Sicherheit· · 2 Min.Fortinet and Cisco in Hot Water.
Today's cybersecurity news is buzzing with critical vulnerabilities, emerging threats, and data breaches. Major players like Fortinet and Cisco are facing exploitation of their systems while new ransomware techniques are evolving. It’s a reminder that security is a never-ending battle and vigilance is key.
Fortinet and Cisco in Hot Water
Fortinet is grappling with multiple critical vulnerabilities in its FortiSandbox platform, now actively exploited in the wild. These flaws allow attackers to escalate privileges and execute code remotely, raising alarms across affected organizations.
On the Cisco front, another zero-day vulnerability in its SD-WAN Manager has been discovered. This flaw, exploited in limited attacks, could allow attackers to overwrite files on the system. Admins need to act fast to patch up these vulnerabilities.
Ransomware Tactics Evolve
The DragonForce ransomware group has taken a new approach by hiding malicious traffic within Microsoft Teams. They’re using a custom backdoor that makes it difficult for defenders to detect their activities, showing how adaptable and cunning these attackers can be.
Additionally, the FBI warns that scammers are leveraging courier services to bypass bank checks in crypto scams. This evolving tactic highlights the need for consumers to stay informed and cautious about where they invest their money.
Data Breaches and Their Impacts
iRhythm has confirmed a data breach involving the theft of sensitive patient information. Hackers demanded ransom payments after accessing proprietary data, showcasing the risks healthcare companies face.
Meanwhile, the FTC has revealed that Americans lost a staggering $3.5 billion to imposter scams in 2025, with social media being a prime attack vector. This surge in fraud underlines the importance of public awareness and proactive measures.
Emerging Threats in Open Source
With a new coalition called Athena, tech giants are banding together to shield open source software from AI-driven vulnerabilities. This proactive approach aims to address weaknesses before they can be exploited.
On another front, a supply chain attack dubbed Atomic Arch has compromised over 1,500 packages in the Arch User Repository, reminding users of the inherent risks in software dependency.
Critical Fortinet Flaws Exploited in Attacks
Fortinet's FortiSandbox vulnerabilities are being actively exploited, allowing unauthorized access. Admins must upgrade to secure their systems.
DragonForce Ransomware Hides in Microsoft Teams
DragonForce ransomware has been found hiding malicious traffic in Microsoft Teams, highlighting innovative evasion tactics.
- CISA Flags LiteSpeed cPanel Plugin FlawA critical cPanel plugin flaw has been flagged by CISA as actively exploited. — The Hacker News
- Flock Cameras Used for StalkingFlock surveillance cameras are increasingly being misused for stalking individuals. — Schneier's Blog
- New Rokarolla Android Malware Steals Sensitive InfoA new Android malware variant, Rokarolla, is stealing PINs, SMS codes, and crypto wallet funds. — The Hacker News
- EvilTokens: Phishing Attack Without Password TheftEvilTokens is a phishing-as-a-service kit that exploits OAuth 2.0 for account takeovers. — We Live Security
- ClickFix Campaigns Expand Malware DeliveryClickFix campaigns are broadening their malware delivery techniques using new loaders. — The Hacker News
War diese Ausgabe hilfreich?
Ein Klick genügt – er prägt die nächste Ausgabe.