BitBucket Server and Data Center at risk via Command Injection Vulnerability
Cyble analyzes CVE-2022-36804 affecting Atlassian Bitbucket and how Threat Actors may exploit this in the near future.
Exploit
Zimbra Email Vulnerability (CVE-2022-37042) Weaponized to Cause Large-scale Compromise
Cyble Research & Intelligence Labs (CRIL) analyzes a large-scale exploitation of about 2,700 email domains compromised through weaponized vulnerabilities.
Palo Alto Recognizes Vulnerability Impacting PAN-OS® (CVE-2022-0028)
Cyble Research & Intelligence Labs analyzes recent Threat Actor behavior exploiting the Palo Alto Networks Vulnerability to target exposed assets on the internet.
Active exploitation of Zimbra Collaborative Suite (ZCS)
Cyble analyzes the ongoing, active exploitation of the Zimbra Collaborative Suite and the multiple CVEs being leveraged for cyberattacks.
Targeted Attacks being carried out via DLL SideLoading
Cyble Analyzes how Threat Actors are leveraging Microsoft applications and DLL Sideloading to deliver Cobalt Strike Beacons
Amazon S3 Bucket Misconfigurations Continue to Trouble Enterprises
Cyble takes a look at how entities of all sizes continue to be plagued by Threat Actors exploiting misconfigured Amazon S3 buckets as attack vectors.
