Open Redirect News Today : Breaking News, Live Updates & Top Stories | Vimarsana

SEC Consult Vulnerability Lab Security Advisory < 20231005-0 >=======================================================================title: Open Redirect in BSP Test Application it00(Bypass for CVE-2020-6215 Patch)product: SAP® Application Server ABAP and ABAP®Platform (SAP_BASIS)vulnerable version: see section "Vulnerable / tested versions"fixed version: see SAP security note 3258950CVE number: CVE-2020-6215impact: mediumhomepage: https://www.sap.comfound: 2022-09-23by: Fabian Hagg (Office Vienna)SEC Consult Vulnerability LabAn integrated part of SEC

Summary This blog is a follow-up to our recent publication which described the details of a large-scale phishing campaign targeting enterprise users of Microsoft email services. Beginning in mid-July 2022, ThreatLabz started observing instances of adversary-in-the-middle (AiTM) phishing attacks targeted towards enterprise users of Gmail. Upon further analysis of the attack chain, we identified multiple similarities between this campaign and the previous AiTM phishing campaign targeting users of Microsoft email services. G Suite is the business version of Gmail, and is widely used in enterpris...

Fintech, insurance, accounting, lending and credit union entities in the US, UK, New Zealand and Australia have been targeted in what seems to be an effort to steal funds

Separate phishing campaigns targeting thousands of victims impersonate FedEx and Microsoft, among others, to trick victims.

Your favorite websites could be exploited by Open Redirect vulnerabilities - here's how to ensure you're protected.