NewsThe Hacker News
UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data
More on SaaS
Other advisories
- HighCVE-2026-111038CSV formula injection vulnerability in the export functionality of the Coupa Supplier Portal SaaS platform. The vulnerability arises because certain user-con…
- MediumCVE-2026-111037A reflected Cross-Site Scripting (XSS) vulnerability in the Tenders module of the Coupa Supplier Portal SaaS platform. The vulnerability arises because the `…
- HighCVE-2026-111036Server-side request forgery (SSRF) vulnerability in the Coupa Supplier Portal SaaS platform, specifically in the document conversion functionality available …
- CriticalCVE-2026-120446Madong-code Madong-admin-saas: fehlende Authentifizierung für kritische Funktion
- HighCVE-2026-120445Madong-code Madong-admin-saas: fehlerhafte Autorisierung
- CriticalCVE-2026-120446Madong-code Madong-admin-saas: fehlende Authentifizierung für kritische Funktion
- Not ratedosv:CVE-2026-120446madong-admin-saas through 5.1.4 Missing Authentication via Platform Tenant Management API
- Not ratedosv:CVE-2026-120445madong-admin-saas through 5.1.4 Incorrect Authorization via /platformapi AccessTokenMiddleware
Other news entries
- AU Small Finance Bank investigates data leak on its Salesforce platformBreachpwn.watch
- 14 ways attackers abuse cloud services to hack your enterpriseNewsCSO Online
- ConnectWise turns off its SaaS-y backup, security, and management services to probe security SNAFUNewsThe Register — Security
- ASOS Breach Reveals the Risks in Customer-Facing SaaSNewsDark Reading
- OAuth grants pile up faster than you can review them. Here's how to keep up.NewsBleepingComputer
- Exaforce extends its AI security tool to monitor more than just ClaudeNewsCSO Online
- Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion AttacksNewsThe Hacker News
- Cisco bug severity warning reads like Olympic gymnastics scores: 10, 10, 9.9, 9.6, and 7.5.NewsThe Register — Security
Source: https://thehackernews.com/2026/08/unc6671-vishing-attacks-target-personal.html
ID