CyberNews Microsoft has just released software updates to plug an astonishing 570 security holes in its Windows operating systems and other software. This is nearly triple the number of vulnerabilities fixed in last month’s record-breaking Patch Tuesday release. The sheer scale of these patches raises concerns about the evolving threat landscape, where artificial intelligence (AI) is … Read more
Microsoft Entra Users Left Exposed After OAuth Client ID Spoofing Flaw is Revealed A critical vulnerability has been discovered in Microsoft’s Entra authentication system, allowing attackers to spoof OAuth client IDs and validate stolen credentials. This means that anyone with access to a compromised account can use the fake client ID to log in without … Read more
Pentera, an Israeli-based cybersecurity firm, has been quietly revolutionizing the way organizations approach security testing and validation using artificial intelligence (AI). In a groundbreaking move, Pentera’s AI-driven workflows have been transformed into validation engines, empowering companies to pinpoint and patch software vulnerabilities before they can be exploited by hackers. This innovative shift in the cybersecurity … Read more
A new study of popular cryptocurrency wallet extensions has uncovered alarming security risks, putting millions of users at risk of identity theft and financial loss. The research, conducted by experts from a leading cybersecurity firm, analyzed 85 extensions for their potential vulnerabilities and found that many are plagued by issues such as address leaks and … Read more
A critical vulnerability has been discovered in several Linux UEFI shims signed with Microsoft’s digital certificate, potentially allowing attackers to bypass Secure Boot and gain unauthorized access to systems. The flaw, which affects 11 outdated shim packages, was found by security researchers at CyberNews.work. The affected shim packages were created between 2012 and 2017, a … Read more
RabbitMQ Flaws Expose OAuth Secrets and Tenant Data, Putting Millions at Risk Security researchers have discovered a set of critical vulnerabilities in RabbitMQ, an open-source messaging broker widely used by enterprises for inter-service communication. The flaws, disclosed on July 13th, could allow attackers to steal sensitive OAuth secrets and expose metadata from cross-tenant queues, putting … Read more
A Critical OAuth Flaw Exposes Microsoft Entra Users to Credential Validation Attacks Microsoft Entra users are facing a heightened risk of credential validation attacks due to a newly discovered vulnerability in the OAuth client ID system. Attackers can exploit this weakness to validate stolen credentials, potentially gaining unauthorized access to sensitive data and systems. The … Read more
As AI-powered security tools continue to revolutionize the way we approach vulnerability detection, Pentera’s latest innovation is taking the industry by storm. By transforming AI-driven workflows into validation engines, Pentera has created a game-changing solution for organizations seeking to secure their software against vulnerabilities discovered by AI models. Pentera’s technology works by leveraging the same … Read more
A new study has uncovered disturbing vulnerabilities in popular cryptocurrency wallet extensions, putting users’ sensitive information at risk of exposure and exploitation. Researchers analyzed 85 crypto wallet browser extensions, discovering that many leak users’ addresses and engage in cross-site tracking, potentially compromising the security of millions of people worldwide. The study, conducted by a team … Read more
A critical vulnerability affecting Linux systems has been discovered, allowing attackers to bypass Secure Boot protections and potentially gain control over computers. The issue lies in 11 outdated Microsoft-signed UEFI shims that can be exploited by malicious actors. These vulnerable components are no longer supported by Microsoft but remain installed on some Linux distributions. The … Read more