. Immediate patching and enabling Lockdown Mode are strongly recommended to mitigate this high-risk threat.

This article details an active exploitation campaign by a China-aligned threat actor (UNK_MassTraction) leveraging critical Roundcube vulnerabilities CVE-2024-42009 and CVE-2025-49113 to achieve remote code execution and persistent access on university mail servers. It provides a comprehensive attack chain analysis, indicators of compromise, and a step-by-step remediation guide including patching, hunting for web shells, and enforcing DMARC policies.