CyberNews Twitch Extension with 30,000 Installs Exposes Users’ OAuth Tokens A disturbing trend has emerged on Twitch, one of the world’s most popular live streaming platforms. A browser extension called Twitch Enhanced Viewer | JeetBot, available in both Chrome and Firefox stores, has been sending users’ sensitive OAuth session tokens to a commercial bot service without … Read more
Windows Users in for a Rough Ride as Emergency Updates Attempt to Fix RDS Failures and Other Issues A perfect storm of problems has been brewing for Windows administrators since Microsoft’s September security updates were released. Not only did these updates cause widespread Remote Desktop Services (RDS) failures, but they also introduced issues with Hyper-V … Read more
Homebrew Package Manager Gets Major Update with Built-in GUI and Enhanced Security Features A new version of Homebrew, a popular open-source package manager for macOS, has been released with a host of exciting features that promise to make managing software on your Mac easier and more secure. The latest update, version 7.0.0, brings a built-in … Read more
A major cybersecurity incident has come to light in Japan, where a vulnerability in a Virtual Private Network (VPN) device used by government employees may have exposed sensitive personal information of over 246,000 individuals. The breach was discovered by Japan’s Digital Agency, which provides digital services to the government, and affects personnel records, including names, … Read more
Remote Desktop Services Failures Hit Windows Systems, Microsoft Rushes to Release Emergency Updates A critical issue has been plaguing Windows systems since the release of this month’s security updates. Remote Desktop Services (RDS) have become unstable on affected systems, causing RDP connection and sign-in failures, as well as unresponsive servers. This problem has left many … Read more
WordPress, the popular content management system (CMS), has taken a significant step in enhancing its security features with the addition of automated plugin reviews. This new capability is designed to detect and block high-risk updates from being distributed, thereby preventing potential vulnerabilities from entering the wild. The move comes as a response to an increasing … Read more
A group of threat actors known as Red Heron has been linked to a series of attacks that exploited a critical vulnerability in the popular open-source Git repository management tool, Gitea. The attacks compromised 13 organizations across six countries, highlighting the importance of securing software development infrastructure. Red Heron’s modus operandi involves using identity exposure … Read more
A Critical Flaw in Telegram Desktop Exposes Messages to Hidden JavaScript Attacks A newly discovered vulnerability in the Telegram desktop app has left millions of users vulnerable to a sophisticated hacking technique that can exfiltrate sensitive messages from exported HTML files. The flaw, which was disclosed by security researchers this week, allows malicious JavaScript code … Read more
A recent high-profile cyber attack on Thailand’s third-largest telecommunications provider, 3BB, has left thousands of subscribers’ sensitive information exposed and vulnerable to exploitation. The attacker, who gained root access to the company’s network using a backdoor in the MeshCentral remote monitoring software, targeted subscriber credentials and other personal data. The breach is particularly concerning due … Read more
A devastating new attack technique has been discovered, compromising the confidentiality of sensitive data stored on Intel and AMD systems. The DDRop (Direct Data Remote Operation) attack exploits vulnerabilities in Trusted Domain Extensions (TDX) for Intel and Secure Encrypted Virtualization-Secure Nested Paging (SEV-SNP) for AMD, breaking through the security features designed to protect confidential computing … Read more