CyberNews Malicious extension operation spreads in Brazil, infects over 1,500 systems A sophisticated malware campaign has been making headlines in recent months, with researchers at Elastic Security Labs uncovering a toolkit named KREMLIN that’s being used to install malicious Chrome and Edge extensions. These extensions are designed to steal sensitive information from unsuspecting users, including credentials, … Read more
A newly discovered browser extension has been found to have the capability to hijack popular AI assistants across multiple platforms, compromising the security of millions of users. The extension, which was available for download on various online marketplaces, can secretly access and manipulate AI-powered tools such as Google Assistant, Amazon Alexa, and Microsoft Bing. The … Read more
Russian enterprises are facing a significant cybersecurity threat as three separate threat groups have launched coordinated attacks using backdoors, ransomware, and wipers. The attacks aim to compromise sensitive data and disrupt business operations, leaving companies vulnerable to further exploitation. The three threat groups, identified as TA456, TA457, and TA458, have been actively targeting Russian enterprises … Read more
A Critical Vulnerability in Issabel Framework Exposes Systems to Remote Attacks A severe security flaw has been discovered in the open-source Issabel framework, a popular platform for building and managing IP PBX systems. Attackers can exploit this vulnerability to execute arbitrary operating system commands on affected systems without requiring authentication. The issue affects not only … Read more
A Data Broker’s Domain Empire Crumbles in Battle Over Online Privacy Radaris.com, a consumer data broker with a reputation for ignoring requests to remove personal information from its vast online empire, has lost control of multiple domains after being sued by a company that alleged Radaris was violating a New Jersey privacy law. The law … Read more
A Critical Flaw in Parallels Desktop Exposes Non-Admin Mac Users to Root Access Vulnerability Parallels Desktop, a popular virtualization software for Mac users, has been hit with a critical vulnerability that allows non-administrative users to gain root access on affected systems. The issue, which affects only Intel-based Macs and not those running Apple’s M1 chips, … Read more
A sophisticated attacker has hijacked AI coding assistant sessions, exploiting a vulnerability in the platform’s authentication mechanism. The malicious actor then used this access to spread malware across approximately 100 repositories on various code-hosting platforms. This incident highlights the growing threat of advanced attacks on AI-powered development tools and underscores the importance of robust security … Read more
A Newly Discovered Browser Extension Can Hijack AI Assistants Across Multiple Browsers, Exposing Users to Potential Cyber Attacks A recently uncovered vulnerability in a popular browser extension has raised significant concerns about the security of artificial intelligence (AI) assistants across multiple browsers. The extension, which we’ll refer to as “the vulnerable extension,” has been found … Read more
A trio of highly sophisticated threat groups has launched a coordinated assault on Russian enterprises, exploiting vulnerabilities in networks and systems to plant backdoors, deploy ransomware, and unleash devastating wiper malware. The attack campaigns are noteworthy not only for their complexity but also for the fact that they target specific sectors within Russia’s economy. At … Read more
**Critical Vulnerability Exploited in Issabel Framework, Leaving Thousands of VoIP Systems Exposed** A critical vulnerability has been discovered in the Issabel framework, a widely used open-source platform for building Voice over Internet Protocol (VoIP) systems. Attackers have been exploiting this flaw to execute unauthorized commands on affected servers, putting thousands of organizations at risk of … Read more