Bugs and exploit code are public

Bugs and exploit code are public

4 years ago
Anonymous $jLg5ANTo37

https://www.bleepingcomputer.com/news/security/hackers-exploit-salt-rce-bugs-in-widespread-attacks-pocs-public/

Hackers kept busy this weekend exploiting vulnerable Salt instances used in various infrastructures for server management and automation.

Among the organizations that announced an intrusion are LineageOS, Vates (creators of open source Xen Orchestra), Ghost blogging platform, and DigiCert. Hundreds of servers, both masters and clients (minions) have likely been compromised at this point.