CyberNews A major cybersecurity wake-up call has been issued by Snowflake, one of the leading cloud-based data warehousing and analytics platforms, as it completes its three-phase authentication rollout, effectively ending password-based service-account logins. This move comes on the heels of a high-profile hacking case that exposed billions of records, including sensitive customer information from AT&T’s wireless … Read more
A critical vulnerability chain has been discovered in the popular Avada theme for WordPress, allowing an attacker to execute arbitrary PHP code on a target server without even requiring valid login credentials. This zero-click Remote Code Execution (RCE) attack can be executed by chaining six security issues together, and its severity is rated 9.8 out … Read more
The FBI has dealt a significant blow to Chinese cyber espionage operations by disrupting a sophisticated proxy network used by threat actors linked to Beijing. The network, known as “quartermaster,” was designed to provide reconnaissance, proxy management, and operational routing capabilities for China’s intelligence agencies. At the heart of this operation is a group called … Read more
Hackers Exploit Chain of Microsoft SharePoint Vulnerabilities, Putting Thousands at Risk Cybersecurity experts are sounding the alarm as threat actors have begun chaining two previously disclosed vulnerabilities in Microsoft SharePoint to gain unauthorized access and execute arbitrary code on unpatched servers. The combination of flaws allows attackers to bypass authentication and perform remote code execution … Read more
A New Rowhammer Attack Exposes Vulnerability in NVIDIA’s GPU Security A team of researchers from the University of Toronto has uncovered a sophisticated new attack that can bypass even the most advanced security measures on NVIDIA graphics processing units (GPUs). Dubbed GPUThor, this rowhammer attack exploits vulnerabilities in ECC protection, granting attackers root-level access to … Read more
Cybersecurity researchers have identified a concerning expansion of the Nimbus Manticore toolset, which has added two new capabilities that significantly enhance its attack potential. The updated toolkit now includes a backdoor similar to TWOSTROKE and an SSH tunneler, allowing attackers to move undetected across networks and establish persistent access. The Nimbus Manticore toolset has been … Read more
FBI Disrupts China-Led Infrastructure Used to Siphon Data from U.S. Organizations The FBI has successfully disrupted a sophisticated cyber infrastructure, allegedly linked to Chinese hackers, that had been quietly siphoning sensitive data from various U.S.-based organizations for months. The operation, dubbed “QTFY,” was a complex web of compromised networks and servers used to facilitate large-scale … Read more
Federal authorities have disrupted a sophisticated proxy network used by Chinese cyber operatives to carry out espionage operations against high-stakes targets in the US. The FBI’s operation has dealt a significant blow to the group, known as QTFY/QT/QTCYBER, which employed advanced tools and infrastructure to evade detection. QTFY, backed by the China-based Nanjing Xinjiuwei Network … Read more
Meta’s $18 Billion Settlement Marks a Major Shift in Social Media Regulation In a groundbreaking move, Meta has agreed to an $18 billion settlement with a bipartisan coalition of 52 attorneys general over allegations that Facebook and Instagram were designed to encourage compulsive use among teenagers. The proposed settlement resolves a lawsuit filed in 2023 … Read more
A New Rowhammer Attack Exposes NVIDIA GPUs to Root Access Vulnerability In a disturbing revelation, University of Toronto researchers have disclosed a new attack called GPUThor that can bypass error-correcting code (ECC) protections on NVIDIA’s high-end graphics processing units (GPUs). This devastating attack enables denial-of-service (DoS) and root-level privilege escalation, posing a significant threat to … Read more