CVE-2023-46805

Critical BeyondTrust Remote Support Vulnerability Exploited in the Wild by ARMORY CASTLE

• Vulnerability Report

Critical BeyondTrust Remote Support Vulnerability Exploited in the Wild by ARMORY CASTLE

Do Son October 16, 2026 0

Patch CVE-2026-102764 now. This critical BeyondTrust Remote Support vulnerability is exploited in the wild as an ARMORY CASTLE zero-day.

RedTail Cryptominer Malware Targets PAN-OS Vulnerability

• Malware
• Vulnerability

RedTail Cryptominer Malware Targets PAN-OS Vulnerability

Do Son June 1, 2024 0

The malware file named “.redtail” confirmed the presence of the RedTail cryptominer, previously reported by Cyber Security Associates (CSA)

Mirai Botnet Exploits Ivanti Vulnerabilities (CVE-2023-46805 & CVE-2024-21887)

• Malware
• Vulnerability

Mirai Botnet Exploits Ivanti Vulnerabilities (CVE-2023-46805 & CVE-2024-21887)

Do Son May 7, 2024 0

Attackers are weaponizing two critical vulnerabilities, CVE-2023-46805 and CVE-2024-21887, to spread the notorious Mirai botnet malware

China-Linked Hackers Target MITRE with ROOTROT Web Shell

• Cyber Security
• Malware
• Vulnerability

China-Linked Hackers Target MITRE with ROOTROT Web Shell

Do Son May 7, 2024 0

The attackers then deployed a Perl-based web shell, dubbed ROOTROT, which is linked to the China-based hacking group UNC5221

Magnet Goblin: A Financially Motivated Exploiter of 1-Day Vulnerabilities

• Cyber Security
• Malware
• Vulnerability

Magnet Goblin: A Financially Motivated Exploiter of 1-Day Vulnerabilities

Do Son March 8, 2024 0

Magnet Goblin is a financially motivated threat actor demonstrating proficiency in swiftly exploiting 1-day software vulnerabilities

Stealthy Backdoors: SparkCockpit & SparkTar Remain Undetected

• Cyber Security
• Malware

Stealthy Backdoors: SparkCockpit & SparkTar Remain Undetected

Do Son March 2, 2024 0

Security researchers from NVISO have uncovered two sophisticated TLS-based backdoors, dubbed SparkCockpit and SparkTar

Cybersecurity Alert: Unseen WIREFIRE Web Shell Variant in ICS VPN Appliances

• Malware

Cybersecurity Alert: Unseen WIREFIRE Web Shell Variant in ICS VPN Appliances

Do Son January 28, 2024 0

QuoIntelligence has uncovered a previously unknown and undetected variant of the WIREFIRE web shell, a Python-based implant

Over 2,100 Ivanti VPNs Compromised: The GIFTEDVISITOR Webshell Threat

• Cyber Security
• Malware
• Vulnerability

Over 2,100 Ivanti VPNs Compromised: The GIFTEDVISITOR Webshell Threat

Do Son January 19, 2024 0

A key discovery in Volexity's investigation was the GIFTEDVISITOR webshell. Over 1,700 compromised Ivanti Connect Secure VPN devices

Ivanti’s Critical Security Alert: Two Zero-Days Exploited in the Wild

• Vulnerability

Ivanti’s Critical Security Alert: Two Zero-Days Exploited in the Wild

Do Son January 10, 2024 0

Ivanti has revealed two critical zero-day vulnerabilities (CVE-2024-21887, CVE-2023-46805) in its Connect Secure and Policy Secure products