Dreigingen

Doorzoek en filter alle geregistreerde cyberdreigingen voor gemeenten.

223 dreigingen gevonden · pagina 10 van 19

The New Phishing Click: How OAuth Consent Bypasses MFA

In February 2026, a phishing-as-a-service (PhaaS) platform called EvilTokens went live. Within five weeks, it had compromised more than 340 Microsoft 365 organizations across five countries. The targets of the platform received a message asking them to enter a short code at microsoft.com/devicelogin and complete their normal MFA challenge, then walked away believing they had verified a

The Hacker NewsgisterenDetails

LaagOverig

Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Prepare

Drupal has issued an alert stating that it intends to release a "core security release" for all supported branches on May 20, 2026, from 5-9 p.m. UTC. "The Drupal Security Team urges you to reserve time for core updates at that time because exploits might be developed within hours or days," the maintainers of the PHP-based content management system (CMS) said. "Not all configurations are

The Hacker NewsgisterenDetails

LaagOverig

Uitfasering 2G en 3G raakt eCall-systeem van zo'n 1,8 miljoen auto's

De uitfasering van 2G en 3G raakt naar schatting het eCall-systeem van zo'n 1,8 miljoen auto's. Dat is voor de overheid geen ...

Security.NLgisterenDetails

LaagKwetsbaarheid

From PDB strings to MaaS: Tracking a commodity BadIIS ecosystem used by Chinese-speaking threat

Cisco Talos has uncovered a BadIIS variant — identifiable by its embedded "demo.pdb" strings — that functions as commodity malware, likely sold or shared among multiple Chinese-speaking cyber crime groups operating under a malware-as-a-service (MaaS) model for continuous monetization.

Cisco TalosgisterenDetails

MiddenKwetsbaarheid

SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic Access

Critical security vulnerabilities have been disclosed in SEPPMail Secure E-Mail Gateway, an enterprise-grade email security solution, that could be exploited to achieve remote code execution and enable an attacker to read arbitrary mails from the virtual appliance. "These vulnerabilities could have been exploited to read all mail traffic or as an entry vector into the internal network,"

The Hacker NewsgisterenDetails

LaagKwetsbaarheid