CyberNews

Cybersecurity teams around the world are grappling with a critical issue that has reached unprecedented proportions. For the first time, researchers have mapped over 1 billion build manifests – documents that contain sensitive information about software development – which could potentially be used to unlock active attack paths. These build manifests are often overlooked as … Read more

A Zero-Click Worm Spreads Through Incoming Calls on WeChat, Leaving Millions Vulnerable Millions of users of China’s dominant social media app WeChat have been put at risk after a zero-click worm took advantage of a vulnerability in the app to gain unauthorized access to their accounts. The malware, which spreads through incoming calls, has compromised … Read more

A new breed of autonomous AI agents has been wreaking havoc on the cybersecurity landscape, compromising thousands of credentials in a matter of mere hours. These sophisticated attackers have been using advanced techniques to infiltrate systems and gain unauthorized access, leaving a trail of exposed identities in their wake. The affected parties are numerous and … Read more

A Critical ChatGPT Flaw Exposed Gmail Users’ Data to Unwanted Access Last week, a concerning vulnerability in the popular AI chatbot platform ChatGPT made headlines. The flaw allowed an attacker to craft a specific prompt that could compromise a user’s Gmail account and transmit sensitive data to another account without their knowledge or consent. This … Read more

**Liquid Hackers Pull Off Stunning Heist, Return $47 Million in Bitcoin Stolen via Zero-Day Exploit** In a brazen display of cybercrime expertise, the notorious hacking group known as Liquid has returned 3,400 Bitcoins to their victims, stolen through a devastating zero-day exploit that targeted a software vulnerability. The stunning reversal has left security experts scratching … Read more

A sophisticated cyber campaign has been uncovered, targeting Bing search engine users with poisoned results designed to deliver malicious payloads and phishing scams. BengalSEO, a notorious group behind previous attacks on Google’s AdWords platform, is allegedly responsible for this latest scheme, dubbed “MayaBot.” The attack vector leverages Bing’s proprietary search algorithm to inject malware-laced ads … Read more

Adobe has issued a critical patch for Magento, its e-commerce platform, after discovering a zero-day vulnerability being exploited in the wild. The flaw, which was disclosed earlier this week, allows attackers to inject malicious code and deploy a backdoor on affected websites, as well as install a PHP web shell for further unauthorized access. Magento … Read more

A Critical Flaw in FreeIPA Exposes Administrator Credentials, Threatening Enterprise Security FreeIPA, a widely used open-source identity management system, has been found vulnerable to a series of interconnected flaws that can enable anonymous clients to create reusable administrator credentials. This security weakness poses a significant threat to enterprises relying on FreeIPA for authentication and authorization. … Read more

Cybersecurity Researchers Uncover Alarming Trend in Identity Exposure A staggering number of organizations have fallen victim to a sophisticated attack technique that leverages identity exposure to exploit vulnerabilities in their systems. According to recent findings, over 1 billion build manifests – files that contain sensitive information about an organization’s software and infrastructure – have been … Read more

A Zero-Click Worm Exploited WeChat’s Incoming Call Feature, Leaving Millions Vulnerable A disturbing vulnerability in the popular Chinese messaging app WeChat has left millions of users on both iPhone and Android devices exposed to a zero-click worm attack. The exploit, which was revealed earlier this week, takes advantage of WeChat’s incoming call feature to compromise … Read more