bleeping-computer Jul 22, 2026 · Crawled Jul 22, 2026

New InfraTrust report reveals infrastructure flaws admins should patch first

2 Actors

AI Summary

The July 2026 InfraTrust Pulse report by Eclypsium highlights critical infrastructure vulnerabilities that administrators should prioritize, focusing on those that are actively exploited, remotely accessible, or unauthenticated. Key vendors affected include SonicWall, Fortinet, Dell, F5, Juniper, and NVIDIA, with flaws impacting network edge devices, data center infrastructure, and firmware components. Russian and Chinese state-sponsored actors are increasingly targeting such infrastructure, as seen in campaigns linked to Volt Typhoon and Salt Typhoon. The report emphasizes risk-based prioritization over CVSS scores alone, noting that internet-exposed flaws pose significant real-world threats even if their severity scores are lower.

AI-extracted · verify before operational use

Extracted Entities 2 found

Threat Actor Volt Typhoon → Threat Actor GhostEmperor →

MITRE ATT&CK TTPs 23 techniques

T1059.001 PowerShell · Execution T1078 Valid Accounts · Defense Evasion T1190 Exploit Public-Facing Application · Initial Access T1210 Exploitation of Remote Services · Lateral Movement T1499 Endpoint Denial of Service · Impact T1003.001 LSASS Memory · Credential Access T1021.001 Remote Desktop Protocol · Lateral Movement T1055.001 Dynamic-link Library Injection · Defense Evasion T1071.001 Web Protocols · Command And Control T1078.002 Domain Accounts · Defense Evasion T1087.002 Domain Account · Discovery T1095 Non-Application Layer Protocol · Command And Control T1098.002 Additional Email Delegate Permissions · Persistence T1105 Ingress Tool Transfer · Command And Control T1110.001 Password Guessing · Credential Access T1136.001 Local Account · Persistence T1543.001 Launch Agent · Persistence T1556.004 Network Device Authentication · Credential Access T1558 Steal or Forge Kerberos Tickets · Credential Access T1566 Phishing · Initial Access T1571 Non-Standard Port · Command And Control T1574.001 DLL Search Order Hijacking · Persistence T1665 Hide Infrastructure · Command And Control