Mystery OAST Tool Exploits 200 CVEs via Google Cloud
Article Content
Browse articles 
A new tool, referred to as Mystery OAST, has been identified exploiting 200 Common Vulnerabilities and Exposures (CVEs) using Google Cloud infrastructure to conduct cyber attacks. This tool targets various systems and applications, posing significant risks to organizations relying on these technologies.
Ask AI about this cluster
Answers cite the sources they use
Updated 212d ago How this analysis works
More articles in this cluster (3)
Following this threat?
Track APT36, Ivanti and CVE-2025-4428 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
APT36 Launches Operation RapidRust with New Rust Malware Tools In August 2026, the Pakistan-nexus threat actor APT36 initiated Operation RapidRust, targeting government and defense organizations in India and Afghanistan. The campaign introduced several new Rust-based malware tools, including the RUSTYSHADE backdoor and RUSTYMOVE propagation tool. APT36 also deployed file-stealing… 
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…