CyberNews A Zero-Click Worm Exploited WeChat’s Incoming Call Feature, Leaving Millions Vulnerable A disturbing vulnerability in the popular Chinese messaging app WeChat has left millions of users on both iPhone and Android devices exposed to a zero-click worm attack. The exploit, which was revealed earlier this week, takes advantage of WeChat’s incoming call feature to compromise … Read more
A critical issue is unfolding for users of Windows Server 2025, with Microsoft warning that recent changes to memory management are causing application crashes. The problem affects apps that rely on Address Windowing Extensions (AWE), which allows them to access more than 4GB of physical memory within a 32-bit virtual address space. The issue has … Read more
Cyberattackers are now using sophisticated artificial intelligence (AI) frameworks to automate every stage of their attacks, including credential theft on a massive scale. According to a report from the Google Threat Intelligence Group (GTIG), threat actors have moved beyond simple AI-powered coding assistants and are instead integrating multiple AI capabilities into their attack workflows. These … Read more
A sophisticated cyberattack has been uncovered, where a malicious actor manipulated Bing search results to deliver payloads of two notorious malware variants, MayaBot and Tech Support Scams. The campaign, dubbed BengalSEO, exploited vulnerabilities in Microsoft’s search engine optimization (SEO) tools, allowing attackers to inject poisoned links into seemingly legitimate search results. At the heart of … Read more
Adobe’s Magento e-commerce platform has been hit with a zero-day vulnerability that allowed attackers to deploy a backdoor and web shell, compromising user security. This critical issue affects anyone using Magento 2.x up to version 2.3.7-p1, which is used by over 250,000 online stores worldwide. The exploit takes advantage of a previously unknown privilege escalation … Read more
FreeIPA Flaw Chain Exposes Administrators to Reusable Credentials Risks A critical chain of vulnerabilities has been discovered in FreeIPA, an open-source identity and access management system widely used by organizations worldwide. The flaws allow anonymous clients to create reusable administrator credentials, potentially giving hackers backdoor access to sensitive systems. FreeIPA is designed to manage identities … Read more
More than 220 million passenger and crew records have been left exposed online through a series of security misconfigurations linked to a Vietnamese organization. The Advance Passenger Information System (APIS) database, which holds sensitive information on travelers from around the world, was accessible to anyone with the right credentials. The leak is a sobering reminder … Read more
Grindr, a popular dating app for LGBTQ+ individuals, has agreed to pay £26 million (approximately $32.5 million) to settle claims made by the UK’s Information Commissioner’s Office (ICO) over the sharing of HIV status data without users’ consent. This settlement marks one of the largest fines issued under the UK’s Data Protection Act 2018. The … Read more
A staggering breach of traveler data has exposed the sensitive information of over 220 million passengers and crew members worldwide, with researchers tracing the vulnerability back to an Advance Passenger Information System (APIS) database linked to Vietnam. The exposed database, which held records spanning from 2017 to 2026, contained a treasure trove of personal details … Read more
A dating app’s negligence has left thousands of users vulnerable to identity theft and blackmail, with Grindr agreeing to pay £26 million to settle claims over its handling of HIV status data. The settlement is a stark reminder that even in the age of digital intimacy, personal boundaries remain essential for online safety. The UK-based … Read more