The advanced persistent threat group also relied on SOCKS proxies like SoftEther VPN, tunneling tools that act as a middleman between victim and attacker.
A vulnerability categorized as problematic has been discovered in Microsoft Enterprise Security Token Service. Affected is an unknown function. Executing a manipulation can lead to information disclosure.
This vulnerability is registered as CVE-2026-40379. It is possible to launch the attack remotely. No exploit is available.
A vulnerability was found in Linux Kernel up to 6.19.8. It has been declared as problematic. This impacts the function mlx5e_reset_txqsq_cc_pc of the component mlx5e. Such manipulation leads to privilege escalation.
This vulnerability is listed as CVE-2026-43466. The attack must be carried out from within the local network. There is no available exploit.
It is recommended to upgrade the affected component.
A vulnerability was found in Linux Kernel up to 6.12.77/6.18.18/6.19.8. It has been rated as critical. This vulnerability affects the function do_user_addr_fault. This manipulation causes denial of service.
The identification of this vulnerability is CVE-2026-43467. The attack needs to be done within the local network. There is no exploit available.
Upgrading the affected component is advised.