CyberNews

Brazilian Government Website Hijacked by Malicious Apache Modules, Redirects Visitors to Betting Sites A sophisticated cyber attack has compromised a Brazilian government website, redirecting thousands of visitors daily to unauthorized betting pages. The hack leverages malicious Apache modules, which are software components used to extend the functionality of the popular open-source web server. This brazen … Read more

A Critical Vulnerability in AI-Powered Agents Exposes Millions of Users to Malicious Code Injection A shocking discovery has been made regarding a critical vulnerability in popular artificial intelligence (AI) agents, including Claude, Codex, and Cursor. Researchers have found that malicious configuration files (.git configs) can be used to inject attacker code into these agents, putting … Read more

A series of high-profile incidents has exposed a concerning trend in enterprise security: identity exposure is becoming a common entry point for active attackers. What starts as a seemingly innocuous vulnerability can quickly snowball into a full-blown breach, highlighting the need for organizations to adopt a more proactive approach to AI-driven threat detection. The phenomenon … Read more

Meta Ads Push StreamRat Android Trojan, Exposing Users to Near-Complete Device Control A worrying trend has emerged in the world of mobile security, as a notorious malware strain is being pushed through seemingly innocuous ads on the Meta platform. The StreamRat Android Trojan has been making headlines for its ability to gain near-complete control over … Read more

Cybersecurity Threats Take a Sophisticated Turn as BGP Hijack Allows Malicious Update of Virtualizor with Persistent Root Access A recent and disturbing incident has highlighted the continued threat posed by cyber attacks on critical infrastructure, as hackers successfully exploited a Border Gateway Protocol (BGP) hijacking to inject malicious code into the Virtualizor control panel. This … Read more

A critical vulnerability in a popular open-source web server software has been exploited by attackers, causing a Brazilian government website to redirect visitors to malicious betting pages. The attack, which was discovered on September 1st, highlights the ongoing threat of cyber attacks against public institutions and underscores the importance of robust security measures. The compromised … Read more

A Silent Threat Lurks in Open-Source Code Repositories: Malicious .git Configs Can Hijack AI Agents In a disturbing trend, cybersecurity researchers have uncovered a new attack vector that leverages seemingly innocuous open-source code repositories to compromise high-profile artificial intelligence (AI) agents. The malicious tactic involves exploiting the configuration files of popular AI tools like Claude, … Read more

A widespread issue has been uncovered in Microsoft’s security software, where legitimate Google search links are being mistakenly flagged as malicious by Defender for Office 365. The problem affects users who see “Opening this website might not be safe” warnings when trying to access blocked hyperlinks. This is not a minor glitch – the impact … Read more

A notorious Russian hacker, extradited from Eastern Europe, is set to face charges related to a sophisticated malware campaign that exploited Microsoft Excel vulnerabilities to infect thousands of computers worldwide. The complex cyberattack, which leveraged cross-domain privilege escalation techniques, has left security experts scrambling to understand its intricacies. At the heart of this operation was … Read more

A critical vulnerability in GeoNetwork, a popular open-source geospatial repository system used by governments and organizations worldwide, has been patched after researchers discovered an unauthenticated remote code execution (RCE) chain. The flaw, which affects GeoNetwork versions 2022.01 and earlier, can be exploited to gain unauthorized access to sensitive data and disrupt backend systems. GeoNetwork is … Read more