Zero-Day Alert: Lace Tempest Exploits SysAid IT Support Software Vulnerability

The threat actor known as Lace Tempest has been linked to the exploitation of a zero-day flaw in SysAid IT support software in limited attacks, according to new findings from Microsoft.
Lace Tempest, which is known for distributing the Cl0p ransomware, has in the past leveraged zero-day flaws in MOVEit Transfer and PaperCut servers.
The issue, tracked as CVE-2023-47246, concerns a path traversal

actor alert attacks cl0p cl0p ransomware exploitation exploits findings flaw flaws it support lace tempest microsoft moveit ransomware software software vulnerability support sysaid tempest threat threat actor vulnerability zero-day zero-day flaw zero-day flaws