Do Son GreyNoise reveals a massive Japan-based holiday campaign: 2.5 million attacks targeting 767 CVEs to harvest access for ransomware gangs.
CVE-2023-26360
Identified as CVE-2023-26360, this flaw has been exploited by threat actors for initial access to government servers, as confirmed by CISA
CISA warns of nation-state-backed hackers and cybercrime groups exploiting an old Telerik vulnerability, compromising a federal agency's network server
Adobe released security updates for ColdFusion versions 2021 and 2018 to resolve this critical flaw, tracked as CVE-2023-26360