PHP-CGI RCE Flaw Exploited in Attacks on Japan’s Tech, Telecom, and E-Commerce Sectors

PHP-CGI RCE Flaw Exploited in Attacks on Japan’s Tech, Telecom, and E-Commerce Sectors

/in

Threat actors of unknown provenance have been attributed to a malicious campaign predominantly targeting organizations in Japan since January 2025.
“The attacker has exploited the vulnerability CVE-2024-4577, a remote code execution (RCE) flaw in the PHP-CGI implementation of PHP on Windows, to gain initial access to victim machines,” Cisco Talos researcher Chetan Raghuprasad said in a technical

The Hacker News – ​Read More

Armis Acquires OTORIO to Expand OT Exposure Management PlatformArmis Acquires OTORIO to Expand OT Exposure Management PlatformIntel Maps New vPro Chips to MITRE’s ATT&CK FrameworkIntel Maps New vPro Chips to MITRE’s ATT&CK Framework