Through Microsoft Teams, cybercriminals are impersonating IT support personnel in order to gain access to corporate systems and exploit vulnerabilities in Active Directory Certificate Services (AD CS). As the outcome of the social engineering and misconfigured certificate services, attackers obtained authentication certificates for privileged... Weiterlesen: ESC1 and ESC8 Attacks Expose Active Directory Security Risks
Intelligence View
⚡ tsecurity.de Intelligence
ESC1 and ESC8 Attacks Expose Active Directory Security Risks
Through Microsoft Teams, cybercriminals are impersonating IT support personnel in order to gain access to corporate systems and exploit vulnerabilities in…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
10 Quellen
it-sa 2026: Sind KI-Tools eher Fluch oder Segen?
9 weitere Quellen
GGBHackers Securityvor 3 Std.11 Digital Forensics Tools: The 2026 Buyer’s Verdict Guide GGBHackers Securityvor 3 Std.11 Cyber Risk Quantification Tools: The 2026 Buyer’s Verdict Guide GGBHackers Securityvor 3 Std.10 Third-Party / Vendor Risk Management (TPRM) Tools: The 2026 Buyer’s Verdict Guide VVulDB Updatesvor 3 Std.CVE-2026-119672 | MongoDB Database Tools up to 100.20.0 mongofiles privileges management (WID-SEC-2026-4328) VVulDB Updatesvor 3 Std.CVE-2026-119673 | MongoDB Database Tools up to 100.20.0 mongofiles symlink (WID-SEC-2026-4328) VVulDB Updatesvor 3 Std.CVE-2026-119674 | MongoDB Database Tools up to 100.20.0 mongorestore improper authorization (WID-SEC-2026-4328)
+3
7 Quellen
CVE-2026-118869 | SHIRASAGI Project up to 1.21.0 os command injection (EUVD-2026-117397)
6 weitere Quellen
VVulDB Updatesvor 1 Std.CVE-2025-57200 | AVTECH DGM1104 FullImg-1015-1004-1006-1003 test_mail command injection VVulDB Updatesvor 1 Std.CVE-2025-57199 | AVTECH DGM1104 FullImg-1015-1004-1006-1003 NetFailDetectD command injection VVulDB Updatesvor 1 Std.CVE-2025-57198 | AVTECH DGM1104 FullImg-1015-1004-1006-1003 Machine.cgi command injection VVulDB Updatesvor 4 Std.CVE-2026-123014 | iTerm2 up to 3.7.7beta1 URL argument injection (EUVD-2026-117332) VVulDB Updatesvor 4 Std.CVE-2026-121621 | Red Hat OpenShift GitOps Argo CD Image Updater command injection (EUVD-2026-116381) VVulDB Updatesvor 4 Std.CVE-2026-77690 | ZohoCorp ManageEngine Key Manager Plus up to 7150 Deployment Target Configuration command injection (EUVD-2026-116757)
7 Quellen
CVE-2026-119179 | MongoDB Node.js Driver up to 6.21.x/7.7.x Connection Management information disclosure (WID-SEC-2026-4328)
6 weitere Quellen
VVulDB Updatesvor 3 Std.CVE-2026-120678 | MongoDB C Driver up to 1.30.14/2.5.7 memory leak (WID-SEC-2026-4328) VVulDB Updatesvor 3 Std.CVE-2026-120673 | MongoDB Rust Driver up to 3.9.0 Diagnostic Tracing information disclosure (WID-SEC-2026-4328) VVulDB Updatesvor 3 Std.CVE-2026-120684 | MongoDB C Driver up to 1.30.14/2.5.7 GridFS uninitialized pointer (Nessus ID 376173 / WID-SEC-2026-4328) VVulDB Updatesvor 3 Std.CVE-2026-120952 | MongoDB Atlas SQL ODBC Driver up to 3.0.0 out-of-bounds write (WID-SEC-2026-4328) VVulDB Updatesvor 3 Std.CVE-2026-120953 | MongoDB Atlas SQL JDBC Driver up to 4.0.0 Authentication redirect (WID-SEC-2026-4328) VVulDB Updatesvor 3 Std.CVE-2026-120954 | MongoDB C Driver up to 2.5.7 BSON Vector integer overflow (WID-SEC-2026-4328)
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4320737/it-security-nachrichten/esc1-and-esc8-attacks-expose-active-directory-security-risks/