View Ridge Security
Back to Cyber Hose

DDoS attacks disrupt Threema messaging services for two days

Threema secure messaging hit by large-scale DDoS outages, plus a CVSS 9.8 privilege escalation in Pods and a SiYuan API token brute-force flaw.

💥 BREACHES & INCIDENTS

  • DDoS attacks disrupt Threema messaging services for two days
    Large-scale DDoS attacks disrupted Threema’s messaging services.
    • Threema users and Threema Work customers were affected; Threema OnPrem organizations were not.
    • Threema’s hosted services and Swiss colocation partner Nine were targeted.
    • Threema was unavailable Tuesday from 7:30 p.m. to 11:30 p.m. CEST, with intermittent outages Wednesday morning.
    • Attackers repeatedly changed traffic sources and patterns, complicating traffic filtering.
    Sources 📄 Source: threema.com · 📎 Coverage: bleepingcomputer.com · 👁 via BleepingComputer

🔓 CVEs & KEV

  • CVE-2026-19598 — CVSS 9.8 — Pods through 3.3.9 - Unauthenticated Privilege Escalation via Authorization Bypass...

  • CVE-2026-73056 — CVSS 9.3 — SiYuan Kernel API Token Brute-Force (CVE-2026-73056)

Need help assessing your exposure?

Start with the free Posture Self-Check to see where you stand against the current threat landscape.

Free Posture Self-Check