Hackers are targeting the CVE-2025-48927 vulnerability in TeleMessage, per GreyNoise. 11 IPs have tried to exploit it since April, with additional IPs conducting reconnaissance. The flaw allows data extraction due to a legacy confirmation issue in Spring Boot Actuator. TeleMessage, acquired by Smarsh, has patched the vulnerability, affecting government and enterprise users.
Crypto theft is on the rise in 2025, with over $2.17 billion stolen. Security attacks, including physical “wrench attacks” and the Bybit exchange hack, are prevalent. Credential theft methods involve phishing attacks, malware, and social engineering tactics. Protecting against these attacks is crucial for crypto users.
Read more at Cointelegraph: Hackers Continue Attempts to Exploit Forked Signal App: Report