CyberNews A sophisticated malware campaign, dubbed “JadeProx,” has been linked to China and targets government and healthcare organizations worldwide. This cyber threat leverages a novel exploitation technique known as TriBack Loader, which utilizes artificial intelligence (AI) models to identify vulnerabilities in software. At its core, JadeProx is a type of remote access trojan (RAT) designed to … Read more
A New Ransomware Trick: Chaos Malware Uses msaRAT, Headless Browsers to Evade Detection The cybersecurity landscape just got a whole lot more complicated with the emergence of a new ransomware strain called Chaos. This highly evasive malware has been spotted using an unusual combination of tools to route its command and control (C2) traffic through … Read more
A Critical Flaw in Claude Cowork Exposes Mac Users to Unwanted Access A worrying vulnerability has been discovered in Claude Cowork, an artificial intelligence (AI) platform designed for collaborative workspaces. The flaw, which affects Mac users, allows AI agents running within virtual machines (VMs) to potentially escape their digital confines and access sensitive files on … Read more
A critical vulnerability has been discovered in Linux systems that allows attackers to gain root privileges. Dubbed RefluXFS by Qualys’ Threat Research Unit (TRU), this flaw affects millions of systems running major enterprise Linux distributions, including Red Hat Enterprise Linux, Oracle Linux, and Amazon Linux. RefluXFS is a nine-year-old race condition vulnerability in the Linux … Read more
A Critical Linux Flaw Exposed: Nine-Year-Old RefluXFS Bug Gives Unprivileged Users Root Access on Default RHEL Installs For nearly a decade, a critical vulnerability has been lurking in the depths of Red Hat Enterprise Linux (RHEL), waiting to be exploited. The RefluXFS bug, discovered back in 2017, has finally come under scrutiny after researchers revealed … Read more
Google has introduced a new feature for users who have been locked out of their accounts, allowing them to recover access using a selfie video. This move comes amidst growing concerns over account security and the increasing use of AI-powered attacks. The new feature works by asking users to record a short video that includes … Read more
A wave of attacks is sweeping through cPanel and WHM servers, thanks to an ingenious tactic employed by threat actors: exploiting GitHub Actions Runners to gain unauthorized access. The vulnerability, detected in recent days, has caught security professionals off guard, highlighting the ever-evolving nature of cyber threats. The attack vector hinges on a clever manipulation … Read more
A New Threat Emerges: Synthetic Identity Fraud Targets Machine Identities The latest evolution of identity theft, synthetic identity fraud, is spreading its tentacles into the realm of machine identities, putting organizations and their digital assets at risk. This insidious form of cybercrime has been quietly gaining momentum, with devastating consequences for businesses that fail to … Read more
Cybersecurity firm Check Point is scrambling to patch a critical vulnerability in its SmartConsole management platform, allowing attackers with knowledge of the flaw to gain full administrative access to affected systems. The issue, which has been described as “extremely severe,” affects various versions of Check Point’s SmartConsole software used by organizations worldwide. According to the … Read more
A nine-year-old Linux flaw, dubbed RefluXFS, has been exposed, allowing local users on default Red Hat Enterprise Linux (RHEL) installs to gain root access without needing a password. The vulnerability, discovered by researchers at CyberNews.work, affects numerous systems worldwide, underscoring the importance of regular security audits and patch management. The flaw resides in the XFS … Read more