Threats tagged 'unauthorized-access'

Capcom notified customers of unauthorized access to CAPCOM ID accounts but their email security configuration is weak. Their official notification emails failed DMARC alignment checks despite passing SPF and DKIM individually. Capcom's DMARC policy is set to 'p=none', which only monitors failures without requesting rejection or quarantine of unauthenticated emails. This lax configuration increases the risk of phishing and spoofing attacks impersonating Capcom. The company uses an external email delivery service but has not properly aligned authentication to prevent spoofing. The notification warns customers about potential misuse of their information but Capcom has not taken stronger email security measures to prevent secondary damage.

A security flaw in ServiceNow was exploited by unknown threat actors to gain unauthorized access to customer instances. The issue allowed unauthenticated users, under certain conditions, to access ServiceNow instances beyond intended permissions. ServiceNow applied a security update on June 5, 2026, to restrict this access to authenticated users only. The flaw affects customers on the Australia platform release or those with specific configuration changes on earlier releases. ServiceNow detected anomalous activity and notified impacted customers. The vulnerability does not yet have a CVE identifier and was initially reported internally to ServiceNow in April 2026. This is a developing situation with limited technical details publicly available.

Gladinet software contains hard-coded cryptographic keys that attackers actively exploit to gain unauthorized access and execute arbitrary code. This vulnerability allows adversaries to bypass authentication mechanisms, potentially leading to full system compromise. Although no known exploits are currently observed in the wild, the presence of hard-coded keys significantly lowers the barrier for exploitation. European organizations using Gladinet products are at risk, especially those relying on these tools for cloud storage and file sharing. The threat is rated high severity due to the potential impact on confidentiality, integrity, and availability without requiring user interaction. Mitigation is complicated by the lack of official patches, necessitating immediate compensating controls such as network segmentation, strict access controls, and monitoring for suspicious activity. Countries with high adoption of Gladinet or strategic cloud infrastructure are more likely to be targeted. Defenders should prioritize identifying affected systems, restricting network exposure, and preparing incident response plans to address potential exploitation attempts.