LR pixel

Microsoft Shell Spoofing Zero-day Vulnerability

von | 6. Mai 2026 | Unkategorisiert

What is the Attack? A newly disclosed vulnerability, CVE-2026-32202, has emerged due to an incomplete patch by Microsoft for a previously exploited remote code execution flaw (CVE-2026-21510). While the original update addressed both RCE and SmartScreen bypass, it...

Apache ActiveMQ RCE

von | 21. Apr. 2026 | Unkategorisiert

What is the Vulnerability? CVE-2026-34197 is a high-severity remote code execution (RCE) vulnerability affecting Apache ActiveMQ Classic. The flaw resides in the exposed Jolokia JMX-HTTP interface and allows attackers to execute arbitrary commands on the underlying...

Medusa Ransomware Attack

von | 10. Apr. 2026 | Unkategorisiert

What is the Attack? Microsoft Threat Intelligence has identified Storm-1175, a financially motivated threat actor conducting high-tempo ransomware operations leveraging the Medusa ransomware variant. The group specializes in rapidly exploiting vulnerable web-facing...

TrueConf Zero-Day Attack

von | 8. Apr. 2026 | Unkategorisiert

What is the Attack? Operation TrueChaos is a targeted cyber espionage campaign exploiting a zero-day vulnerability in the TrueConf video conferencing platform. The campaign primarily targets government entities in Southeast Asia by replacing a legitimate update with a...

Axios npm Supply Chain Compromise

von | 31. März 2026 | Unkategorisiert

What is the Attack? A software supply chain attack targeted the widely used JavaScript library Axios after an attacker reportedly compromised a maintainer’s npm account and published malicious package versions 1.14.1 and 0.30.4. These versions introduced a concealed...