Last Tuesday, I reported that in-the-wild attacks exploiting two critical 10 and 9.9) vulnerabilities in the ancient WS_FTP Server software had begun.
https://arstechnica.com/security/2023/10/active-attacks-exploiting-ws_ftp-pose-a-grave-threat-to-the-internet/
Sentinel One today reports the attacks continue.
https://www.sentinelone.com/blog/threat-actors-actively-exploiting-progress-ws_ftp-via-multiple-attack-chains/
Dan Goodin /
npub1yy…p6r3v
2023-10-09 17:55:28
Author Public Key
npub1yyl6ktycvjymch9hyzq5yqphj89kalfqmtswcjpjmp7s67ms6g9sdp6r3vPublished at
2023-10-09 17:55:28Event JSON
{
"id": "d7aa976bde25983e3a03e3a80cd417b472c2d09f99c669012900de73977d4127",
"pubkey": "213fab2c986489bc5cb7208142003791cb6efd20dae0ec4832d87d0d7b70d20b",
"created_at": 1696866928,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/users/dangoodin/statuses/111205871047768257",
"activitypub"
]
],
"content": "Last Tuesday, I reported that in-the-wild attacks exploiting two critical 10 and 9.9) vulnerabilities in the ancient WS_FTP Server software had begun. \n\nhttps://arstechnica.com/security/2023/10/active-attacks-exploiting-ws_ftp-pose-a-grave-threat-to-the-internet/\n\nSentinel One today reports the attacks continue.\n\nhttps://www.sentinelone.com/blog/threat-actors-actively-exploiting-progress-ws_ftp-via-multiple-attack-chains/",
"sig": "6ab9f8e680922f977a724760d124a227e54c8d466de706e727dfafa0ddd152aae3a297c9adeee7dec69783cba4e77db42fa301fb6b855b8179cc745df16fa4f7"
}