January 2026 – Page 29 – TheWindowsUpdate.com

Phishing actors exploit complex routing and misconfigurations to spoof domains

Posted on January 6, 2026 by Syndicated News — No Comments ↓

Threat actors are exploiting complex routing scenarios and misconfigured spoof protections to send spoofed phishing emails, crafted to appear as internally sent messages.

The post Phishing actors exploit complex routing and misconfigurations to spoof domains appeared first on Microsoft Security Blog.

Continue reading Phishing actors exploit complex routing and misconfigurations to spoof domains→

Month: January 2026

Phishing actors exploit complex routing and misconfigurations to spoof domains

Phishing actors exploit complex routing and misconfigurations to spoof domains

Phishing actors exploit complex routing and misconfigurations to spoof domains

CVE-2000-0006 strace allows local users to read arbitrary files via memory mapped file names.

CVE-2025-68146 filelock has TOCTOU race condition that allows symlink attacks during lock file creation

CVE-2025-61099 FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaque_info_detail function at ospf_opaque.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted LS Update packet.

CVE-2025-61104 FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_unknown_tlv function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.

CVE-2025-61100 FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospf_opaque_lsa_dump function at ospf_opaque.c. This vulnerability allows attackers to cause a Denial of Service (DoS) under specific malformed LSA conditions.