Feb 10, 2023
1 new incident, 1 with updates.
Started
- ClosedPatched
TerraMaster OS: Remote Command Execution (CVE-2022-24990)
TerraMaster OS contains a remote command execution vulnerability that allows an unauthenticated user to execute commands on the target endpoint. Added to CISA KEV on 2023-02-10. CISA lists known use in ransomware campaigns.
TerraMaster OSClosed Feb 10, 2023
Updated
- ClosedPatched
Fortra GoAnywhere MFT zero-day: Cl0p claims 130 victims
A pre-auth deserialization/command injection in the GoAnywhere MFT admin console's License Response Servlet was exploited as a zero-day. The Cl0p gang said it stole data from more than 130 organisations, a rehearsal for the later MOVEit campaign.
Fortra GoAnywhere MFTClosed Feb 10, 2023
