CENTRESTACK RCE EXPLOITED AS ZERO-DAY TO BREACH FILE SHARING SERVERS

Summary from the TLDR InfoSec newsletter

Gladinet has warned of a vulnerability in its CentreStack file-sharing software that has been under active exploitation since March. The vulnerability is a deserialization vulnerability stemming from using a hardcoded machineKey. Galdinet has recommended that customers apply patches immediately or rotate the machine keys if immediate patching is not possible.