A server linked to the KeyPlug malware exposed various exploitation tools targeting Fortinet firewalls and VPNs, attributed to the RedGolf threat group. The server revealed multiple scripts exploiting vulnerabilities like CVE-2024-23108 and CVE-2024-23109, allowing unauthorized access to device controls. Evidence suggests potential corporate espionage, with a focus on Shiseido, underscoring the need for immediate security measures.

Apple issues mercenary spyware threat notifications
Apple has sent threat notifications to certain individuals it suspects may have been targeted by mercenary spyware attacks.