cybernews.work

Progress, the software giant behind the ShareFile file-sharing platform, is urging its customers to shut down Storage Zone Controllers (SZCs) due to a critical security threat. This move affects thousands of businesses worldwide, emphasizing the need for swift action to prevent potential data breaches and system compromises. ShareFile’s SZCs are essentially on-premises servers that act … Read more

A notorious ransomware negotiator, who made headlines for facilitating lucrative attacks on behalf of the BlackCat gang, has been sentenced to 70 months in prison. The individual’s conviction serves as a stark reminder that the underworld of cybercrime is not just a distant threat, but a tangible reality with real-world consequences. The accused, a self-proclaimed … Read more

A sophisticated cyberattack has left cryptocurrency enthusiasts reeling, with over $5 million drained from wallets due to an exploit of the “Ill Bloom” vulnerability. The attack targets users of several popular cryptocurrency exchanges and wallets, leaving a trail of financial losses in its wake. The Ill Bloom vulnerability is a type of software bug that … Read more

**RAT with gRPC Streaming Threatens Organizations Globally** A new Remote Access Trojan (RAT) called MODBEACON has been spotted in the wild, leveraging advanced technologies like gRPC streaming to evade detection and maintain encrypted command and control (C2) traffic. This sophisticated malware variant is a significant threat to organizations worldwide, putting sensitive data at risk of … Read more

Researchers have uncovered a sophisticated attack chain that leverages three previously unknown vulnerabilities in WhatsApp, allowing hackers to remotely execute malicious code on targeted devices with complete control over the host system. Dubbed “OpenClaw,” this alarming discovery highlights the escalating threat landscape of AI-driven attacks. The OpenClaw exploit chain hinges on a combination of three … Read more

A Novel Form of Cyberattack Exploits Wallet Cards with Unpatchable Flaws A disturbing trend has been spotted in the world of cybersecurity, where hackers are using a novel form of attack to reset passwords on vulnerable wallet cards. The affected cards, produced by Tangem, rely on a unique combination of software and hardware to store … Read more

A Massive Backdoor Campaign Exposed: Thousands of WordPress Sites Compromised Through WP-SHELLSTORM In a shocking revelation, an exposed hacker server has uncovered a massive backdoor campaign targeting thousands of WordPress sites worldwide. The malware, known as WP-SHELLSTORM, has been quietly infecting websites for months, leaving their owners vulnerable to cyber attacks and data breaches. WP-SHELLSTORM … Read more

Cybersecurity experts at Lumen Technologies have made significant strides in rebuilding their exposure management systems, reducing the number of vulnerable assets from 17,000 to just over 1.1 million. This massive overhaul was necessitated by the increasing sophistication of AI-powered vulnerability discovery tools, which can identify vulnerabilities that human security teams may miss. To put this … Read more

A Critical Flaw in XQUIC Puts HTTP/3 Servers at Risk of Remote Crashes A severe vulnerability, dubbed XRING, has been discovered in the XQUIC protocol, which is used by some HTTP/3 servers. The flaw allows remote clients to crash these servers with a single malicious packet, putting sensitive online services and data at risk. What’s … Read more

A New and Highly Sophisticated RAT Exploits gRPC Streaming for Stealthy C2 Traffic A sophisticated new malware variant known as MODBEACON RAT has been discovered, leveraging the gRPC streaming protocol to facilitate encrypted command and control (C2) communication between compromised systems. This latest threat poses a significant challenge to cybersecurity experts, who must now contend … Read more