Disguised as an IT firm, the APT is hitting targets in Afghanistan & India, exploiting a 20-year-old+ Microsoft Office bug that’s as potent as it is ancient.
https://threatpost.com/apt-commodity-rats-microsoft-bug/175601/
No Patch for High-Severity Bug in Legacy IBM System X Servers
-
Two of IBM’s aging flagship server models, retired in 2020, won’t be patched for a command-injection flaw.
https://threatpost.com/no-patch-for-ibm-system-x-servers/169491/