Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Microsoft's DART team discovered two distinct threat actors operating simultaneously within the same victim network, complicating incident response efforts. The investigation began with ransomware activity linked to Storm-2603, which exploited vulnerabilities in on-premises SharePoint servers. The a...
Cyber threat actors are exploiting a critical unauthenticated access vulnerability in Gladinet’s Triofox file-sharing platform, tracked as CVE-2025-12480. This vulnerability allows unauthorized administrative access and has been actively weaponized since August 2025 by the threat cluster UNC6485, wh...
The Clop ransomware group is conducting a data extortion campaign against Gladinet CentreStack file servers. This attack exploits multiple security vulnerabilities in CentreStack and its related product, Triofox, affecting businesses that rely on these file transfer solutions.
Hackers are exploiting a cryptographic vulnerability in Gladinet's CentreStack and Triofox products, which allows for remote code execution. The flaw involves hardcoded cryptographic keys in the AES implementation, enabling unauthorized access to sensitive files. Gladinet has advised customers to up...
