The Chinese Winnti hacking group is using a new PHP backdoor named 'Glutton' in attacks on organizations in China and the U.S., and also in attacks on other cybercriminals. [...]
A vulnerability, which was classified as problematic, was found in percona-toolkit 3.6.0. Affected is an unknown function. The manipulation leads to password hash with insufficient computational effort.
This vulnerability is traded as CVE-2024-7701. It is possible to launch the attack on the physical device. There is no exploit available.