cybernews.work

A Critical GitLab Vulnerability Allows Authenticated Users to Run Commands with Elevated Privileges, Leaving Thousands of Developers Exposed GitLab, a popular web-based platform for software development collaboration, has been hit by a critical vulnerability that allows authenticated users to run commands as if they were administrators. Researchers have published a proof-of-concept (PoC) exploit, demonstrating the … Read more

Cybersecurity experts have sounded the alarm over a sophisticated phishing campaign targeting businesses and individuals worldwide. The malicious emails are designed to exploit a specific vulnerability in email clients, potentially allowing attackers to bypass security measures and gain unauthorized access to sensitive data. The threat was highlighted by SANS Institute’s Internet Storm Center (ISC) in … Read more

The tech industry’s heavy hitters are urging policymakers to back a safer approach to artificial intelligence (AI): making it more open and accessible. Microsoft, along with over two dozen other top companies, has signed an open letter calling on the US government to support the development of open-source AI systems and code. They argue that … Read more

Botnets Powered by Residential Proxies Continue to Grow, Evade Detection A staggering 60 million victim IP addresses are currently being exploited by botnets worldwide, with a significant proportion of these compromised devices located in the United States. These malicious networks are powered by residential proxy networks, which allow cybercriminals to blend in with legitimate traffic … Read more

Rockwell Automation’s Arena Simulation Software Patches High-Severity Code Execution Flaws Rockwell Automation has released patches to fix four critical vulnerabilities in its popular Arena Simulation software, which could allow attackers to execute arbitrary code on affected systems. The flaws, identified by researcher Michael Heinzl, were classified as high-severity and stem from the improper validation of … Read more

A critical vulnerability has been disclosed in GitLab, allowing authenticated users to execute arbitrary system commands with elevated privileges. This Remote Code Execution (RCE) flaw affects versions of GitLab up to and including 15.1.2, putting thousands of organizations at risk of data breaches or even full compromise. The vulnerability, discovered by a researcher who has … Read more

As of this writing, a newly discovered vulnerability in the widely used Internet Protocol Security (IPSec) protocol has been exploited by attackers to gain unauthorized access to sensitive networks. The threat is particularly concerning as it allows hackers to bypass traditional security measures and inject malicious traffic into supposedly secure connections. The vulnerability, identified as … Read more

As tech giants like Microsoft and Meta push policymakers to support open-source AI systems, they’re arguing that this approach is a safer bet than relying on proprietary models. In an open letter posted last week, over two dozen companies make the case that open-source AI will be more beneficial in the long run for several … Read more

A Resilient Threat: Botnets Continue to Grow Despite Disruptions A staggering 60 million victim IP addresses are currently being controlled by botnets powered by residential proxy networks, according to a recent report from Lumen Technology’s Black Lotus Labs. These malicious networks are enabling cybercriminals of all types to evade detection by blending in with seemingly … Read more

A Growing Pileup of Concerns Over Cyber Incident Reporting Regulation The US government’s attempt to regulate how companies report significant cyberattacks has hit a snag, with industry groups expressing frustration over the scope and complexity of the proposed rule. The Cybersecurity and Infrastructure Security Agency (CISA) held town halls in June to gather feedback on … Read more