The FBI and cyber agencies from the UK and Germany have reported that the SafePay ransomware gang has breached over 600 organizations since August 2024.
The vulnerability or weakness
Not stated in the sources.
| CVE | CVSS | Severity | In CISA KEV | KEV due date |
|---|---|---|---|---|
| CVE-2020-3259 | 7.5 | HIGH | Yes, added 2024-02-15 | 2024-03-07 |
| CVE-2023-20269 | 9.1 | CRITICAL | Yes, added 2023-09-13 | 2023-10-04 |
| CVE-2023-27532 | 7.5 | HIGH | Yes, added 2023-08-22 | 2023-09-12 |
| CVE-2024-40711 | 9.8 | CRITICAL | Yes, added 2024-10-17 | 2024-11-07 |
| CVE-2024-40766 | 9.8 | CRITICAL | Yes, added 2024-09-09 | 2024-09-30 |
CVE data: NVD (nvd.nist.gov) and the CISA Known Exploited Vulnerabilities catalog.
Earlier attacks and coverage
No earlier related attack in our archive yet.
Business impact
This breach could result in significant financial losses, operational disruptions, and potential legal and reputational damage for affected businesses and critical infrastructure.
Industries affected
The attacks have targeted businesses and critical infrastructure across the U.S. and Europe, impacting various sectors.
Users affected
For users and customers, this means potential data breaches, loss of services, and the risk of having to pay ransom to regain access to their data.
