cyberpress

AWS Fixes Critical Loom and SageMaker Flaws Enabling Code Execution and Credential Theft

AWS has released fixes for four security vulnerabilities affecting its open-source Loom AI agent orchestration platform and ...
cyberpress

Zammad Vulnerabilities Enable Remote Code Execution and Root Privilege Escalation

Two newly disclosed vulnerabilities in the Zammad open-source helpdesk platform could let attackers achieve remote code ...
cyberpress

Microsoft Warns of ClickFix Attacks Using Browser Cache to Hide Malicious Payloads

Microsoft Threat Intelligence has uncovered a ClickFix campaign in which compromised websites abuse browser cache storage to ...
cyberpress

New Citrix NetScaler SAML Flaw Triggers Crashes and Suspected Exploitation Attempts

Citrix NetScaler administrators are reporting repeated appliance crashes and forced reboots after applying emergency updates for recently disclosed zero-day vulnerabilities, with the disruption now ...
cyberpress

Microsoft Tracks NeedyMantis Post-Compromise Malware Targeting Telecoms and Government Contractors

Microsoft Threat Intelligence has uncovered NeedyMantis, a modular post-compromise malware framework used in a limited set of ...
cyberpress

ATM Jackpotting Malware Attacks Could Enable Criminals to Remotely Drain Cash Machines

The US Treasury has sanctioned a Tren de Aragua network accused of using malware to force ATMs to release cash. The alleged ...
cyberpress

Critical TeamViewer Vulnerabilities Enable Remote Code Execution and Privilege Escalation Attacks

TeamViewer has released security updates for five high-severity vulnerabilities in its remote-access software that could ...
cyberpress

Apache HTTP Server Flaws Enable Remote Code Execution, DoS and Authentication Bypass

Apache HTTP Server administrators are urged to update their deployments after a series of security vulnerabilities exposed ...
cyberpress

Milk Dragon Uses WooCommerce and Malicious WordPress Plugin to Steal Payment Data

Milk Dragon, also known as NaiLong, is a phishing kit that uses fake online stores to steal payment information and ...
cyberpress

PS5 Relapse Jailbreak Uses WebKit and Kernel Exploit to Gain Read/Write Access

A newly published proof-of-concept called Relapse-Exploit targets PlayStation 5 consoles running firmware versions 7.00 ...
cyberpress

Critical Capacitor Flaw Lets Malicious Links Access App Data and Native Features

A critical vulnerability in Capacitor’s Android and iOS runtimes could allow attackers to use malicious links to load remote ...
cyberpress

OpenAI Stops 15,000-User Operation Attempting to Extract Protected Model Reasoning

OpenAI has disrupted a coordinated campaign involving more than 15,000 user accounts that allegedly attempted to extract ...