CyberNews

As of its latest update, Google’s Android operating system is getting a major boost in network security and privacy features. Android 17 introduces support for Encrypted Client Hello (ECH), a new standard that makes it harder for internet service providers (ISPs) and Wi-Fi operators to track users’ online activities. For those unfamiliar with the technical … Read more

Cybersecurity Services on Demand: How Threat Research and MDR Help SMBs Stay Ahead of the Game For small to medium-sized businesses (SMBs), defending against relentless cyber threats can be a daunting task. With limited resources and expanding attack surfaces, it’s no wonder that many organizations struggle to keep pace with the evolving threat landscape. However, … Read more

Cybersecurity firm PaperCut has issued a high-priority warning about a critical vulnerability in its widely-used print management software, which is being actively exploited by hackers in zero-day attacks. The company’s security team has confirmed that malicious actors are targeting all versions of PaperCut NG and MF, leaving organizations vulnerable to data breaches and system compromise. … Read more

A massive IoT botnet has been uncovered, compromising over 296,000 devices worldwide. What’s more alarming is that hundreds of water treatment systems have been targeted, raising concerns about the potential for catastrophic damage and even loss of life. Meanwhile, a critical vulnerability in Microsoft’s SharePoint platform has been discovered, allowing attackers to remotely execute code … Read more

Critical Vulnerabilities in Next.js Framework Expose Developers and End-users to Remote Code Execution Attacks A severe security flaw has been discovered in the popular Next.js framework, a widely used JavaScript library for building server-side rendered websites. The vulnerability, which affects all versions of Next.js prior to 13.1.5, allows attackers to execute arbitrary code on affected … Read more

PaperCut Warns of Zero-Day Attacks Exploiting NG, MF Flaw, Urges Immediate Action A critical vulnerability in PaperCut’s print management software has been exploited in zero-day attacks, leaving organizations with Internet-exposed Application Servers vulnerable to compromise. The company behind the software, PaperCut, has issued an urgent security advisory warning customers of confirmed incidents and urging them … Read more

A new strain of malware, known as GoCaracal, has been discovered using Ethereum smart contracts to fetch replacement command and control (C2) addresses. This sophisticated tactic allows attackers to evade detection by constantly changing their C2 infrastructure, making it challenging for security teams to track and contain the attacks. GoCaracal malware is a type of … Read more

Amazon’s Kiro platform has been found vulnerable to a novel type of attack, dubbed “Kiro Prompt Injection.” This sophisticated technique allows malicious actors to exfiltrate sensitive data from organizations using Amazon’s services. The exploit takes advantage of a feature designed to streamline workflows within Kiro Powers, but instead enables attackers to bypass security controls and … Read more

A massive IoT botnet has compromised over 296,000 devices, with hackers targeting critical infrastructure such as water treatment systems in multiple countries. Meanwhile, a vulnerability in Microsoft’s SharePoint platform allows attackers to execute remote code on affected servers, creating a potential gateway for further exploitation. The IoT botnet, which cybersecurity researchers have been tracking for … Read more

Next.js Developers Left Reeling as Critical AVIF and Windows Flaws Exposed A critical vulnerability in the widely-used Next.js framework has left developers scrambling for patches, as researchers disclosed two severe flaws that enable unauthenticated remote code execution (RCE). The issue affects multiple platforms, including Linux and Windows machines, putting sensitive data at risk of exploitation. … Read more