CyberNews Security Researchers Unleash Zero-Day Fury on Avast, CrowdStrike, and Nvidia A notorious security researcher known as Nightmare Eclipse has unleashed a trio of zero-day exploits targeting some of the most prominent cybersecurity products in the industry. The exploits, dubbed PrettyPrague, FalconFlank, and GreenSection, have been discovered to affect Avast, CrowdStrike, and Nvidia’s offerings respectively. Nightmare … Read more
A Renowned Security Researcher Unleashes Zero-Day Exploits Against Top Cybersecurity Vendors In a shocking move, the highly respected security researcher known as Nightmare Eclipse has released three zero-day exploits targeting products from Avast, CrowdStrike, and Nvidia. This development is significant not only because of the prominent vendors affected but also due to the potential impact … Read more
A Critical Vulnerability in ScreenConnect Exposes Thousands of Systems to Attack ConnectWise, a leading provider of IT management software, has identified a security flaw in its popular remote access platform, ScreenConnect. The vulnerability allows attackers to exploit file transfer behavior in support and access sessions, potentially giving them unauthorized access to sensitive data. What’s more … Read more
MikroTik Router Flaw Allows Hackers to Hijack Routers, Warns Polish CERT Agency A critical vulnerability in MikroTik routers has been exploited by hackers to take control of devices with SSH services exposed to the internet. The flaw, dubbed “MikroTrick” by Poland’s CERT agency, is a chain of two vulnerabilities that allows attackers to bypass SSH … Read more
A new feature in OpenAI’s ChatGPT chatbot has raised eyebrows among cybersecurity experts and everyday users alike. The company is testing a “Writing Style” feature that allows ChatGPT to learn how you write by referencing examples from your connected apps, including email services like Gmail and messaging platforms like Slack. This capability sounds similar to … Read more
A New Breed of Threats Lurks in Popular Browsers, Exposing Users to Command Execution Attacks Cybersecurity researchers have uncovered a sophisticated threat actor’s exploit dubbed “PEEP” that silently turns Google Chrome and Microsoft Edge browsers into post-compromise backdoors. This means that once compromised, these browsers can be used by attackers to execute arbitrary system commands … Read more
A Cryptocurrency Hardware Wallet Maker’s Data Breach Expands to Affect Over 81,000 Customers Cryptocurrency hardware wallet maker Trezor has announced that a recent data breach at its shipping and logistics provider, ShipMonk, has expanded to affect an additional 67,000 US customers. This brings the total number of affected customers to over 81,000. The initial breach … Read more
Over 1 Million People’s Data Stolen in Mathspace Breach, with Attackers Linked to ShinyHunters Extortion Gang Mathspace, a popular online maths learning platform used by thousands of schools across Australia, New Zealand, and other countries, has disclosed a massive data breach that exposed the personal information of over 1 million students, staff, and parents. The … Read more
A sophisticated phishing-as-a-service framework called BigBear 2.0 has been used to compromise the security of 258 organizations and steal over 5,000 Microsoft 365 credentials by bypassing multi-factor authentication (MFA). Researchers at CloudSEK gained access to the control panel of this malicious service and found that it was targeting Microsoft 365 users with a configuration called … Read more
Magento’s StyleSmuggler Zero-Day Exploited to Deploy Linux Backdoor, Leaving Thousands of Sites Vulnerable A severe security vulnerability known as StyleSmuggler has been discovered affecting all versions of Magento and Adobe Commerce. This zero-day exploit allows attackers to deploy a backdoor on compromised servers, leaving thousands of websites exposed. According to e-commerce security company Sansec, the … Read more