CVE

CVE-2026-52747

View on NVD ↗

ModSecurity: Multipart form-data parser silently strips embedded line breaks from form-field values, enabling request-body inspection bypass

Exploitation IoCs 5

Filename Kuailian VPN

Filename Kuailian VPN.msi

Filename node.exe

Package Braintree.Net

Package Jscrambler

MITRE ATT&CK TTPs 30

Remote Desktop Protocol

Lateral Movement

Distributed Component Object Model

Lateral Movement

Process Injection

Defense Evasion

Command And Control

Command And Control

System Information Discovery

File and Directory Discovery

Account Manipulation

Ingress Tool Transfer

Command And Control

Credential Access

Email Collection

Peripheral Device Discovery

Command And Control

External Remote Services

Exploit Public-Facing Application

Indirect Command Execution

Defense Evasion

Exploitation of Remote Services

Lateral Movement

Group Policy Modification

Defense Evasion

Inhibit System Recovery

Defense Evasion

Windows Service

Adversary-in-the-Middle

Credential Access

Encrypted Channel

Command And Control

Resource Development

Active Scanning

Content Injection

Source Articles

⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More

Multiple threat actors are leveraging compromised software supply chains, AI-driven attacks, and unpatched vulnerabilities to deploy malware, steal credentials, and conduct ransomware operations. Notable activities include the exploitation of Citrix Bleed 2 (CVE-2025-5777) for DragonForce ransomware deployment, a compromised npm package distributing a Rust-based stealer, and the emergence of HalluSquatting attacks targeting AI coding assistants. Additionally, new backdoors like GigaWiper and RedHook are being used for persistent access and data exfiltration across Windows and Android platforms.

hacker-news Jul 13, 2026