article thumbnail

APT trends report Q1 2021

SecureList

On February 24, the National Security Defense Council of Ukraine (NSDC) publicly warned that a threat actor had exploited a national documents circulation system (SEI EB) to distribute malicious documents to Ukrainian public authorities. We attribute this activity to APT10 with high confidence.

Malware 137
article thumbnail

VulnRecap 3/4/24 – Ivanti, Ubiquiti, AppLocker Under Attack

eSecurity Planet

February 29, 2024 Factory Resets of Ivanti VPN Appliances Don’t Remove Hacker Presence Type of vulnerability: Persistent unauthenticated user resource access. March 1, 2024 HikVision Warns of Security Management System Vulnerability Type of vulnerability: Insufficient server-side validation. and a medium (CVSS 4.3) level vulnerability.

IoT 117