CyberNews A New Wave of Sophisticated Attacks Targets Executives in Microsoft 365 Data Theft and Extortion Schemes, Exposing a Chilling Reality of Personal and Corporate Compromise. Microsoft 365 users, particularly high-ranking executives, are being targeted by sophisticated attackers who make fake IT calls to gain access to sensitive data. These cunning scammers pose as IT support … Read more
Over a million people’s personal information exposed in Mathspace data breach A devastating data breach has been disclosed by online maths learning platform Mathspace, affecting over 1 million students, staff, and parents across Australia, New Zealand, the United States, and the UK. The attackers exploited a vulnerability in Metabase, an internal reporting system used by … Read more
Cybersecurity firm N-able has issued its fourth hotfix in just five weeks for a critical vulnerability in its popular remote monitoring and management (RMM) platform, N-central. The flaw, which allows attackers to gain unauthenticated access to sensitive data and execute arbitrary code on affected systems, is particularly concerning given the widespread adoption of RMM tools … Read more
A devastating combination of a padding oracle bug and an unauthenticated remote code execution vulnerability in Telerik UI components has been discovered, leaving numerous organizations vulnerable to serious attacks. The severity of this issue is compounded by the fact that it affects not only authenticated users but also those who are not logged in, making … Read more
A sophisticated cyber threat campaign has been uncovered, exploiting a vulnerability in ScreenConnect, a popular remote desktop access tool used by organizations worldwide. The attackers are using a clever four-stage VBScript chain to compromise newly connected hosts, spreading malware and potentially leading to full network breaches. The attack vector relies on an initial infection, which … Read more
Cloud security checklists have become a staple for organizations, but it turns out they don’t work as intended. A new analysis of 11 real-world incidents reveals that identity exposure is often the primary entry point for attackers, who then use cross-domain privilege escalation to bypass security measures and wreak havoc on cloud infrastructure. The stories … Read more
A critical vulnerability has been discovered in ConnectWise’s ScreenConnect remote access platform, leaving millions of systems exposed to potential attacks. The security flaw affects both cloud and on-premises deployments of ScreenConnect, which is widely used by managed service providers (MSPs), IT departments, and support teams for troubleshooting, patching, and system maintenance. The vulnerability allows attackers … Read more
MikroTik Routers Under Attack: Hackers Exploit Critical Flaws for Full Control A serious security threat is unfolding as hackers have started exploiting a chain of two recently discovered vulnerabilities in MikroTik routers, allowing them to take control of devices with SSH services exposed to the internet. Poland’s CERT agency has dubbed this exploit chain “MikroTrick,” … Read more
OpenAI’s ChatGPT is taking a significant step forward in its ability to mimic human writing styles, with the introduction of a new “Writing Style” feature that allows the AI to learn from examples drawn directly from your personal apps. This means that ChatGPT can now use your existing writing patterns to inform its own output, … Read more
A new strain of malware called JSCeal has been discovered, capable of bypassing even Google’s advanced authentication mechanisms by exploiting stolen session cookies. This highly sophisticated attack vector has left many wondering how it works and what it means for online security. At its core, JSCeal is a type of malware designed to intercept and … Read more