SaaS Companies in Firing Line Following Commvault Attack

SaaS companies in firing line following Commvault attack

: Cyberbaddies are coming for your M365 creds, US infosec agency warns

CISA warns of attacks on Commvault’s Microsoft Azure environment

CISA believes the attacks on Commvault Azure environments may be part of a larger campaign to target SaaS vendors. Introduction to Malware Binary Triage (IMBT) Course Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor. Enroll Now and Save 10%: Coupon Code MWNEWS10 Note: Affiliate link – your enrollment helps support this platform at no extra cost to you. Article Link: CISA warns of attacks on Commvault’s Mic…

Commvault clients should beware of campaign targeting cloud applications, CISA says

CISA weighed in on a cyberthreat to Commvault customers that the data management giant had reported in multiple blog posts earlier this year.

Commvault M365 Threat Could Be Part Of Broader SaaS Campaign

Nation-state threat actors targeting Commvault applications hosted in Microsoft Azure may be part of a broader campaign targeting Software-as-a-Service (SaaS) applications, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned in an advisory this week. The May 22 CISA advisory builds on a Commvault warning earlier this month that nation-state threat actors were exploiting CVE-2025-3928 to target Commvault applications hosted in…

Companies Warned Of Commvault Vulnerability Exploitation - Cybernoz - Cybersecurity News

The ongoing exploitation of a Commvault vulnerability that was targeted as a zero-day is likely part of a broader campaign against software-as-a-service (SaaS) solutions, the US cybersecurity agency CISA says. Tracked as CVE-2025-3928 (CVSS score of 8.7), the unspecified security defect allows remote attackers to create and execute webshells, fully compromising vulnerable instances. Commvault fixed the bug in late February, warning that it learn…

CISA Warns of Suspected Broader SaaS Attacks Exploiting App Secrets and Cloud Misconfigs

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday revealed that Commvault is monitoring cyber threat activity targeting applications hosted in their Microsoft Azure cloud environment. "Threat actors may have accessed client secrets for Commvault's (Metallic) Microsoft 365 (M365) backup software-as-a-service (SaaS) solution, hosted in Azure," the agency said. "This