Akamai Talks Massive Uptick in Credential-Stuffing Attacks Against Bank APIs

🗓️ 12 Mar 2020 13:57:20Reported by Lindsey O'DonnellType

threatpost🔗 threatpost.com👁 65 Views

Akamai: Financial Services Targeted with Massive API Credential Stuffing Attack

Reporter	Title	Published	Views	Family All 148
zdt	Magento 2.4.0 / 2.3.5p1 (and earlier) Arbitrary Code Execution 0day Exploit	24 Mar 202100:00	–	zdt
ATTACKERKB	CVE-2020-24407	15 Oct 202023:00	–	attackerkb
BDU FSTEC	The vulnerability of the Magento Commerce software platform for developing and managing online stores lies in the lack of measures to protect SQL query structures. This allows attackers to execute arbitrary SQL queries against the database in the target system and gain access to protected information.	12 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Magento Commerce software platform for developing and managing online stores lies in the lack of restrictions on file uploads, which allows attackers to execute arbitrary code.	17 Nov 202000:00	–	bdu_fstec
Circl	CVE-2020-24400	15 Oct 202023:29	–	circl
Circl	CVE-2020-24407	15 Oct 202023:29	–	circl
CNVD	Adobe Magento SQL Injection Vulnerability	19 Oct 202000:00	–	cnvd
CNVD	Adobe Magento File Upload List Bypass Vulnerability	19 Oct 202000:00	–	cnvd
CVE	CVE-2020-24400	9 Nov 202000:39	–	cve
CVE	CVE-2020-24407	9 Nov 202000:39	–	cve

12 Mar 2020 13:57Current

8.6High risk

Vulners AI Score8.6

EPSS0.05272

akamai financial services api attacks credential stuffing ddos attacks