CyberNews

A New Form of Android Malware Exfiltrates Data from Offline Devices Cybersecurity researchers have uncovered a sophisticated piece of malware that can extract sensitive data from offline Android devices by using nearby infected phones as “data bridges.” This novel approach to mobile malware allows attackers to bypass traditional security measures, raising concerns about the vulnerability … Read more

A Devastating New Form of DDoS Attack Exploits HTTP/3 Translation, Leaving Websites Reeling In a shocking revelation, security researchers have uncovered a catastrophic new form of Distributed Denial-of-Service (DDoS) attack that exploits the translation mechanism in HTTP/3 protocol, amplifying the assault by up to 350 times. This tsunami-like assault has left numerous high-profile websites scrambling … Read more

A sophisticated new attack technique has been discovered, allowing malicious web pages to steal sensitive data from users of Grok Chat, a popular online collaboration platform. The attack, known as Cryptographic Context Injection (CCI), exploits vulnerabilities in web browsers and relies on an attacker’s ability to manipulate the cryptographic context of a user’s session. Grok … Read more

A sophisticated and highly targeted cyber threat has emerged, exploiting a critical vulnerability in Siemens S7 programmable logic controllers (PLCs) used across U.S. critical infrastructure sectors. The attack leverages artificial intelligence (AI)-generated exploit scripts to compromise these industrial control systems, highlighting the increasing risk of AI-powered threats in the world of cybersecurity. The affected PLCs … Read more

**Identity Exposure Unlocks Active Attack Paths, Creating a Breach Bonanza** A spate of recent security vulnerabilities and exploits has left many organizations scrambling to shore up their defenses. At the heart of these issues lies a critical problem: identity exposure. When attackers gain access to sensitive information about individuals or systems within an organization’s network, … Read more

A new type of attack is making waves in the cybersecurity community, threatening the security of contactless payment systems worldwide. Dubbed “Zombie Card,” this malicious technique can revive even expired Visa cards, allowing attackers to bypass traditional authentication measures and make unauthorized transactions. The Zombie Card attack exploits a weakness in the way Visa’s tokenization … Read more

A Critical Flaw in Zimbra’s SNMP Service Allows Unauthenticated Remote Code Execution, Exposing Thousands of Organizations to Risk Thousands of organizations worldwide are at risk after a critical flaw was discovered in the Simple Network Management Protocol (SNMP) service used by the popular email server software Zimbra. Attackers can exploit this vulnerability to execute arbitrary … Read more

A Critical Flaw in NetScaler Exposes Gateway and AAA Servers to Authentication Bypass Attacks A recently discovered vulnerability in Citrix’s NetScaler platform is exposing gateway and authentication, authorization, and accounting (AAA) servers to a critical risk of authentication bypass attacks. The flaw, which affects certain versions of NetScaler, can allow attackers to gain unauthorized access … Read more

A Critical Vulnerability in Isolated Vms Puts Sandboxed JavaScript on the Loose, Threatening Hosts with Potential RCE Attacks A newly discovered flaw in isolated virtual machines (ivms) is giving attackers a way to bypass security controls and execute arbitrary code on the host system. The vulnerability, known as “isolated-vm”, allows sandboxed JavaScript to escape its … Read more

A newly discovered vulnerability, dubbed “Cryptographic Context Injection,” has been found to pose a significant threat to users of the popular chat platform Grok. The attack allows malicious web pages to steal sensitive information from unsuspecting victims, including those who use Grok’s secure messaging features. The vulnerability works by exploiting a flaw in the way … Read more