TeleMessage
In 4 briefs, most recently 19 July 2025. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
3 TeleMessage vulnerabilities are on CISA's list of vulnerabilities exploited in the wild. Most recent:
- CVE-2025-48928 TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability
- CVE-2025-48927 TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability
- CVE-2025-47729 TeleMessage TM SGNL Hidden Functionality Vulnerability
Coverage in DanSec Daily
- NCSC attributes Microsoft 365 Authentic Antics malware to APT28, CrushFTP zero-day hijacks servers, and Google sues BADBOX 2.0 botnet operators.
- TeleMessage breached via a basic misconfiguration in under 20 minutes, plus AutoIT-layered RAT malware campaigns and rising AutoIT obfuscation tactics.
- LockBit's breach, PowerSchool extortion of school districts, and the actively exploited OttoKit WordPress flaw.
- TeleMessage's breach and suspended services, the Darcula SMS phishing platform stealing 884,000 cards, and UK retail attacks prompting new NCSC guidance.