HACKERS EXPLOIT TRIOFOX ZERO-DAY TO DEPLOY MALICIOUS PAYLOADS USING ANTI-VIRUS FEATURE

Summary from the TLDR InfoSec newsletter

Researchers from Mandiant discovered a critical zero-day in Gladinet's Triofox file-sharing platform. The vulnerability allowed unauthenticated attackers to login to the platform by changing the HTTP host header to localhost. The attackers then configured the anti-virus scanner path to a malicious batch script.