News | CSURFACE Threat Sensor

CSURFACE · 2024-11-09

Frag Ransomware Exploits Veeam Backup Flaw in New Attack

Frag ransomware group exploits Veeam Backup flaw in new attack campaign.

has-threat-actor

CSURFACE · 2024-10-29 ·Highlight

Critical SonicWall SonicOS Flaw Exploited by Multiple Ransomware Groups

SonicWall SonicOS vulnerability CVE-2024-40766 is exploited by ransomware groups, urging immediate patching.

CVE-2024-40766 ssvc:act cisa-kev breach confirmed-exploited active-exploitation ransomware has-threat-actor kev severity:CRITICAL

CSURFACE · 2024-10-13 ·Highlight

Critical RCE Flaw in Veeam Backup Exploited by Multiple Ransomware Groups

CVE-2024-40711 in Veeam Backup is exploited by ransomware groups, demanding urgent patching.

CVE-2024-40711 has-threat-actor kev ssvc:act cisa-kev ransomware severity:CRITICAL poc-released rce confirmed-exploited active-exploitation has-poc

CSURFACE · 2024-10-10 ·Highlight

Eldorado Ransomware Exploits HTE Technologies' Automation Systems

Eldorado ransomware exploits vulnerabilities in HTE Technologies' systems, targeting industrial automation.

has-threat-actor

CSURFACE · 2024-10-10 ·Highlight

ASUS Router Flaw CVE-2024-3080 Exploited in Massive DDoS Attack

A critical flaw in ASUS routers, CVE-2024-3080, is being exploited in a massive DDoS attack.

CVE-2024-3080 active-exploitation auth-bypass networking ssvc:attend severity:CRITICAL

CSURFACE · 2024-09-04 ·Highlight

ALPHV Ransomware Exploits Veritas Backup Exec Vulnerabilities for Initial Access

ALPHV ransomware exploits Veritas Backup Exec vulnerabilities for initial access, increasing ransom demands.

campaign breach has-threat-actor ransomware-used

CSURFACE · 2024-09-02

RansomHub Ransomware Group Hits 210 Victims in Critical Sectors

RansomHub ransomware group targets 210 victims across critical sectors, highlighting ongoing threats.

has-threat-actor

CSURFACE · 2024-08-01 ·Highlight

Critical RCE Vulnerability in ServiceNow Exploited in the Wild

A critical RCE vulnerability in ServiceNow is being actively exploited, prompting urgent patching.

CVE-2024-4879 has-poc severity:CRITICAL active-exploitation rce kev confirmed-exploited ssvc:act poc-released cisa-kev

CSURFACE · 2024-05-24 ·Highlight

Google Chrome Zero-Day CVE-2024-5274 Actively Exploited in the Wild

A critical zero-day in Google Chrome, CVE-2024-5274, is actively exploited; users must update immediately.

CVE-2024-5274 has-poc ssvc:attend poc-released kev cisa-kev critical confirmed-exploited severity:CRITICAL active-exploitation zero-day

CSURFACE · 2023-08-17 ·Highlight

Critical Citrix ShareFile Vulnerability Exploited in the Wild

A critical vulnerability in Citrix ShareFile is being actively exploited, allowing remote compromise of storage zones.

CVE-2023-24489 kev confirmed-exploited ssvc:act severity:CRITICAL poc-released active-exploitation cisa-kev has-poc

CSURFACE · 2023-06-08

Clop Ransomware Exploits MOVEit Transfer Vulnerability

Clop ransomware group exploits a vulnerability in MOVEit Transfer, potentially active since 2021.

ransomware-used has-threat-actor

CSURFACE · 2023-06-07 ·Highlight

Google Chrome Zero-Day CVE-2023-3079 Actively Exploited and Patched

Google Chrome patched a high-severity zero-day, CVE-2023-3079, actively exploited in the wild.

CVE-2023-3079 ssvc:attend severity:HIGH poc-released active-exploitation zero-day cisa-kev kev confirmed-exploited has-poc

CSURFACE · 2022-06-11 ·Highlight

AvosLocker Ransomware Exploits Confluence Servers and Disables Antivirus

AvosLocker ransomware exploits Confluence servers and uses novel techniques to disable antivirus protection.

has-threat-actor

CSURFACE · 2021-06-11 ·Highlight

Avaddon Ransomware Group Shuts Down, Releases Decryption Keys

Avaddon ransomware group unexpectedly shuts down, releasing decryption keys to victims.

has-threat-actor