The eSentire Threat Response Unit reports ongoing exploitation of CVE-2019-18935, a six-year-old IIS vulnerability in Progress Telerik UI, allowing attackers to execute arbitrary code on unpatched servers. Threat actors use a reverse shell via w3wp.exe to gather system information, deploying tools like JuicyPotatoNG. Organizations should enhance patch management and utilize Endpoint Detection and Response solutions to mitigate these risks.
News – Scroller Home Page – Cyber attack on Connecticut Community Health Centre impacted over 1m patients – TEISS
A cyber attack on the Connecticut Community Health Centre has affected over one million patients. The incident, highlighted by TEISS, compels the healthcare industry to