THREAT ACTORS EXPLOIT ADOBE COLDFUSION CVE-2023-26360 FOR INITIAL ACCESS TO GOVERNMENT SERVERS

Summary from the TLDR InfoSec newsletter

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a cybersecurity advisory in response to the exploitation of CVE-2023-26360 by unidentified threat actors at a Federal Civilian Executive Branch (FCEB) agency. At least two public-facing servers were compromised between June and July 2023. The advisory provides network defenders with tactics, techniques, and procedures (TTPs), indicators of compromise (IOCs), and methods to detect and protect against similar exploitation.