NewsSANS ISC Diary01.07.2026

Why Ask Credentials If There Are Secret Codes?, (Wed, Jul 1st)

This morning, an interesting phishing email hit my mailbox. It targets Metamask[1], a cryptocurrency wallet, available as a browser extension and a mobile app, that lets users store, send, and receive crypto money. It&#x27s pretty popular, so a juicy target for criminals. In February, I already mentioned a campaign against them[2].

Other advisories

MediumCVE-2026-112164The LaserGest mobile application encrypts stored assistance portal credentials with a hardcoded AES key and IV, allowing an attacker with access to the appli…
HighCVE-2026-103906Use of hard-coded MQTT credentials in the AM CLUB mobile application allows an authenticated attacker to connect to the MQTT broker and access data or perfor…
MediumCVE-2026-118798Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and authentication artifacts, are exposed through …
MediumCVE-2026-62361listmonk: SQL Injection in `/api/subscribers/export` bypasses table access control, leaking admin password hashes and SMTP credentials
MediumCVE-2026-111495API keys, credentials, and configuration parameters embedded in the MatchPoint APK, which can be extracted through reverse engineering. The vendor distinguis…
Not ratedosv:CVE-2026-88811Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy
Not ratedosv:CLEANSTART-2026-XR01746In specific scenarios involving HTTP redirects from a secure to an insecure endpoint, the Reactor Netty HTTP client may leak credentials
MediumCVE-2026-116689follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects

Other news entries

Source: https://isc.sans.edu/diary/rss/33118

More on Credentials

Other advisories

Other news entries