A Vulnerability in Lightning AI Studio Resulted in RCE through Concealed URL Element
Experts in online security have exposed a severe weakness in the development platform of Lightning AI Studio that, if effectively...
researchers
Recent CLAP & DUD Attacks Uncover Vulnerability in Apple M-Series Processors to Speculative Execution Vulnerabilities
A group of cybersecurity experts from Georgia Institute of Technology and Ruhr University Bochum have showcased a pair of novel...
Latest SLAP & FLOP Incidents Uncover Vulnerabilities in Apple M-Series Processors to Speculative Execution Vulnerabilities
A group of cybersecurity experts from Georgia Institute of Technology and Ruhr University Bochum has illustrated two innovative side-channel breaches...
Zyxel CPE Units Encounter Ongoing Exploitation Because of Unfixed CVE-2024-40891 Weakness
Warnings from cybersecurity experts indicate that Zyxel CPE Series gadgets are being actively targeted by a severe undisclosed vulnerability, with...
Security Risk in Airline Travel Integration Allows Unauthorized Access to Millions of Accounts
Details of a recently fixed loophole in OAuth redirection have been revealed by experts in online security, impacting a widely...
Malware Extorts ESXi Platforms through Covert SSH Passages for C2 Activities
Experts in cybersecurity have uncovered that ransomware assaults aimed at ESXi platforms are using concealed channels to reroute traffic to...
Warning: Deceptive CAPTCHA Scheme Disseminates Lumma Stealer in Cross-Sector Offensives
Security analysts are raising awareness about a recent malicious software initiative that exploits counterfeit CAPTCHA validation tests to distribute the...
GhostGPT: Unexpurgated AI Conversationalist Employed by Cyber Criminals for Malware Production, Frauds
A novel malevolent conversationalist has been unearthed by security analysts on illicit cyber activity platforms. GhostGPT is capable of crafting...
QakBot-Connected BC Malware Integrates Improved Remote Entry and Information Collection Capabilities
Information security analysts have revealed information regarding a fresh BackConnect (BC) malware that has been created by malicious entities associated...
‘Deceptive Log’ Microsoft Spoofing Ploy Evades Two-Factor Security
French cybersecurity experts at Sekoia discovered an innovative phishing-as-a-service kit aimed at Microsoft 365 accounts in December 2024, as reported...
A new type of Murdoc_Botnet takes advantage of vulnerabilities in AVTECH IP Cameras and Huawei Routers
Experts in cybersecurity have raised the alarm about a recent extensive operation that capitalizes on weaknesses in AVTECH IP cameras...
ValleyRAT Malware Distribution Utilized by PNGPlug Loader via Deceptive Software Installation Packages
In various regions predominantly Chinese-speaking such as Hong Kong, Taiwan, and the Mainland China, a string of cyber assaults has...
Hackers Utilize Malicious npm Packages to Extract Solana Wallet Keys through Gmail SMTP
Security experts have discovered three groups of harmful packages within the npm and Python Package Index (PyPI) archive that possess...
Significant Weaknesses in WGS-804HPT Switches Allow RCE and Network Breach
In a recent revelation, cybersecurity experts have identified three vulnerabilities in the industrial switches manufactured by Planet Technology, the exploitation...
Spamming PHP Servers with Python Bots Leading to Rampant Growth of Betting Platforms
A recent discovery by cybersecurity analysts has unveiled a fresh initiative aiming at web servers operating PHP-based programs to boost...
