Attempts to breach poorly maintained devices that are susceptible to outdated security flaws from 2022 and 2023 have shown an increase in hacker activity.
Increases in actors using CVE-2022-47945 and CVE-2023-49103, which impact the ThinkPHP Framework and the open-source ownCloud solution for file sharing and syncing, are being reported by threat monitoring platform GreyNoise.
Both vulnerabilities are quite serious and can be used to steal confidential information (such as the admin password, mail server credentials, or licensing key) or to run arbitrary operating system instructions read more about Surge in attacks exploiting old ThinkPHP and ownCloud flaws.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.