Lucene search

K
hiveproHiveForce LabsHIVEPRO:2B031BDA0D1C7C4FD24AAC1725C19B2E
HistoryJan 04, 2024 - 1:58 p.m.

Attacks, Vulnerabilities and Actors 25 December to 31 December 2023

2024-01-0413:58:08
HiveForce Labs
www.hivepro.com
16
cybersecurity threats
executed attacks
adversary activity
exploited vulnerability
operation rusticweb
india
apache ofbiz
bypass authentication
server-side request forgery (ssrf)
arbitrary code execution
threat digests
newsletters.

8.3 High

AI Score

Confidence

Low

0.639 Medium

EPSS

Percentile

97.9%

For a detailed threat digest, download the pdf file here Summary HiveForce Labs has recently made several significant discoveries related to cybersecurity threats. Over the past week, we identified a total of eight executed attacks, four instances of adversary activity, and five exploited vulnerability, highlighting the ever-present danger of cyberattacks. Furthermore, HiveForce Labs uncovered Operation RusticWeb, targeting India to deploying Rust-based malware. Meanwhile, a high severity zero-day vulnerability (CVE-2023-51467), in Apache OFBiz that could result in bypass authentication to achieve a simple Server-Side Request Forgery (SSRF) or enable arbitrary code execution. These observed attacks have been on the rise, posing a significant threat worldwide. Subscribe to receive our weekly threat digests and newsletters directly in your inbox.

8.3 High

AI Score

Confidence

Low

0.639 Medium

EPSS

Percentile

97.9%