{"id":12109,"date":"2023-01-05T04:15:54","date_gmt":"2023-01-05T11:15:54","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?p=12109"},"modified":"2023-04-19T03:59:56","modified_gmt":"2023-04-19T10:59:56","slug":"securins-threat-intelligence-january-02-2023-january-06-2023","status":"publish","type":"post","link":"https:\/\/webdev.securin.xyz\/articles\/securins-threat-intelligence-january-02-2023-january-06-2023\/","title":{"rendered":"Securin&#8217;s Threat Intelligence &#8211; Jan 02, 2023 &#8211; Jan 06, 2023"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"12109\" class=\"elementor elementor-12109\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-43e2a9ac elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"43e2a9ac\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-7639251f\" data-id=\"7639251f\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-332585c elementor-widget elementor-widget-text-editor\" data-id=\"332585c\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>This edition brings you early warnings, trending news about cyber threats, and the accurate threat context. Check out which threat group is on the rampage, what vulnerability it could soon weaponize, and more.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6b9fcb8 elementor-widget elementor-widget-spacer\" data-id=\"6b9fcb8\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f2b5784 elementor-widget elementor-widget-heading\" data-id=\"f2b5784\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Why play catch up when you can fix it now?<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-35c9d90 elementor-widget elementor-widget-spacer\" data-id=\"35c9d90\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4449954 elementor-widget elementor-widget-text-editor\" data-id=\"4449954\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p dir=\"ltr\" style=\"text-align: center;\"><span style=\"font-size: 18px;\"><span style=\"color: #0000cd;\"><strong>Check out our Threat Intelligence Podcast featuring Top Three Threats of the Week!<\/strong><\/span><\/span><\/p><div style=\"padding: 56.25% 0 0 0; position: relative;\"><iframe style=\"position: absolute; top: 0; left: 0; width: 100%; height: 100%;\" title=\"January 6_CSW Threat Intelligence PODCAST.mp4\" src=\"https:\/\/player.vimeo.com\/video\/787519306?h=9c9d5f1171&amp;badge=0&amp;autopause=0&amp;player_id=0&amp;app_id=58479\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/div>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e8f7a74 elementor-widget elementor-widget-spacer\" data-id=\"e8f7a74\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0338397 elementor-widget elementor-widget-heading\" data-id=\"0338397\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Trending Threats<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c4ade28 elementor-widget elementor-widget-text-editor\" data-id=\"c4ade28\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul dir=\"ltr\"><li><a href=\"#Miuutis-Campaign-Against-the-Gaming-Industry\">Miuuti\u2019s Campaign Against the Gaming Industry<\/a><\/li><li><a href=\"#Malware-Affecting-MacOS-in-2022\">Malware Affecting MacOS in 2022<\/a><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ce0559d elementor-widget elementor-widget-heading\" data-id=\"ce0559d\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Vulnerabilities to Watch Out For<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bbd0d56 elementor-widget elementor-widget-text-editor\" data-id=\"bbd0d56\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul dir=\"ltr\"><li><a href=\"#CVE-2022-43931-Critical-Vulnerability-in-Synology\">CVE-2022-43931: Critical Vulnerability in Synology<\/a><\/li><li><a href=\"#CVE-2022-47523-Critical-ManageEngine-Bug\">CVE-2022-47523: Critical ManageEngine Bug<\/a><\/li><li><a href=\"#Multiple-Command-Injection-Vulnerabilities-in-Fortinet-Products\">Multiple Command Injection Vulnerabilities in Fortinet Products<\/a><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-54f2922 elementor-widget elementor-widget-spacer\" data-id=\"54f2922\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f132bcb elementor-widget elementor-widget-heading\" data-id=\"f132bcb\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Trending Threats<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f8a426f elementor-widget elementor-widget-spacer\" data-id=\"f8a426f\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9e0cb81 elementor-widget elementor-widget-menu-anchor\" data-id=\"9e0cb81\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"menu-anchor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-menu-anchor\" id=\"Miuutis-Campaign-Against-the-Gaming-Industry\"><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-61c9249 elementor-widget elementor-widget-heading\" data-id=\"61c9249\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Miuuti\u2019s Campaign Against the Gaming Industry<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e1f6132 elementor-widget elementor-widget-text-editor\" data-id=\"e1f6132\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p dir=\"ltr\">Miuuti Group has recently set its sights on the gaming industry. Since 2015 this group has exploited multiple zero-day vulnerabilities to infiltrate communication software. In recent years, however, they have used two zero-day vulnerabilities to attack several gaming companies &#8211; a CVE-unassigned vulnerability and CVE-2021-21220. The first vulnerability allows direct execution of arbitrary codes so attackers can gain a foothold inside the gaming company and conduct further lateral penetration.<\/p><p dir=\"ltr\"><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-21220\" target=\"_blank\" rel=\"noopener\">CVE-2021-21220<\/a> allows the realization of asar hijacking to trigger remote code execution and eventually the takeover of the command center. Both the vulnerabilities have been fixed by the respective companies.<\/p><p dir=\"ltr\">Usually, third-party downloads of gaming software allow such attacks to happen. Gamers need to ensure that they download only the legitimate versions of online games.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fc7d7a5 elementor-widget elementor-widget-spacer\" data-id=\"fc7d7a5\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-665c16d elementor-widget elementor-widget-menu-anchor\" data-id=\"665c16d\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"menu-anchor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-menu-anchor\" id=\"Malware-Affecting-MacOS-in-2022\"><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-03885c2 elementor-widget elementor-widget-heading\" data-id=\"03885c2\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Malware Affecting MacOS in 2022<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3a09f19 elementor-widget elementor-widget-text-editor\" data-id=\"3a09f19\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p dir=\"ltr\">A <a href=\"https:\/\/objective-see.org\/blog\/blog_0x71.html\" target=\"_blank\" rel=\"noopener\">recent report<\/a> details the malware that impacted macOS in 2022. Given below are the details of the malware:<\/p><table><colgroup> <col width=\"168\" \/> <col width=\"144\" \/> <col width=\"156\" \/> <col width=\"156\" \/> <\/colgroup><tbody><tr><td><p dir=\"ltr\">Malware Name<\/p><\/td><td><p dir=\"ltr\">Description<\/p><\/td><td><p dir=\"ltr\">Month of Origin<\/p><\/td><td><p dir=\"ltr\">CVEs Associated<\/p><\/td><\/tr><tr><td><p dir=\"ltr\">SysJoker<\/p><\/td><td><p dir=\"ltr\">A Simple cross-platform backdoor with download and execute capabilities<\/p><\/td><td><p dir=\"ltr\">Jan 2022<\/p><\/td><td>\u00a0<\/td><\/tr><tr><td><p dir=\"ltr\">DazzleSpy<\/p><\/td><td><p dir=\"ltr\">A cyber-espionage implant deployed via Safari exploits.<\/p><\/td><td><p dir=\"ltr\">Jan 2022<\/p><\/td><td><p dir=\"ltr\"><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-30869\" target=\"_blank\" rel=\"noopener\">CVE-2021-30869<\/a>, <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2019-8526\" target=\"_blank\" rel=\"noopener\">CVE-2019-8526<\/a>, <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-1789\" target=\"_blank\" rel=\"noopener\">CVE-2021-1789<\/a><\/p><\/td><\/tr><tr><td><p dir=\"ltr\">CoinMiner<\/p><\/td><td><p dir=\"ltr\">A crypto-currency miner using open source components<\/p><\/td><td><p dir=\"ltr\">Mar 2022<\/p><\/td><td>\u00a0<\/td><\/tr><tr><td><p dir=\"ltr\">Gimmick<\/p><\/td><td><p dir=\"ltr\">A multi-platform backdoor using cloud providers for command &amp; control<\/p><\/td><td><p dir=\"ltr\">Mar 2022<\/p><\/td><td>\u00a0<\/td><\/tr><tr><td><p dir=\"ltr\">oRat<\/p><\/td><td><p dir=\"ltr\">An APT group malware backdoor with the ability to construct a custom command &amp; control server<\/p><\/td><td><p dir=\"ltr\">Apr 2022<\/p><\/td><td>\u00a0<\/td><\/tr><tr><td><p dir=\"ltr\">CrateDepression<\/p><\/td><td><p dir=\"ltr\">A malware spread through &#8220;typosquatting&#8221; of a Rust Crate. Installs persistent Poseidon agent<\/p><\/td><td><p dir=\"ltr\">May 2022<\/p><\/td><td>\u00a0<\/td><\/tr><tr><td><p dir=\"ltr\">Pymafka<\/p><\/td><td><p dir=\"ltr\">A malware spread through &#8220;typosquatting&#8221; of a Python package. Installs compiled Cobalt Strike agent<\/p><\/td><td><p dir=\"ltr\">May 2022<\/p><\/td><td>\u00a0<\/td><\/tr><tr><td><p dir=\"ltr\">VPN Trojan (\u201cCOVID\u201d)<\/p><\/td><td><p dir=\"ltr\">A persistent backdoor downloading and executing 2nd-stage payloads from memory<\/p><\/td><td><p dir=\"ltr\">Jul 2022<\/p><\/td><td>\u00a0<\/td><\/tr><tr><td><p dir=\"ltr\"><a href=\"https:\/\/cybersecurityworks.com\/blog\/cyber-risk\/csws-threat-intelligence-july-18-2022-july-22-2022.html\" target=\"_blank\" rel=\"noopener\">CloudMensis<\/a><\/p><\/td><td><p dir=\"ltr\">A malware using cloud providers for command &amp; control.\u00a0 Exfiltrates documents, keystrokes, and screenshots<\/p><\/td><td><p dir=\"ltr\">Jul 2022<\/p><\/td><td>\u00a0<\/td><\/tr><tr><td><p dir=\"ltr\">rShell<\/p><\/td><td><p dir=\"ltr\">A backdoor delivered via supply-chain attacks. Offers basic capabilities to the remote attacker<\/p><\/td><td><p dir=\"ltr\">Aug 2022<\/p><\/td><td>\u00a0<\/td><\/tr><tr><td><p dir=\"ltr\"><a href=\"https:\/\/cybersecurityworks.com\/blog\/cyber-risk\/csws-threat-intelligence-october-10-2022-october-14-2022.html#Alchimist%20:%20New%20Attack%20Framework%20Designed%20using%20Go%20Lang\" target=\"_blank\" rel=\"noopener\">Insekt<\/a><\/p><\/td><td><p dir=\"ltr\">The Alchimist attack framework deploys cross-platform &#8220;Insekt&#8221; payloads including macOS variants.<\/p><\/td><td><p dir=\"ltr\">Oct 2022<\/p><\/td><td><p dir=\"ltr\"><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-4034\" target=\"_blank\" rel=\"noopener\">CVE-2021-4034<\/a><\/p><\/td><\/tr><tr><td><p dir=\"ltr\">KeySteal<\/p><\/td><td><p dir=\"ltr\">A keychain stealer embedded in the trojanized copy of ResignTool<\/p><\/td><td><p dir=\"ltr\">Nov 2022<\/p><\/td><td>\u00a0<\/td><\/tr><tr><td><p dir=\"ltr\">SentinelSneak<\/p><\/td><td><p dir=\"ltr\">A malicious Python package targeting developers and exfiltrating sensitive data through &#8220;typosquatting&#8221;<\/p><\/td><td><p dir=\"ltr\">Dec 2022<\/p><\/td><td>\u00a0<\/td><\/tr><\/tbody><\/table><h2 dir=\"ltr\" style=\"text-align: center;\">\u00a0<\/h2>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ca0d2d7 elementor-widget elementor-widget-heading\" data-id=\"ca0d2d7\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Vulnerabilities to Watch Out For<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-21f4005 elementor-widget elementor-widget-spacer\" data-id=\"21f4005\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-eb58075 elementor-widget elementor-widget-menu-anchor\" data-id=\"eb58075\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"menu-anchor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-menu-anchor\" id=\"CVE-2022-43931-Critical-Vulnerability-in-Synology\"><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5bc6fc6 elementor-widget elementor-widget-heading\" data-id=\"5bc6fc6\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">CVE-2022-43931: Critical Vulnerability in Synology<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c828a72 elementor-widget elementor-widget-text-editor\" data-id=\"c828a72\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p dir=\"ltr\">Synology is a Taiwanese Network-Attached Storage device maker. Recently they fixed a vulnerability that affected their routers configured to run as VPN servers. <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-43931\" target=\"_blank\" rel=\"noopener\">CVE-2022-43931<\/a> occurs in the VPN Plus Server that allows administrators to set up Synology routers as a VPN server to allow remote access to resources behind the router. It can be exploited in low-complexity attacks without requiring privileges on the targeted routers or user interaction and leads to remote code execution..<\/p><p dir=\"ltr\">Synology published a <a href=\"https:\/\/www.synology.com\/en-us\/security\/advisory\/Synology_SA_22_26\" target=\"_blank\" rel=\"noopener\">security advisory<\/a> to patch this vulnerability.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c6e2411 elementor-widget elementor-widget-spacer\" data-id=\"c6e2411\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5e301ca elementor-widget elementor-widget-menu-anchor\" data-id=\"5e301ca\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"menu-anchor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-menu-anchor\" id=\"CVE-2022-47523-Critical-ManageEngine-Bug\"><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b2893cc elementor-widget elementor-widget-heading\" data-id=\"b2893cc\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">CVE-2022-47523: Critical ManageEngine Bug<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-829bf3d elementor-widget elementor-widget-text-editor\" data-id=\"829bf3d\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p dir=\"ltr\">ManageEngine urges all their customers to patch a critical security flaw affecting multiple products. CVE-2022-47523 is a SQL injection vulnerability in Password Manager Pro secure vault, PAM360 privileged access management software, and Access Manager Plus privileged session management solution. Exploiting this vulnerability will allow unauthenticated access to the backend database.<\/p><p dir=\"ltr\">ManageEngine released a <a href=\"https:\/\/pitstop.manageengine.com\/portal\/en\/community\/topic\/manageengine-security-advisory%e2%80%94important-security-fix-released-for-manageengine-password-manager-pro-2-1-2023#:~:text=critical%20security%20vulnerability\" target=\"_blank\" rel=\"noopener\">security advisory<\/a> to patch this bug.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-583275e elementor-widget elementor-widget-spacer\" data-id=\"583275e\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c23c12a elementor-widget elementor-widget-menu-anchor\" data-id=\"c23c12a\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"menu-anchor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-menu-anchor\" id=\"Multiple-Command-Injection-Vulnerabilities-in-Fortinet-Products\"><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d6f7ea4 elementor-widget elementor-widget-heading\" data-id=\"d6f7ea4\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Multiple Command Injection Vulnerabilities in Fortinet Products<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7107076e elementor-widget elementor-widget-text-editor\" data-id=\"7107076e\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p dir=\"ltr\">CVE-2022-39947 and CVE-2022-35845 are two critical vulnerabilities in FortiADC web interface and FortiTester respectively.<\/p><p dir=\"ltr\">CVE-2022-39947 can allow an authenticated attacker with access to the web GUI to execute unauthorized code or commands via specifically crafted HTTP requests. Fortinet released the patches in an\u00a0 <a href=\"https:\/\/www.fortiguard.com\/psirt\/FG-IR-22-061\" target=\"_blank\" rel=\"noopener\">advisory<\/a>.<\/p><p dir=\"ltr\">CVE-2022-35845 could lead to arbitrary command execution in the underlying shell. However, to exploit this vulnerability an attacker needs authentication. <a href=\"https:\/\/www.fortiguard.com\/psirt\/FG-IR-22-274\" target=\"_blank\" rel=\"noopener\">Here<\/a> is the security advisory for this vulnerability.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4e0d43c elementor-widget elementor-widget-spacer\" data-id=\"4e0d43c\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-2fdbe5e elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"2fdbe5e\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-8b45979\" data-id=\"8b45979\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-8d19aab elementor-widget elementor-widget-spacer\" data-id=\"8d19aab\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3c72dac elementor-widget elementor-widget-text-editor\" data-id=\"3c72dac\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p dir=\"ltr\" style=\"text-align: center;\">Follow our weekly Threat Intelligence Series and podcast for proactive alerts on trending threats.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-147fd06 elementor-widget elementor-widget-spacer\" data-id=\"147fd06\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>We bring you threats that are currently trending as well as new vulnerabilities that hackers are exploiting.<\/p>\n","protected":false},"author":1,"featured_media":13471,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[80,146],"tags":[116,103],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/posts\/12109"}],"collection":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/comments?post=12109"}],"version-history":[{"count":32,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/posts\/12109\/revisions"}],"predecessor-version":[{"id":17818,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/posts\/12109\/revisions\/17818"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media\/13471"}],"wp:attachment":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media?parent=12109"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/categories?post=12109"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/tags?post=12109"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}