Security News

Security News

Breaking Cyber Security and Threat Intel News fresh off the wire!

Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts

Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts

Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE

Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE

ChatGPT can now connect to your personal apps to mimic writing style

ChatGPT can now connect to your personal apps to mimic writing style

BleepingComputer

Hackers exploit new MikroTik RouterOS flaws to hijack routers

Hackers exploit new MikroTik RouterOS flaws to hijack routers

BleepingComputer

ConnectWise warns of new ScreenConnect flaw without patch

ConnectWise warns of new ScreenConnect flaw without patch

BleepingComputer

N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw

N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw

JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies

JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies

Blind Spots and Backdoors: Practical Advice for Identity Risk Reduction

Blind Spots and Backdoors: Practical Advice for Identity Risk Reduction

The Economics of Dwell Time and Why AI Native SIEM Changes the Equation

The Economics of Dwell Time and Why AI Native SIEM Changes the Equation

N-able patches max severity N-central flaw amid ongoing attacks

N-able patches max severity N-central flaw amid ongoing attacks

BleepingComputer

ChatGPT Astra is now rolling out to $20 Plus subscription

BleepingComputer

Attackers conceal phishing lures using invisible Unicode characters

Attackers conceal phishing lures using invisible Unicode characters

BleepingComputer

Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication

Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication

Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner

Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain

Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain

BleepingComputer

Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted

Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted

OpenAI admits it didn't disclose rogue AI wiki hijacking incident

OpenAI admits it didn't disclose rogue AI wiki hijacking incident

BleepingComputer

Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel

Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel

Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

IDScan sued over alleged data breach affecting 153 million drivers

IDScan sued over alleged data breach affecting 153 million drivers

BleepingComputer

Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters

Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters

Critical Citrix NetScaler auth bypass now leveraged in attacks

Critical Citrix NetScaler auth bypass now leveraged in attacks

BleepingComputer