Aviatrix Threat Research Center@aviatrixtrc
Active Exploitation
TRC analysis shows attackers exploiting CVE-2025-9970 can extract cleartext credentials from ABB MConfig memory dumps with local access. Compromised credentials enable privilege escalation and lateral network movement. Runtime segmentation helps contain post-compromise activity when authentication systems are breached. #Vulnerability #ZeroTrust 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/icsa-26-146-06-cve-2025-9970
Post summary
The report indicates attackers are actively exploiting CVE-2025-9970 to harvest cleartext credentials via local memory dumps, enabling privilege escalation and lateral movement, with runtime segmentation mitigating post-compromise activity.
00000121
1.9K followersView on X