CVE

CVE-2025-24799

View on NVD ↗

GLPI allows unauthenticated SQL injection through the inventory endpoint

Exploitation IoCs 1

GitHub Repo AdaptixC2

MITRE ATT&CK TTPs 11

Remote System Discovery

Remote Desktop Protocol

Lateral Movement

Command And Control

System Information Discovery

Command And Control

Account Manipulation

Data Destruction

Use Alternate Authentication Material

Defense Evasion

Source Articles

Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use

In the first half of 2026, ransomware incidents in Japan increased slightly by 4.7%, with The Gentlemen emerging as the most active group, responsible for 14 incidents. The group operates via a Ransomware-as-a-Service (RaaS) model and uses a double-extortion tactic, leveraging infrastructure including AdaptixC2 for command-and-control. Evidence from Russian-language artifacts in scripts and bash history suggests Russian-speaking actors are involved. Qilin, the second most active group, showed signs of using generative AI in developing attack scripts, with code exhibiting structured, LLM-like patterns in tools for deploying ransomware and wiping backups.

talos Sep 17, 2026