Tag: cybersecurity

NodeBB Releases Security Updates For Eight High Severity Vulnerabilities

Risk & Resilience
NodeBB has patched eight high severity vulnerabilities identified by Aikido Security AI pentest agents, urging administrators to upgrade to version 4.14.2 to protect forums from potential attacks.

Cisco Talos Reveals msaRAT Browser Based Command And Control Technique

Risk & Resilience
Cisco Talos has uncovered msaRAT, a Rust based malware used by Chaos ransomware that leverages headless Chrome and Edge browsers with WebRTC to conceal command and control communications.

Google Introduces Selfie Video Verification For Secure Account Recovery

Risk & Resilience
Google has introduced an optional selfie video verification feature that enables users to recover locked accounts using facial verification while enhancing identity protection and account security.

Check Point Patches SmartConsole Authentication Bypass Flaw Allowing Full Admin Access

Risk & Resilience
Check Point has released security updates for three high severity vulnerabilities, including an actively exploited SmartConsole authentication bypass flaw that grants full administrative access.

Nine Year Old RefluXFS Linux Flaw Allows Root Access On Default RHEL Installations

Risk & Resilience
A newly disclosed Linux kernel vulnerability tracked as CVE 2026 64600 allows local users to gain persistent root access on affected XFS based systems, prompting security updates from Linux vendors.

Apple Fixes Hide My Email Bug That Exposed Real Addresses In Mail Logs

Risk & Resilience
Apple has fixed a Hide My Email vulnerability that could reveal users real email addresses in mail logs after rejected messages, following responsible disclosure by security researchers.

Trojanized Newtonsoft Json Package Targets Digitain Gaming Platform

Risk & Resilience
Researchers discovered a trojanized NuGet package posing as Newtonsoft.Json that secretly targeted Digitain gaming systems while functioning as a legitimate library for other users.

Awan Distribution And Sophos Launch Independence Day Rewards Campaign For Channel Partners

Channel & Partners
Awan Distribution and Sophos have introduced a Pakistan Independence Day promotional campaign offering channel partners rewards of up to PKR 40,000 on Sophos XGS Firewall sales.

Thousands Of Malicious GitHub Repositories Distribute SmartLoader Malware Through AI Lures

Risk & Resilience
Researchers have uncovered the FakeGit campaign using nearly 7,600 malicious GitHub repositories, including AI skills and MCP servers, to distribute SmartLoader and StealC malware.

Critical WordPress Vulnerabilities Trigger Widespread Scanning And Remote Code Execution Attacks

Risk & Resilience
Security researchers are warning of widespread exploitation of two critical WordPress vulnerabilities that allow unauthenticated remote code execution and complete website compromise.

SonicWall SMA Zero Day Vulnerabilities Exploited Before Public Disclosure To Gain Root Access

Risk & Resilience
Volexity has uncovered a threat actor exploiting SonicWall SMA 1000 zero day vulnerabilities before disclosure to gain root access and deploy custom malware on VPN appliances.

UAC-0145 Uses ClickFix CAPTCHA Technique To Deploy Malware On Ukrainian Devices

Risk & Resilience
CERT-UA has linked UAC-0145 to a malware campaign using ClickFix CAPTCHA pages, PowerShell commands, and Android backdoors to target Ukrainian users.
1...121314...34Page 13 of 34

Recent articles

spot_img