LR pixel

Medusa Ransomware Attack

von | 10. Apr. 2026 | Unkategorisiert

What is the Attack? Microsoft Threat Intelligence has identified Storm-1175, a financially motivated threat actor conducting high-tempo ransomware operations leveraging the Medusa ransomware variant. The group specializes in rapidly exploiting vulnerable web-facing...

TrueConf Zero-Day Attack

von | 8. Apr. 2026 | Unkategorisiert

What is the Attack? Operation TrueChaos is a targeted cyber espionage campaign exploiting a zero-day vulnerability in the TrueConf video conferencing platform. The campaign primarily targets government entities in Southeast Asia by replacing a legitimate update with a...

Axios npm Supply Chain Compromise

von | 1. Apr. 2026 | Unkategorisiert

What is the Attack? A software supply chain attack targeted the widely used JavaScript library Axios after an attacker reportedly compromised a maintainer’s npm account and published malicious package versions 1.14.1 and 0.30.4. These versions introduced a concealed...

DarkSword iOS Exploit Chain

von | 27. März 2026 | Unkategorisiert

What is the Attack? Researchers from Google Threat Intelligence Group identified DarkSword, a sophisticated full-chain iOS exploit framework actively used by multiple surveillance vendors and suspected state-sponsored actors. Observed since at least November 2025, the...

Handala Wiper Attack

von | 19. März 2026 | Unkategorisiert

What is the Attack? A large-scale cyberattack against medical technology company Stryker resulted in widespread system outages. The attack was driven by a destructive wiper campaign attributed to Iran-linked threat actors, including the hacktivist group Handala....

Versa Concerto SD-WAN Authentication Bypass

von | 30. Jan. 2026 | Unkategorisiert

What is the Vulnerability? A critical security vulnerability (CVE-2025-34026) has been identified in the Versa Concerto SD-WAN orchestration platform, impacting versions 12.1.2 through 12.2.0. The issue allows unauthorized actors to bypass standard authentication...

Zimbra Collaboration Local File Inclusion

von | 29. Jan. 2026 | Unkategorisiert

What is the Vulnerability? A Local File Inclusion (LFI) vulnerability (CVE-2025-68645) exists in the Zimbra Collaboration Suite (ZCS) Webmail Classic UI due to improper handling of user-supplied request parameters in the RestFilter servlet. An unauthenticated remote...

SmarterTools SmarterMail RCE

von | 28. Jan. 2026 | Unkategorisiert

What is the Vulnerability? An actively targeted vulnerability has been identified in SmarterTools SmarterMail, tracked as CVE-2025-52691, with a CVSS score of 10.0 (Critical). The flaw allows unauthenticated attackers to upload arbitrary files to any location on the...

UAT-8837 Critical Infrastructure Attack

von | 17. Jan. 2026 | Unkategorisiert

What is the Attack? An active campaign has been linked, with medium confidence, to a threat actor designated UAT-8837, which Cisco Talos assesses as a China-nexus group targeting critical infrastructure organizations in North America. Observed activity includes...