Stay informed on vulnerabilities, active threats, and security alerts published by the Axion Core cybersecurity team.
A sophisticated device code phishing campaign has been observed targeting organisations across Nigeria, exploiting a legitimate OAuth authentication flow to bypass MFA and gain persistent account access.
Affected: Microsoft 365 / Entra ID Google Workspace GitHub Enterprise Any…
Nigerian financial institutions are urged to immediately review and harden their ProcessMaker process flow deployments following confirmed exploitation attempts targeting misconfigured and outdated installations.
Affected: ProcessMaker versions earlier than 3.9.3 All Nigerian financial institutions using…
Multiple ransomware groups — including Estate and Phobos — are actively exploiting CVE-2023-27532, a critical vulnerability in Veeam Backup & Replication, to gain initial access to enterprise networks. Nigerian organisations using Veeam should patch immediately.
Affected: Veeam Backup & Replication v11 (before 11.0.1.1261 P20230227) Veeam Backup…
