Zoho Password Manager Flaw Torched by Godzilla Webshell
Researchers have spotted a second, worldwide campaign exploiting the ManagedEngine SelfServiceAD Plus zero-day: one that’s breached defense, energy and healthcare organizations.
A new campaign is prying apart a known security vulnerability in the Zoho ManageEngine ADSelfService Plus password manager, researchers warned over the weekend. The threat actors have managed to exploit the Zoho weakness in at least nine global entities across critical sectors so far (technology, defense, healthcare, energy and education), deploying the Godzilla webshell and exfiltrating data.
Read more in this article for Threat Post.
Featured Resources
View More Resources
Solution Brief
Control Validation and Optimization
Continuously validate and optimize security controls to improve prevention, detection and response effectiveness.
blog
Cymulate Joins Anthropic Cyber Verification Program
Cymulate has joined the Anthropic Cyber Verification Program, giving Cymulate Research Labs access to advanced AI capabilities for defensive cybersecurity research. This strengthens
blog
The Pipe That Trusted Everyone
Ilan Kalendarov, Security Research Team LeadBen Zamir, Security ResearcherElad Beber, Security Researcher How a single misconfigured named pipe let an