Hacker Havoc: Old Vulnerabilities Resurface as Cyber Criminals Pounce on Unpatched Devices
Increased hacker activity targets poorly maintained devices vulnerable to old security issues. GreyNoise reports spikes in exploitation of CVE-2022-47945 and CVE-2023-49103, affecting ThinkPHP and ownCloud. Despite updates, many systems remain unpatched. Protect yourself by upgrading and securing potentially vulnerable instances.
Hot Take:
In the never-ending game of cat and mouse between hackers and IT professionals, it seems our feline friends are getting a little lazy. Hackers are exploiting vulnerabilities from last year like they’re trying to clear out their 2022 to-do list. Maybe it’s time to do some much-needed spring cleaning on those dusty old devices and give hackers a run for their money!
Key Points:
- Hackers are exploiting vulnerabilities in ThinkPHP Framework and ownCloud, which were disclosed in 2022 and 2023.
- GreyNoise reports a significant increase in exploitation attempts for CVE-2022-47945 and CVE-2023-49103.
- ThinkPHP Framework’s vulnerability allows for executing arbitrary commands, while ownCloud’s flaw exposes sensitive PHP environment details.
- Despite updates being available, many systems remain unpatched, leaving them vulnerable to attacks.
- Users are advised to update their systems and consider additional security measures like firewalls.
Already a member? Log in here