Open Redirect News Today

SEC Consult Vulnerability Lab Security Advisory < 20231005-0 >=======================================================================title: Open Redirect in BSP Test Application it00(Bypass for CVE-2020-6215 Patch)product: SAP® Application Server ABAP and ABAP®Platform (SAP_BASIS)vulnerable version: see section "Vulnerable / tested versions"fixed version: see SAP security note 3258950CVE number: CVE-2020-6215impact: mediumhomepage: https://www.sap.comfound: 2022-09-23by: Fabian...

Summary This blog is a follow-up to our recent publication which described the details of a large-scale phishing campaign targeting enterprise users of Microsoft email services. Beginning in mid-July 2022, ThreatLabz started observing instances of adversary-in-the-middle (AiTM) phishing attacks targeted towards enterprise users of Gmail. Upon further analysis of the attack chain, we identified multiple similarities between this campaign and the previous AiTM phishing campaign targeting users of...

Fintech, insurance, accounting, lending and credit union entities in the US, UK, New Zealand and Australia have been targeted in what seems to be an effort to steal funds

Separate phishing campaigns targeting thousands of victims impersonate FedEx and Microsoft, among others, to trick victims.

Your favorite websites could be exploited by Open Redirect vulnerabilities - heres how to ensure youre protected.

Sophos Research Uncovers Widespread Use of TLS By Cybercriminals SPONSORED CONTENT: Nearly half of all malware is being disseminated via the Transport Layer Security cryptographic protocol, says Dan Schiappa, executive VP and chief product officer for Sophos. Nearly half of all malware is being disseminated via Transport Layer Security, an encryption protocol, which in this instance is being used to conceal nefarious activity, says Dan Schiappa, executive VP and chief product officer for Sophos...

Latest updates on this topic.