TGViewer
Channel Public Channel
🛡 Cybersecurity & Privacy 🛡 - News

🛡 Cybersecurity & Privacy 🛡 - News

@cibsecurity

🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Open in Telegram
Subscribers
28.4K
Photos
0
Videos
0
Links
90.9K

Showing posts older than #90933 · Back to latest

Older Posts 20 shown
Post #90932 92
🖋️ Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells 🖋️

Threat actors are exploiting a critical security flaw in WooCommerce Wholesale Lead Capture, a premium WordPress plugin that has more than 6,000 active installs. "This vulnerability can be leveraged by unauthenticated attackers to upload arbitrary files, including PHP backdoors, and achieve remote code execution," Wordfence said. The WordPress security company said it has blocked over.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90931 78
📔 PHP Webshell Campaign Targets WordPress Through Critical WooCommerce Plugin Bug 📔

Attackers are exploiting a critical flaw in a thirdparty WooCommerce plugin to upload PHP webshells.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine PHP Webshell Campaign Targets WordPress Through WooCommerce Bug Attackers are exploiting a critical flaw in a third-party WooCommerce plugin to upload PHP webshells
Post #90930 110
🖋️ Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks 🖋️

Acronis has warned that a highseverity security flaw in its Backup plugin for cPanel and Web Host Manager WHM deployments has been exploited in the wild. The vulnerability, tracked as CVE202687886 CVSS score 7.8, is described as a case of local privilege escalation due to insecure file permissions. It affects the following versions Acronis Backup plugin for cPanel WHM Linux.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90929 89
🖋️ Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens 🖋️

A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr. The vulnerability, tracked as CVE20265430 CVSS score 9.810.0, is a case of improper verification of a cryptographic signature that could result in account takeover. Hacktron Team has been credited with discovering and reporting the flaw. "JWT authentication.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90928 105
🖋️ Threat Intelligence Alone Won't Close the Exploitation Gap 🖋️

A leaked credential shows up in a criminal marketplace, or a vulnerability gets a disclosure advisory, and either one can be weaponized against a real target before most security teams have triaged the alert. Attackers are combining that kind of intelligence with AIassisted exploitation to accelerate the path from exposure to breach faster than most security programs are built to react.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90927 83
🖋️ Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells 🖋️

Threat actors are exploiting a critical security flaw in WooCommerce Wholesale Lead Capture, a premium WordPress plugin that has more than 6,000 active installs. "This vulnerability can be leveraged by unauthenticated attackers to upload arbitrary files, including PHP backdoors, and achieve remote code execution," Wordfence said. The WordPress security company said it has blocked over.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90926 75
🖋️ Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation 🖋️

Google has disclosed that a highseverity security flaw in its Pixel Cellular Modem has come under exploitation in the wild. The vulnerability, tracked as CVE202658704 CVSS score 8.0, is a privilege escalation flaw. "In Cellular Modem, there is a possible permission bypass due to a logic error in the code," according to a description of the bug in the NIST National Vulnerability Database.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90925 79
🖋️ Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks 🖋️

Acronis has warned that a highseverity security flaw in its Backup plugin for cPanel and Web Host Manager WHM deployments has been exploited in the wild. The vulnerability, tracked as CVE202687886 CVSS score 7.8, is described as a case of local privilege escalation due to insecure file permissions. It affects the following versions Acronis Backup plugin for cPanel WHM Linux.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90924 81
🖋️ N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security 🖋️

N0va is targeting organizations across North America and Europe with phishing campaigns that impersonate trusted services and abuse legitimate authentication flows. Successful attacks can give threat actors access to valid accounts without relying on obvious malware activity. From there, a single compromised identity can open the door to sensitive data, business systems, and additional cloud.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90923 68
🖋️ Threat Intelligence Alone Won't Close the Exploitation Gap 🖋️

A leaked credential shows up in a criminal marketplace, or a vulnerability gets a disclosure advisory, and either one can be weaponized against a real target before most security teams have triaged the alert. Attackers are combining that kind of intelligence with AIassisted exploitation to accelerate the path from exposure to breach faster than most security programs are built to react.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90922 69
🖋️ Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix 🖋️

Parallels Desktop for Mac has a flaw that lets an ordinary local account run code as root, the highest level of access on a Mac, software company JFrog said this week. The attack needs code already running on the machine as a normal user, so it does not work over the network. JFrog says the fix is in Parallels Desktop 27, a version that Intel Macs cannot install. Yuval Moravchick, who leads.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
  • ❤ 1
Post #90921 69
🖋️ Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation 🖋️

Google has disclosed that a highseverity security flaw in its Pixel Cellular Modem has come under exploitation in the wild. The vulnerability, tracked as CVE202658704 CVSS score 8.0, is a privilege escalation flaw. "In Cellular Modem, there is a possible permission bypass due to a logic error in the code," according to a description of the bug in the NIST National Vulnerability Database.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90920 80
🖋️ Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories 🖋️

Mandiant says an attacker hijacked an active AI codingassistant session at an unnamed softwareasaservice provider and later spread ShaiHulud across about 100 internal code repositories. Before the repository spread, the assistant recommended software that the attacker had poisoned, and the recommendation was accepted. The worm stole repository secrets and source code for the.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90919 73
🖋️ N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security 🖋️

N0va is targeting organizations across North America and Europe with phishing campaigns that impersonate trusted services and abuse legitimate authentication flows. Successful attacks can give threat actors access to valid accounts without relying on obvious malware activity. From there, a single compromised identity can open the door to sensitive data, business systems, and additional cloud.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90918 111
🖋️ One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude 🖋️

Security researchers at Forever Security have shown that one ordinary browser extension could take control of the AI assistants built into five Chromiumbased products Gemini Live in Chrome, Perplexity Comet, Microsoft Edge, Opera Neon and the Claude in Chrome extension. Once the extension was installed, it could access each product's builtin AI with a single click. On Comet, Edge,.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90917 88
🖋️ Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix 🖋️

Parallels Desktop for Mac has a flaw that lets an ordinary local account run code as root, the highest level of access on a Mac, software company JFrog said this week. The attack needs code already running on the machine as a normal user, so it does not work over the network. JFrog says the fix is in Parallels Desktop 27, a version that Intel Macs cannot install. Yuval Moravchick, who leads.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90916 86
🖋️ Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers 🖋️

Enterprises in Russia have emerged as the target of three threat activity clusters tracked as NightEagle, Hacking Cat, and Toy Ghouls, according to multiple reports from Kaspersky. The cybersecurity vendor said it has identified attacks mounted by NightEagle aka APTQ95, a threat actor known to be active since at least 2023, that involve new techniques for persistence and lateral movement.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90915 89
🖋️ Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories 🖋️

Mandiant says an attacker hijacked an active AI codingassistant session at an unnamed softwareasaservice provider and later spread ShaiHulud across about 100 internal code repositories. Before the repository spread, the assistant recommended software that the attacker had poisoned, and the recommendation was accepted. The worm stole repository secrets and source code for the.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90914 197
🖋️ Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution 🖋️

A critical security flaw in Issabel Framework, a webbased framework for the opensource unified communications PBX software, has come under active exploitation. The vulnerability in question is CVE202689026 CVSS v3.1 score 9.8CVSS v4.0 score 9.3, which can allow an unauthenticated remote attacker to execute arbitrary operating system OS commands by taking advantage of a hardcoded.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90913 123
🖋️ One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude 🖋️

Security researchers at Forever Security have shown that one ordinary browser extension could take control of the AI assistants built into five Chromiumbased products Gemini Live in Chrome, Perplexity Comet, Microsoft Edge, Opera Neon and the Claude in Chrome extension. Once the extension was installed, it could access each product's builtin AI with a single click. On Comet, Edge,.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →