Chinese Hackers Exploit Latest SolarWinds 0-Day to Target U.S. Defense Firms

Microsoft on Tuesday disclosed that the latest string of attacks targeting SolarWinds Serv-U managed file transfer service with a now-patched remote code execution (RCE) exploit is the handiwork of a Chinese threat actor dubbed "DEV-0322." The revelation comes days after the Texas-based IT monitoring software maker issued fixes for the flaw that could enable adversaries to remotely run arbitrary

from The Hacker News https://ift.tt/3B2sqQM
via IFTTT