cyberpress

AWS Fixes Critical Loom and SageMaker Flaws Enabling Code Execution and Credential Theft

AWS has released fixes for four security vulnerabilities affecting its open-source Loom AI agent orchestration platform and ...
cyberpress

Microsoft Warns of ClickFix Attacks Using Browser Cache to Hide Malicious Payloads

Microsoft Threat Intelligence has uncovered a ClickFix campaign in which compromised websites abuse browser cache storage to ...
cyberpress

New Citrix NetScaler SAML Flaw Triggers Crashes and Suspected Exploitation Attempts

Citrix NetScaler administrators are reporting repeated appliance crashes and forced reboots after applying emergency updates for recently disclosed zero-day vulnerabilities, with the disruption now ...
cyberpress

Zammad Vulnerabilities Enable Remote Code Execution and Root Privilege Escalation

Two newly disclosed vulnerabilities in the Zammad open-source helpdesk platform could let attackers achieve remote code ...
cyberpress

Critical TeamViewer Vulnerabilities Enable Remote Code Execution and Privilege Escalation Attacks

TeamViewer has released security updates for five high-severity vulnerabilities in its remote-access software that could ...
cyberpress

ATM Jackpotting Malware Attacks Could Enable Criminals to Remotely Drain Cash Machines

The US Treasury has sanctioned a Tren de Aragua network accused of using malware to force ATMs to release cash. The alleged ...
cyberpress

Milk Dragon Uses WooCommerce and Malicious WordPress Plugin to Steal Payment Data

Milk Dragon, also known as NaiLong, is a phishing kit that uses fake online stores to steal payment information and ...
cyberpress

Apache HTTP Server Flaws Enable Remote Code Execution, DoS and Authentication Bypass

Apache HTTP Server administrators are urged to update their deployments after a series of security vulnerabilities exposed ...
cyberpress

OpenAI Stops 15,000-User Operation Attempting to Extract Protected Model Reasoning

OpenAI has disrupted a coordinated campaign involving more than 15,000 user accounts that allegedly attempted to extract ...
cyberpress

Critical Capacitor Flaw Lets Malicious Links Access App Data and Native Features

A critical vulnerability in Capacitor’s Android and iOS runtimes could allow attackers to use malicious links to load remote ...
cyberpress

PS5 Relapse Jailbreak Uses WebKit and Kernel Exploit to Gain Read/Write Access

A newly published proof-of-concept called Relapse-Exploit targets PlayStation 5 consoles running firmware versions 7.00 ...
cyberpress

FBI Operation Blackout Takes Down Overseas Scam Networks Targeting U.S. Victims

The FBI has announced Operation Blackout, an international campaign targeting overseas scam networks accused of ...