Lucene search

K
hiveproHive ProHIVEPRO:BAFFCF69B7F47CA5AE5930835E549ECA
HistoryFeb 13, 2024 - 11:12 a.m.

Attacks, Vulnerabilities and Actors 5 to 11 February 2024

2024-02-1311:12:58
Hive Pro
www.hivepro.com
6
cybersecurity threats
persistent danger
attacks
vulnerabilities
adversaries
zero-day vulnerabilities
apache
microsoft windows smartscreen
fortinet fortios ssl-vpn
uac-0027 group
mispadu info stealer
mexican regions
cve-2023-36025
volt typhoon
critical infrastructure
rise in attacks
threat digests
newsletters

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

80.9%

For a detailed threat digest, download the pdf file here Summary HiveForce Labs recently made several significant discoveries in the realm of cybersecurity threats. In the past week alone, a total of five attacks were executed, six vulnerabilities were uncovered, and two active adversaries were identified. These findings underscore the persistent danger of cyberattacks. Furthermore, HiveForce Labs revealed three zero-day vulnerabilities in Apache, Microsoft Windows SmartScreen, and Fortinet FortiOS SSL-VPN. The entity identified as the UAC-0027 group executed a sophisticated cyber attack against Ukrainian organizations. The Mispadu info stealer, a malware known for targeting Spanish and Portuguese speakers, specifically targets Mexican regions and leverages the CVE-2023-36025 vulnerability to gain access. Volt Typhoon is actively targeting critical infrastructure in the United States, employing sophisticated tactics. These attacks are on the rise, posing a significant threat to users worldwide. Subscribe to receive our weekly threat digests and newsletters directly in your inbox.

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

80.9%