Tagged “ransomware”
2 posts
ESXiArgs: a 2-year-old ESXi bug, then a global ransomware wave
CVE-2021-21974 sat patched and ignored for two years until ESXiArgs used it to ransom thousands of internet-exposed VMware ESXi hosts at once.
securitycvevmwareransomwarevirtualization
MOVEit and the MFT zero-day exploitation playbook
CVE-2023-34362 turned one SQL injection in MOVEit Transfer into 2,700+ breached organizations — and the same pattern keeps repeating against MFT software.
securitycveransomwareappsec