FortiSIEM Basic XSS: What to Know
FortiSIEM is affected by a Basic XSS vulnerability related to improper neutralization of script-related HTML tags. In certain cases, a privileged administrator could execute unauthorized commands.
Category: Beveiligingsnieuws
FortiOS buffer over-read vulnerability: what to do
FortiGuard Labs disclosed a FortiOS buffer over-read issue affecting FortiOS, FortiProxy, and FortiSASE. Authenticated attackers may obtain a portion of device memory via a crafted redirect request.
Exchange OWA zero-day: OWAReaper long-term access
A Russian-linked group used an Exchange OWA zero-day to deliver OWAReaper via half-click XSS emails. The malware can maintain mailbox access even after clean-up and credential changes.
Post-breach Tactics: What Attackers Do After Entry
Once an attacker gets in, the goal often shifts from “steal and run” to establishing persistence. This incident shows how attackers rework the environment before anyone can stop them.
Analog Devices Data Breach: What’s Known
Analog Devices reports an unauthorized party accessed some systems and exfiltrated files. The company says it hasn’t found evidence of stolen data being leaked or impacting operations.
Focus Keyphrase: Vishing via Microsoft Teams
Attackers used vishing via Microsoft Teams to impersonate IT support staff, trick employees into granting remote access, and then deploy Chaos ransomware. Sophos observed fast intrusions, sometimes within 17 hours.
ShinyHunters Brinks Home Breach Claims: What We Know
Brinks Home says it detected an intrusion in late July and launched an incident response. Meanwhile, ShinyHunters claims it stole millions of Salesforce and support-chat records and threatens to leak them.
VMware fixes: critical auth bypass and VM escapes
Broadcom has published emergency patches for several VMware products. The updates address, among other things, a VMware critical auth bypass and a flaw that enables VM escapes.
Amazon Links NPM Supply-Chain Attacks
Amazon connected several high-profile NPM supply-chain attacks to North Korean hackers. The report also describes how malicious updates spread and why detection is getting harder.
Anti Phishing Shield: 2M phishing attempts blocked
The Anti Phishing Shield pilot blocked more than two million attempts to access phishing and fraudulent sites. Over 200,000 users opted in to the protection via participating internet providers.