Threat Groups SandCat, FruityArmor Exploiting Microsoft Win32k Flawby CyberAvalonMarch 13, 2019 Newly patched CVE-2019-0797 is being actively exploited by two APTs, FruityArmor and SandCat. Go to Source