UAT-6382 exploits Cityworks zero-day vulnerability to deliver malware
Cisco Talos reported intrusions into U.S. local government networks beginning January 2025, where UAT-6382 exploited CVE-2025-0944 in the Cityworks application and deployed web shells including AntSword, chinatso/Chopper and Behinder, plus a custom...