CyberNews

Cybersecurity giants WhatsApp have rolled out a significant update to its mobile app, introducing multiple passkeys for phishing-resistant sign-ins on both iOS and Android devices. This move comes as part of an ongoing effort to protect users from increasingly sophisticated cyber threats. The new feature allows users to generate and store multiple passkeys – essentially … Read more

A malicious webpage can secretly feed fake data into local AI models, compromising their accuracy and potentially leading to catastrophic consequences. This alarming vulnerability affects any system running NVIDIA’s NemoClaw framework, which is used in various applications, including healthcare, finance, and autonomous vehicles. The attack works by manipulating a user’s browser into submitting malicious input … Read more

A Wave of Phishing Attacks Exploits npm Package Vulnerability, Putting Users’ Data at Risk A concerning trend has emerged in the cybersecurity landscape, as hackers are exploiting a vulnerability in the npm package ecosystem to host fake Cloudflare CAPTCHA pages on unpkg mirrors. This clever tactic is designed to bypass security measures and trick users … Read more

A sprawling cyberattack campaign, dubbed “Mirage2FA,” has compromised the login credentials of over 4,500 companies across the United States and Europe. The attackers have been exploiting vulnerabilities in Microsoft 365’s authentication flows to gain unauthorized access to corporate networks, raising concerns about the security posture of these organizations. At its core, Mirage2FA involves a sophisticated … Read more

A Critical Flaw in Marimo Notebook Exposes Sensitive Data and Privileges, Threatening Millions of Users Marimo Notebook, a popular note-taking app, has been found vulnerable to a critical flaw that could allow attackers to execute malicious commands on users’ devices. The vulnerability, which affects millions of users worldwide, was discovered in the app’s edit mode, … Read more

WhatsApp’s Latest Security Upgrade Aims to Protect Users from Sophisticated Phishing Attacks In a significant move to bolster user security, WhatsApp has rolled out an innovative feature that enables users to create multiple passkeys for phishing-resistant sign-ins across both iOS and Android devices. This long-awaited upgrade comes as a response to the growing threat of … Read more

A Critical Vulnerability in NVIDIA’s NemoClaw Exposes Local AI Models to Malicious Webpage Poisoning Researchers have discovered a critical flaw in NVIDIA’s NemoClaw, an open-source framework for building and managing local artificial intelligence (AI) models. The vulnerability allows malicious webpages to inject poisoned data into these models, potentially compromising sensitive information and disrupting AI operations. … Read more

Silent Patches Do More Harm Than Good, Leaving Defenders in the Dark In recent months, several major vendors have chosen to quietly release security patches for critical vulnerabilities without issuing advisories or disclosing the details. This approach may seem like a reasonable way to prevent attackers from exploiting newly discovered bugs, but it’s actually doing … Read more

A New Front in Cybercrime: Malware Targets Car Infotainment Systems In a disturbing trend, researchers at Kaspersky have uncovered malware specifically designed for car head units, marking the first time this type of attack has been seen. The malicious code, linked to the notorious BadBox botnet, exploits vulnerabilities in software update systems to deliver stealthy … Read more

In a major blow to global cybercrime networks, law enforcement agencies from 22 countries have joined forces in a coordinated effort to dismantle African crime groups and disrupt their operations. Dubbed “Operation Jackal IV,” this international joint action has led to the arrest of 58 individuals linked to cybercrime networks, with dozens more suspects identified. … Read more