RASPBERRY ROBIN KEEPS RIDING THE WAVE OF ENDLESS 1-DAYS

Summary from the TLDR InfoSec newsletter

Raspberry Robin operators are utilizing fresh 1-day exploits for privilege escalation, suggesting the team has access to exploit sellers or in-house development. The rapidly evolving QNAP malware acts as an initial access vector for payloads like ransomware.