Person
Dahan
- First Reported
- Apr 29, 2026
- Latest Reported
- Apr 29, 2026
Reported Context (1)
- Explained that the incomplete fix did not prevent a victim machine from contacting the attacker's server and described the resulting SMB-triggered NTLM authentication. CISA and Microsoft Confirm Active Exploitation of Windows Shell Flaw CVE-2026-32202
CVE (3)
Threat Actors (2)
MITRE ATT&CK (1)
Vendors (1)
Products (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.