FaCai团伙利用APT技术针对国内的攻击活动分析

DBAPPSecurity cybersecurity · Recent · Original source

事件概述自微软默认禁用了来自互联网的文档中的Office宏之后，其他类型的恶意负载如JavaScript、MSI文件、LNK对象和ISO文件的使用量就开始急剧... Read More Read More FaCai团伙利用APT技术针对国内的攻击活动分析最先出现在安恒威胁情报中心。

Related Vulnerabilities

CVE-2026-6057: FalkorDB Browser 1.9.3 contains an unauthenticated path traversal vulnerability in the file upload A CRITICAL
CVE-2026-22750: When configuring SSL bundles in Spring Cloud Gateway by using the configuration property spring.ssl. HIGH
CVE-2025-58920: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i HIGH
CVE-2026-35602: Vikunja has File Size Limit Bypass via Vikunja Import MEDIUM
CVE-2026-40212: OpenStack Skyline before 5.0.1, 6.0.0, and 7.0.0 has a DOM-based Cross-Site Scripting (XSS) vulnerab MEDIUM