Chinese state-sponsored threat actors Volt Typhoon and Bronze Silhouette exploited a zero-day vulnerability (CVE-2024-39717) in Versa Director servers, which allows attackers to gain administrative access and deploy a custom web shell, VersaMem, to intercept and harvest credentials.  This web shell also enabled attackers to load additional Java code in memory by targeting ISP, MSP, and … Continue reading Chinese Hackers Exploit Versa Director Zero-Day to Hit IT Sectors