CyberNews OpenAI’s latest AI model, Astra, has been making waves in the cybersecurity community with its unexpected ability to identify and exploit vulnerabilities in complex systems. Dubbed “the ultimate hacker,” Astra has demonstrated a level of proficiency that’s raised eyebrows among experts, forcing OpenAI to pause its development and deployment. Astra is an artificial intelligence designed … Read more
Cybersecurity experts are sounding the alarm about a growing threat to online security that’s been spreading rapidly across the globe. A new malware campaign, leveraging a sophisticated exploit kit known as “Grief”, has emerged, compromising thousands of websites and leaving many more vulnerable to attack. The Grief exploit kit is designed to target vulnerabilities in … Read more
A Critical Vulnerability Hits Unpatched Systems, Exposing Them to Remote Attacks A newly discovered vulnerability in a widely used internet protocol is putting millions of unpatched systems at risk of remote exploitation. The flaw, located in the Internet Group Management Protocol (IGMP), allows attackers to execute arbitrary code on affected devices, giving them full control … Read more
A devastating cyberattack has been uncovered, with hackers breaching video conferencing servers from TrueConf, a tool widely used in Russia. The Head Mare hacktivist group has taken advantage of vulnerabilities in unpatched TrueConf servers to deliver backdoors and compromise sensitive information. This attack highlights the importance of patching software and staying vigilant against cyber threats. … Read more
A Critical Vulnerability in Atlassian’s Rovo AI Assistant Exposes Enterprise Data to Attackers A team of researchers at Varonis Threat Labs has uncovered a severe vulnerability in Rovo, the enterprise AI assistant developed by Atlassian. The flaw, dubbed RovoBlast, allows attackers to inject malicious instructions into a user’s live AI session with just one click … Read more
A critical vulnerability in TrueConf video conferencing servers has been exploited by hackers to deliver backdoors and compromise sensitive data. The Head Mare hacktivist group is behind the attacks, which have targeted organizations in various sectors, including enterprise and government entities in Russia. The attackers took advantage of unpatched vulnerabilities in TrueConf Server versions 5.3.x … Read more
A Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data At the DEF CON 34 conference, cybersecurity researchers from Varonis Threat Labs revealed a devastating one-click vulnerability in Rovo, an enterprise AI assistant developed by Atlassian. Dubbed “RovoBlast,” this flaw allowed attackers to inject malicious instructions directly into a user’s live AI session with … Read more
CyberNews.work has learned that a new class of attacks is targeting webmail defenses, allowing hackers to break through and steal sensitive credentials. The CSS-based attacks exploit vulnerabilities in how websites handle JavaScript code, giving malicious actors a way into otherwise secure systems. This breach can lead to the theft of not only passwords but also … Read more
A Critical Vulnerability in Atlassian’s Rovo Affects Thousands of Organizations, Exposing Sensitive Data Atlassian, a leading provider of collaboration software, has disclosed a critical vulnerability in its Rovo product that allows attackers to trick it into sending sensitive data from Jira and Confluence instances to unauthorized parties. The issue affects thousands of organizations worldwide that … Read more
A Critical Vulnerability in Progress Kemp LoadMaster Puts Government and Enterprise Networks at Risk A recently discovered flaw in Progress Kemp LoadMaster, a web application delivery controller used by numerous government agencies and enterprises, has exposed sensitive data and opened doors to potential cyber attacks. According to reports, the vulnerability has already been exploited over … Read more