Microsoft’s massive July Patch Tuesday release has brought a staggering number of security fixes to Windows systems and other software. The tech giant has patched an astonishing 570 vulnerabilities, almost triple the record-breaking total from last month’s update. This surge in patch counts is largely attributed to advancements in artificial intelligence (AI) that have accelerated … Read more
A Widespread Malware Campaign on GitHub Impersonates Legitimate Software to Steal Sensitive Data A sophisticated threat actor has created nearly 300 fake GitHub repositories that mimic legitimate software and security projects, tricking users into downloading infostealer malware. The campaign’s success relies on users’ trust in free downloads of premium tools, with the malware collecting sensitive … Read more
A sophisticated new malware strain, dubbed LabubaRAT, has been uncovered masquerading as legitimate NVIDIA software on Windows systems. This stealthy threat targets users who download and install pirated or unofficial versions of popular applications, leaving them exposed to remote control and data theft. LabubaRAT’s deceptive tactics begin with its appearance as a harmless NVIDIA driver … Read more
A critical flaw has been discovered in the way Chrome handles extensions, allowing malicious add-ons to secretly read Gmail users’ emails without their consent or knowledge. The vulnerability, uncovered by researchers at Google’s Project Zero, affects millions of users who have installed extensions that use a specific technique called “side-loading” to interact with Gmail. The … Read more
A critical vulnerability discovered in SAP’s NetWeaver ABAP platform could allow attackers to expose or modify sensitive data, prompting an urgent patch release from the software giant. The flaw, which has been assigned a CVSS score of 9.9 – indicating its potential impact as “critical” – affects all versions of NetWeaver ABAP, making it a … Read more
Microsoft has just released software updates to plug an astonishing 570 security holes in its Windows operating systems and other software. This is nearly triple the number of vulnerabilities fixed in last month’s record-breaking Patch Tuesday release. The sheer scale of these patches raises concerns about the evolving threat landscape, where artificial intelligence (AI) is … Read more
Microsoft Entra Users Left Exposed After OAuth Client ID Spoofing Flaw is Revealed A critical vulnerability has been discovered in Microsoft’s Entra authentication system, allowing attackers to spoof OAuth client IDs and validate stolen credentials. This means that anyone with access to a compromised account can use the fake client ID to log in without … Read more
Pentera, an Israeli-based cybersecurity firm, has been quietly revolutionizing the way organizations approach security testing and validation using artificial intelligence (AI). In a groundbreaking move, Pentera’s AI-driven workflows have been transformed into validation engines, empowering companies to pinpoint and patch software vulnerabilities before they can be exploited by hackers. This innovative shift in the cybersecurity … Read more
A new study of popular cryptocurrency wallet extensions has uncovered alarming security risks, putting millions of users at risk of identity theft and financial loss. The research, conducted by experts from a leading cybersecurity firm, analyzed 85 extensions for their potential vulnerabilities and found that many are plagued by issues such as address leaks and … Read more
A critical vulnerability has been discovered in several Linux UEFI shims signed with Microsoft’s digital certificate, potentially allowing attackers to bypass Secure Boot and gain unauthorized access to systems. The flaw, which affects 11 outdated shim packages, was found by security researchers at CyberNews.work. The affected shim packages were created between 2012 and 2017, a … Read more