Cybersecurity News
-
Critical Linux TCP Flaw Can Give Remote Attackers Root Access
A Linux kernel networking vulnerability can allow unauthenticated remote code execution, with Anthropic researchers demonstrating a working root-level exploit and major Linux vendors preparing security updates. A critical Linux kernel vulnerability can…
-
Malware Campaign Uses Signed ChatGPT and Claude Apps to Sideload Malicious Code
Security researchers at Check Point uncovered a malware campaign that disguises malicious downloads as AI desktop applications and abuses legitimate signed OpenAI and Anthropic executables to load attacker-controlled DLLs. Threat actors are…
-
TeamViewer Patches Nine High-Severity Flaws Affecting Remote Access and Management Tools
TeamViewer has fixed nine security vulnerabilities across its remote access clients and management add-ons, including flaws that can enable remote code execution and allow low-privileged users to gain SYSTEM or root access.…
-
Actively Exploited Drupal Commerce Flaw Can Bypass Access Controls
Drupal has released urgent updates for a highly critical Commerce Core vulnerability that is already being exploited and could have a financial impact on affected online stores. Drupal is warning administrators to…
-
WordPress 7.1.4 Fixes Upgrade-Window RCE as Attackers Probe Vulnerable Sites
WordPress 7.1.4 patches a race condition that can expose a temporary installer during core updates, while Wordfence says attackers began probing for the vulnerability shortly after the security release. WordPress has released…
-
Researchers Reveal Three-Flaw Exploit Chain in Oracle PeopleSoft
The critical Oracle PeopleSoft vulnerability that has been exploited in a mass campaign is not one bug but three, according to a detailed technical disclosure published by TrendAI’s Zero Day Initiative. The…
-
Malicious File in Downloads Folder Can Hijack AI Coding Agents
A malicious instruction file found in a developer’s Downloads folder attempted to steer an AI coding agent into installing malware, exposing a security risk created when autonomous development tools trust local configuration…
-
Capcom Data Breach Exposes Nearly 12 Million Customer Records
Capcom disclosed on October 22 that a third party gained unauthorized access to its CAPCOM ID online account system, exposing email addresses and login metadata tied to nearly 11.8 million customer records…
-
Hackers Breach Enterprise Firewalls, Exposing More Than 70,000 Credentials
Hackers have compromised enterprise firewalls and VPN systems worldwide, exposing more than 70,000 credentials and gaining persistent access to corporate networks in a campaign potentially connected to ransomware operations. A joint report…