CyberNews A newly discovered vulnerability in MCP servers is allowing hackers to gain access to sensitive enterprise data, putting thousands of organizations worldwide at risk. The issue, which affects a broad range of businesses and industries, stems from the way MCP systems handle identity exposure, creating an open door for attackers to exploit. The problem arises … Read more
Security experts are sounding the alarm over a concerning trend: identity exposure is being used as a key enabler for active attack paths. What this means in plain terms is that hackers are exploiting vulnerabilities in how companies manage user identities, effectively creating backdoors into networks and systems. This can happen even when robust security … Read more
As we approach the final stretch of the year, IT administrators are being reminded that a critical deadline is fast approaching. In just 60 days, on October 13th, Microsoft’s Windows Server 2022 will reach its mainstream end date, marking the beginning of the end of free support for this version of the operating system. For … Read more
A suspected China-nexus cyber actor has been linked to a series of high-profile attacks that exploit a critical vulnerability in VMware vCenter, leading to the deployment of Babuk-derived ransomware on compromised systems. The attacks have affected multiple organizations across various industries, with some reports indicating that sensitive data has already been exfiltrated. The vulnerability in … Read more
A sophisticated Linux botnet, dubbed Evooo1Bot, has been discovered exploiting known vulnerabilities to hijack edge devices and turn them into SOCKS5 proxies. This malicious network is capable of bypassing traditional security measures and could be used for a wide range of nefarious activities, from data exfiltration to DDoS attacks. Evooo1Bot specifically targets Linux-based systems, including … Read more
A critical vulnerability has been discovered in the VoLTE (Voice over LTE) implementation of Unisoc’s Android-based chipsets, allowing attackers to gain full kernel access and potentially seize control of affected devices. This exploit chain, which affects a wide range of devices, has significant implications for users’ security and privacy. The vulnerability, revealed by researchers, lies … Read more
A recent investigation has revealed that a significant number of enterprise organizations are unwittingly exposing sensitive information and creating potential attack paths through their Microsoft Clustered Server (MCS) environments. What’s particularly concerning is that this vulnerability can be exploited without requiring any prior access to the network or systems, making it an attractive target for … Read more
Microsoft Scrambles to Patch ShieldBreak Zero-Day Vulnerability in Windows Defender A serious security vulnerability has been discovered in Microsoft’s Defender antivirus software, allowing attackers with limited permissions to gain SYSTEM privileges on fully patched Windows systems. The flaw, dubbed “ShieldBreak,” was disclosed by a security researcher known as “Nightmare Eclipse” after Microsoft released its August … Read more
A massive data breach has struck the French tax authority, exposing sensitive information belonging to nearly 700,000 individuals. The attack, which was only recently disclosed by the authorities, raises serious concerns about the security of government databases and the potential consequences for those affected. According to a statement from the French Finance Ministry, an attacker … Read more
Two global tech giants, General Electric (GE) and Philips, have joined oil giant Shell in investigating claims that their systems were breached by the notorious Clop ransomware gang. The alleged data theft incident has sparked concerns about the security of enterprise software platforms widely used across various industries. According to reports, the Clop hacking group … Read more