A recent cyber campaign used a spoofed Microsoft Teams installer to deploy the Oyster backdoor, leveraging poisoned search results and short-lived code-signing certificates. Hackers spoof Teams app pages to trick users into downloading what appears to be legitimate software but is in fact malware. The installer, signed by “KUTTANADAN CREATIONS INC.,” evaded detection due to […]
Security researchers at Noma Labs uncovered a critical vulnerability, dubbed ForcedLeak, in Salesforce Agentforce that allows attackers to exfiltrate sensitive CRM data through indirect prompt injection. The flaw, rated CVSS 9.4, specifically affects organizations using Agentforce with Web-to-Lead functionality enabled. Exploiting gaps in context validation and AI behavior, adversaries can embed malicious instructions in web […]
European regulators have launched a formal investigation into SAP’s aftermarket services for its on-premise enterprise resource planning (ERP) software. The EU probes SAP over whether its practices may restrict competition by limiting customer choices in ERP support services. The European Commission aims to determine if SAP’s conduct violates antitrust rules by tying customers to its […]
Dutch authorities have arrested two teenagers suspected of intercepting wireless network traffic on behalf of Russian operatives. The suspects, identified only as minors, allegedly engaged in Wi-Fi sniffing activities targeting sensitive communications. Investigators believe the Dutch teens caught in WiFinaturally participated in a broader espionage campaign linked to Russian intelligence interests. The case has raised […]
A lithium-ion battery explosion ignited a fire at the National Information Resources Service facility in Daejeon, triggering a major South Korea data fire that disabled more than 600 government websites. The blaze, which began Friday evening during battery relocation work, caused a thermal runaway that burned for nearly 10 hours and forced authorities to shut […]