UNC6512 — Threat Actor Profile, Campaigns & Targets

Related Threat Clusters

• FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation

  A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of…

  100 articles · Updated November 15, 2025
• Critical RCE Vulnerability in Windows Server Update Services Actively Exploited

  Microsoft has released an out-of-band security update for a critical vulnerability, CVE-2025-59287, in Windows Server Update Services (WSUS) that allows unauthenticated remote code execution. The vulnerability, stemming…

  17 articles · Updated November 1, 2025

Recent Intelligence Reports

• Dozens impacted by active WSUS vulnerability abuse — Scworld · November 3, 2025
• Windows Server Update Service exploitation ensnares at least 50 victims — Cybersecuritydive · October 31, 2025
• Attacks involving critical WSUS vulnerability under investigation — Scworld · October 29, 2025

Related Entities