Copy-Paste Compromises: Threat Actors Target Telerik UI, Citrix, and SharePoint Vulnerabilities (CVE-2019-18935)

Threat actors utilize publicly available proof of concept code and exploit scripts to target unpatched vulnerabilities within organizations and government entities.

On June 19, the Australian Cyber Security Centre (ACSC) published Advisory 2020-008 in response to reports that threat actors were targeting Australian government agencies and companies. The full advisory includes information about multiple vulnerabilities the threat actors have been leveraging to target governments and organizations:

• CVE-2019-18935Telerik UI for ASP.NET AJAX
• CVE-2019-19781Citrix Application Delivery Controller (ADC) and Gateway
• CVE-2019-0604Microsoft SharePoint

For more information about the vulnerability, including the availability of patches and Tenable product coverage, please visit our blog.