CyberNews A critical vulnerability in TrueConf video conferencing servers has been exploited by hackers to deliver backdoors and compromise sensitive data. The Head Mare hacktivist group is behind the attacks, which have targeted organizations in various sectors, including enterprise and government entities in Russia. The attackers took advantage of unpatched vulnerabilities in TrueConf Server versions 5.3.x … Read more
A Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data At the DEF CON 34 conference, cybersecurity researchers from Varonis Threat Labs revealed a devastating one-click vulnerability in Rovo, an enterprise AI assistant developed by Atlassian. Dubbed “RovoBlast,” this flaw allowed attackers to inject malicious instructions directly into a user’s live AI session with … Read more
CyberNews.work has learned that a new class of attacks is targeting webmail defenses, allowing hackers to break through and steal sensitive credentials. The CSS-based attacks exploit vulnerabilities in how websites handle JavaScript code, giving malicious actors a way into otherwise secure systems. This breach can lead to the theft of not only passwords but also … Read more
A Critical Vulnerability in Atlassian’s Rovo Affects Thousands of Organizations, Exposing Sensitive Data Atlassian, a leading provider of collaboration software, has disclosed a critical vulnerability in its Rovo product that allows attackers to trick it into sending sensitive data from Jira and Confluence instances to unauthorized parties. The issue affects thousands of organizations worldwide that … Read more
A Critical Vulnerability in Progress Kemp LoadMaster Puts Government and Enterprise Networks at Risk A recently discovered flaw in Progress Kemp LoadMaster, a web application delivery controller used by numerous government agencies and enterprises, has exposed sensitive data and opened doors to potential cyber attacks. According to reports, the vulnerability has already been exploited over … Read more
A Critical Vulnerability in N-central Has Been Exploited by Attackers, Putting Thousands of Managed Systems at Risk N-able has released a hotfix for its N-central platform after reports emerged that attackers have successfully exploited a critical vulnerability to gain unauthorized access to thousands of managed systems. The vulnerability, which affects various versions of the platform, … Read more
A Critical Zero-Day Vulnerability in Metabase Exposes Admin Access Without Authentication, Leaving Many Organizations Vulnerable A newly discovered zero-day vulnerability in the popular data analytics platform Metabase has been exploited in the wild, allowing attackers to gain administrative access without requiring any authentication credentials. This critical flaw affects numerous organizations worldwide that rely on Metabase … Read more
Cybersecurity researchers have discovered a new class of attacks that can bypass webmail defenses and steal sensitive credentials, including passwords and tokens. The attacks, which exploit vulnerabilities in CSS (Cascading Style Sheets) code, allow hackers to break through even the most secure email accounts. The impact of these attacks is significant, with reports suggesting that … Read more
A Serious Vulnerability in Atlassian Rovo Exposes Jira and Confluence Data to Attackers Atlassian’s Rovo service has been found vulnerable to a clever attack that tricks it into sending sensitive data from its customers’ Jira and Confluence platforms to malicious actors. This breach of trust highlights the importance of vigilance in defending against sophisticated cyber … Read more
Cybersecurity experts have long known that Linux systems can be notoriously difficult to track due to their sparse logging capabilities. However, one area where this lack of visibility has been particularly problematic is in shell activity logs. Most shells, including Bash and others, only record a limited history of commands in a flat file located … Read more