CyberNews Security experts are sounding the alarm about a growing threat that could compromise even the most robust cybersecurity defenses: “Shady AI” – artificially intelligent systems designed to evade detection and exploit vulnerabilities in organizations’ digital infrastructure. A recent analysis of 11 real-world cases has revealed a disturbing trend: identity exposure can unlock active attack paths, … Read more
A new type of attack, dubbed a “Zombie Card” exploit, has been discovered that can breathe life back into expired contactless payment cards. This clever technique allows hackers to revive and reuse compromised card data for malicious purposes, putting millions of users at risk. The Zombie Card attack works by exploiting vulnerabilities in the payment … Read more
A Critical Zimbra SNMP Flaw Allows Unauthenticated Remote Code Execution, Leaving Thousands of Organizations Exposed Thousands of organizations worldwide are facing a significant security threat after it was discovered that attackers can exploit a critical flaw in the Simple Network Management Protocol (SNMP) component of the popular email server software Zimbra. The vulnerability, which allows … Read more
A Critical Flaw in NetScaler Puts Companies with Gateway and AAA Servers at Risk of Authentication Bypass Attacks Cybersecurity experts are sounding the alarm over a critical vulnerability discovered in Citrix’s NetScaler, a popular network delivery controller used by many organizations worldwide. The flaw, which affects certain versions of the product, allows attackers to bypass … Read more
A Critical Flaw in Sandboxed JavaScript Allows Escalation of Privileges, Potentially Leading to Remote Code Execution A newly discovered vulnerability in isolated virtual machines (isolated-vm) has left security experts scrambling. The flaw allows sandboxed JavaScript code to escape its confines and gain access to the underlying host system, potentially enabling attackers to execute malicious code … Read more
New Android Malware Exfiltrates Data Through Nearby Devices, Targeting European Users A sophisticated Android malware named Manic has been discovered by researchers at ThreatFabric, targeting users in multiple European countries with a novel data exfiltration mechanism that allows it to siphon sensitive information from compromised devices even when they are offline. The malware combines spyware, … Read more
Cybersecurity experts are sounding the alarm as hackers begin exploiting a critical vulnerability in MLflow, an open-source platform used by thousands of organizations to build and manage artificial intelligence (AI) applications. The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning that unpatched instances of MLflow are vulnerable to attacks that can allow threat … Read more
Millions of Firefox users are in the dark about a sinister threat lurking in their browsers. At least 40 malicious extensions, masquerading as legitimate Web3 products, have been discovered to be stealing wallet secrets and sensitive information from unsuspecting users. The alarming discovery highlights the importance of verifying the authenticity of browser add-ons, particularly those … Read more
A New Wave of Android Banking Attacks Expands, Putting Millions at Risk Android users are facing a growing threat as two sophisticated malware families, ToxicPanda 2.0 and GoldDigger, have merged forces to launch targeted banking attacks on unsuspecting mobile devices. This alarming development has significant implications for millions of individuals who rely on their smartphones … Read more
NASA’s AIT-GUI Flaws Expose Spacecraft to Unauthorized Commands A critical vulnerability has been discovered in NASA’s Automated Test Equipment Graphical User Interface (AIT-GUI) system, potentially allowing unauthenticated attackers to issue commands to spacecraft. The flaw, which affects multiple NASA facilities and contractors, has sparked concerns about the security of space missions. The AIT-GUI system is … Read more