Cybersecurity incident
Date: 2023-03-15 00:00:00
Affected organization: Unnamed federal civilian executive branch (FCEB) agency
Affected country: United States of America
Industry: Public Administration
Event type: Exploitive
Event subtype: Exploitation of Application Server
Motive: Political-Espionage
Actor: Undetermined
Actor type: Criminal
Actor country: Undetermined
Description: The CISA, FBI, and MS-ISAC reveal that a U.S. federal agency's Microsoft Internet Information Services (IIS) web server was hacked by exploiting a critical .NET deserialization vulnerability in the Progress Telerik UI for ASP.NET AJAX component.