New CISA Advisory: Threat Actors Exploited Adobe ColdFusion Vulnerability (CVE-2023-26360) to Target Government Servers

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a Cybersecurity Advisory (CSA), regarding exploitation of a vulnerability in Adobe ColdFusion, targeting government-related servers. The advisory aims to guide organizations in enhancing their security posture against the exploitation of this vulnerability by providing known Indicators of Compromise (IOCs) and Tactics, Techniques, and Procedures (TTPs).

About the Vulnerability in Adobe ColdFusion (CVE-2023-26360)

CISA cautions that unidentified threat actors have exploited an Adobe ColdFusion vulnerability within a Federal Civilian Executive Branch (FCEB) …

adobe adobe coldfusion advisory agency cisa cisa advisory coldfusion csa cve cve-2023-26360 cybersecurity cybersecurity advisory exploitation exploited government guide infrastructure infrastructure security organizations posture security security posture servers target targeting threat threat actors vulnerability