CVE-2024-21887

Critical BeyondTrust Remote Support Vulnerability Exploited in the Wild by ARMORY CASTLE

• Vulnerability Report

Critical BeyondTrust Remote Support Vulnerability Exploited in the Wild by ARMORY CASTLE

Do Son October 16, 2026 0

Patch CVE-2026-102764 now. This critical BeyondTrust Remote Support vulnerability is exploited in the wild as an ARMORY CASTLE zero-day.

DragonForce Ransomware Cartel Hits UK Retailers with Custom Payloads and Global Extortion Campaign

• Cybercriminals

DragonForce Ransomware Cartel Hits UK Retailers with Custom Payloads and Global Extortion Campaign

Do Son May 6, 2025 0

DragonForce ransomware cartel targets UK retailers with Conti-based payloads, RansomBay leaks, and phishing attacks, warns SentinelOne report.

DragonForce Ransomware Group Targets Saudi Arabia with Large-Scale Data Breach

• Cyber Security
• Data Leak

DragonForce Ransomware Group Targets Saudi Arabia with Large-Scale Data Breach

Do Son February 28, 2025 0

Learn about the DragonForce ransomware group's first major attack in Saudi Arabia, exposing 6 TB of sensitive data.

CVE-2024-21887 and More: How Earth Estries APT Group Exploits VPNs & Servers

• Cyber Security
• Malware
• Vulnerability

CVE-2024-21887 and More: How Earth Estries APT Group Exploits VPNs & Servers

Do Son November 26, 2024 0

Learn about the Earth Estries APT group, a significant cyber espionage actor targeting critical sectors and industries worldwide.

RedTail Cryptominer Malware Targets PAN-OS Vulnerability

• Malware
• Vulnerability

RedTail Cryptominer Malware Targets PAN-OS Vulnerability

Do Son June 1, 2024 0

The malware file named “.redtail” confirmed the presence of the RedTail cryptominer, previously reported by Cyber Security Associates (CSA)

Mirai Botnet Exploits Ivanti Vulnerabilities (CVE-2023-46805 & CVE-2024-21887)

• Malware
• Vulnerability

Mirai Botnet Exploits Ivanti Vulnerabilities (CVE-2023-46805 & CVE-2024-21887)

Do Son May 7, 2024 0

Attackers are weaponizing two critical vulnerabilities, CVE-2023-46805 and CVE-2024-21887, to spread the notorious Mirai botnet malware

China-Linked Hackers Target MITRE with ROOTROT Web Shell

• Cyber Security
• Malware
• Vulnerability

China-Linked Hackers Target MITRE with ROOTROT Web Shell

Do Son May 7, 2024 0

The attackers then deployed a Perl-based web shell, dubbed ROOTROT, which is linked to the China-based hacking group UNC5221

Stealthy Backdoors: SparkCockpit & SparkTar Remain Undetected

• Cyber Security
• Malware

Stealthy Backdoors: SparkCockpit & SparkTar Remain Undetected

Do Son March 2, 2024 0

Security researchers from NVISO have uncovered two sophisticated TLS-based backdoors, dubbed SparkCockpit and SparkTar

Over 2,100 Ivanti VPNs Compromised: The GIFTEDVISITOR Webshell Threat

• Cyber Security
• Malware
• Vulnerability

Over 2,100 Ivanti VPNs Compromised: The GIFTEDVISITOR Webshell Threat

Do Son January 19, 2024 0

A key discovery in Volexity's investigation was the GIFTEDVISITOR webshell. Over 1,700 compromised Ivanti Connect Secure VPN devices

Ivanti’s Critical Security Alert: Two Zero-Days Exploited in the Wild

• Vulnerability

Ivanti’s Critical Security Alert: Two Zero-Days Exploited in the Wild

Do Son January 10, 2024 0

Ivanti has revealed two critical zero-day vulnerabilities (CVE-2024-21887, CVE-2023-46805) in its Connect Secure and Policy Secure products