cybernews.work

Pentera, an Israeli-based cybersecurity firm, has been quietly revolutionizing the way organizations approach security testing and validation using artificial intelligence (AI). In a groundbreaking move, Pentera’s AI-driven workflows have been transformed into validation engines, empowering companies to pinpoint and patch software vulnerabilities before they can be exploited by hackers. This innovative shift in the cybersecurity … Read more

A new study of popular cryptocurrency wallet extensions has uncovered alarming security risks, putting millions of users at risk of identity theft and financial loss. The research, conducted by experts from a leading cybersecurity firm, analyzed 85 extensions for their potential vulnerabilities and found that many are plagued by issues such as address leaks and … Read more

A critical vulnerability has been discovered in several Linux UEFI shims signed with Microsoft’s digital certificate, potentially allowing attackers to bypass Secure Boot and gain unauthorized access to systems. The flaw, which affects 11 outdated shim packages, was found by security researchers at CyberNews.work. The affected shim packages were created between 2012 and 2017, a … Read more

RabbitMQ Flaws Expose OAuth Secrets and Tenant Data, Putting Millions at Risk Security researchers have discovered a set of critical vulnerabilities in RabbitMQ, an open-source messaging broker widely used by enterprises for inter-service communication. The flaws, disclosed on July 13th, could allow attackers to steal sensitive OAuth secrets and expose metadata from cross-tenant queues, putting … Read more

A Critical OAuth Flaw Exposes Microsoft Entra Users to Credential Validation Attacks Microsoft Entra users are facing a heightened risk of credential validation attacks due to a newly discovered vulnerability in the OAuth client ID system. Attackers can exploit this weakness to validate stolen credentials, potentially gaining unauthorized access to sensitive data and systems. The … Read more

As AI-powered security tools continue to revolutionize the way we approach vulnerability detection, Pentera’s latest innovation is taking the industry by storm. By transforming AI-driven workflows into validation engines, Pentera has created a game-changing solution for organizations seeking to secure their software against vulnerabilities discovered by AI models. Pentera’s technology works by leveraging the same … Read more

A new study has uncovered disturbing vulnerabilities in popular cryptocurrency wallet extensions, putting users’ sensitive information at risk of exposure and exploitation. Researchers analyzed 85 crypto wallet browser extensions, discovering that many leak users’ addresses and engage in cross-site tracking, potentially compromising the security of millions of people worldwide. The study, conducted by a team … Read more

A critical vulnerability affecting Linux systems has been discovered, allowing attackers to bypass Secure Boot protections and potentially gain control over computers. The issue lies in 11 outdated Microsoft-signed UEFI shims that can be exploited by malicious actors. These vulnerable components are no longer supported by Microsoft but remain installed on some Linux distributions. The … Read more

A Critical Flaw in RabbitMQ Exposes OAuth Secrets and Tenant Data, Leaving Thousands of Users at Risk RabbitMQ, a popular open-source message broker used by thousands of organizations worldwide, has been found vulnerable to several critical security flaws. The issues, discovered by researchers from the firm Trail of Bits, allow attackers to leak sensitive information, … Read more

SAP Patches Critical Vulnerabilities in NetWeaver, Approuter, and Commerce Cloud Enterprise software giant SAP has released a slew of security patches to address critical vulnerabilities in its NetWeaver Application Server ABAP, Approuter, and Commerce Cloud. The patches, part of SAP’s July 2026 security patch day, fix a total of 20 new and updated security notes … Read more