Threat Actors Exploit Progress Telerik Vulnerabilities in Multiple U.S. Government IIS Servers
"Analysts determined that multiple cyber threat actors, including an advanced persistent threat (APT) actor, were able to exploit a .NET deserialization vulnerability"
Cybersecurity and Infrastructure Security Agency (CISA) Joint Cybersecurity Advisory: "From November 2022 through early January 2023, the Cybersecurity and Infrastructure Security Agency (CISA) and authoring organizations identified the presence of indicators of compromise (IOCs) at a federal civilian executive branch (FCEB) agency.
Analysts determine…