Threat actorcritical
Commvault clients should beware of campaign targeting cloud applications, CISA says
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-3928 | Actively Exploited Authenticated Webshell Flaw in Commvault Web Server | 8.7 | 3% | KEV | KEV |
From the original article
2 min read at therecord.media
Federal cyber defenders are warning that hackers are targeting the cloud environments of clients of data management giant Commvault. The New Jersey-based company previously said it was notified by Microsoft in February of a data breach caused by an unnamed nation-state threat actor that allowed access to “a subset of app credentials that certain Commvault customers use to authenticate their M365 environments.”
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.