Hackers are using GitHub-hosted PowerShell scripts and a WinRAR vulnerability to target government organizations across the Commonwealth of Independent States (CIS). Cisco Talos and Recorded Future’s Insikt Group investigated the activity, tracked as UAT-6275 by Talos and TAG-193 by Recorded Future. The investigation covered activity from June... Weiterlesen: Hackers Use GitHub PowerShell and WinRAR Exploit to Target CIS Govern…
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Use GitHub PowerShell and WinRAR Exploit to Target CIS Governments
Hackers are using GitHub-hosted PowerShell scripts and a WinRAR vulnerability to target government organizations across the Commonwealth of Independent States…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1059TA0002 · Execution
Command and Scripting Interpreter
Mitigation: M1038 Execution Prevention & Script Block Logging
Quelle: Kontext-Klassifikation des Artikeltextes
Execution
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
16 Quellen
Security: Mehrere Probleme in perl-CLI-Simple (Fedora)
15 weitere Quellen
PPro-Linuxvor 6 Std.Security: Mehrere Probleme in perl-HTML-Query (Fedora) PPro-Linuxvor 6 Std.Security: Mehrere Probleme in perl-Text-Markdown-Discount (Fedora) PPro-Linuxvor 6 Std.Security: Mehrere Probleme in perl-Encoding-FixLatin (Fedora) PPro-Linuxvor 6 Std.Security: Mehrere Probleme in rt (Fedora) PPro-Linuxvor 6 Std.Security: Mehrere Probleme in perl-Badger (Fedora) PPro-Linuxvor 6 Std.Security: Mehrere Probleme in perl-CSS-Inliner (Fedora)
+9
16 Quellen
CVE-2026-90085 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 octeontx2-af tm_tree rvu_dbg_nix_tm_tree_display sq_ctx null pointer dereference (WID-SEC-2026-3444)
15 weitere Quellen
VVulDB Updatesvor 10 Std.CVE-2026-90086 | Linux Kernel up to 6.18.51/7.2.5 xsk xsk_tx_metadata_request state issue (WID-SEC-2026-3444) VVulDB Updatesvor 10 Std.CVE-2026-90087 | Linux Kernel up to 7.2.5 Bluetooth create_le_conn_complete allocation of resources (WID-SEC-2026-3444) VVulDB Updatesvor 10 Std.CVE-2026-90091 | Linux Kernel up to 7.2.5 L2CAP l2cap_sock_cleanup_listen null pointer dereference (WID-SEC-2026-3444) VVulDB Updatesvor 10 Std.CVE-2026-90092 | Linux Kernel up to 7.2.5 L2CAP l2cap_sock_new_connection_cb use after free (WID-SEC-2026-3444) VVulDB Updatesvor 10 Std.CVE-2026-90093 | Linux Kernel up to 7.2.5 L2CAP l2cap_sock.c l2cap_sock_setsockopt use after free (WID-SEC-2026-3444) VVulDB Updatesvor 9 Std.CVE-2026-90095 | Linux Kernel FUSE fuse_uring_cmd deadlock (WID-SEC-2026-3444)
+9
8 Quellen
CVE-2025-10536 | Mozilla Firefox up to 142 information disclosure (Nessus ID 265350 / WID-SEC-2025-2074)
7 weitere Quellen
VVulDB Updatesvor 4 Std.CVE-2025-10532 | Mozilla Firefox up to 142 unusual condition (Nessus ID 265341 / WID-SEC-2025-2074) VVulDB Updatesvor 4 Std.CVE-2025-10529 | Mozilla Firefox up to 142 cross-domain policy (Nessus ID 265341 / WID-SEC-2025-2074) VVulDB Updatesvor 4 Std.CVE-2025-10533 | Mozilla Firefox up to 142 integer overflow (Nessus ID 265350 / WID-SEC-2025-2074) VVulDB Updatesvor 4 Std.CVE-2025-10527 | Mozilla Firefox up to 142 use after free (Nessus ID 265341 / WID-SEC-2025-2074) VVulDB Updatesvor 4 Std.CVE-2025-10528 | Mozilla Firefox up to 142 protection mechanism (Nessus ID 265341 / WID-SEC-2025-2074) VVulDB Updatesvor 10 Std.CVE-2026-90094 | Linux Kernel up to 6.18.51/7.2.5 arm64 information disclosure (WID-SEC-2026-3444)
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4272090/sicherheitsluecken-cve/hackers-use-github-powershell-and-winrar-exploit-to-target-cis-governments/