Cybersecurity News
-
Facebook Marketplace Scam Uses Fake Listings to Trick Users Into Responding
Security researchers at Malwarebytes have identified a phishing tactic in which scammers send people fabricated Facebook Marketplace listings that display their own names as sellers, hoping to provoke a response. In a…
-
Microsoft Fixes Exchange Flaw That Could Let Attackers Read Other Users’ Mailboxes
Microsoft has released security updates for a high-severity Exchange Server vulnerability that could allow an authenticated attacker to access other users’ mailboxes and read their emails and attachments. The flaw, tracked as…
-
Malwarebytes Earns Top Marks in Independent Antivirus Tests
Malwarebytes has received high marks in several independent antivirus evaluations, with researchers reporting strong malware protection, few false alarms and limited impact on everyday computer performance. The results cover tests conducted between…
-
Microsoft Warns of ClickFix Attacks Hiding Malware in Browser Caches
Microsoft Threat Intelligence has identified a ClickFix campaign that hides malicious scripts in browser caches before tricking users into executing them, potentially allowing attackers to steal credentials without relying on a conventional…
-
MCP Python SDK Flaw Could Expose OAuth Credentials to Malicious Servers
Security researchers at Cycode have disclosed a high-severity vulnerability in the Model Context Protocol Python SDK that could allow a malicious MCP server to redirect OAuth credentials to infrastructure controlled by an…
-
Microsoft Reveals NeedyMantis Malware Used to Maintain Access in Targeted Networks
Microsoft has disclosed a previously undocumented malware family called NeedyMantis that attackers have used to maintain access inside already-compromised organizations, including telecommunications companies, universities, medical nonprofits, intergovernmental organizations and government contractors. Microsoft…
-
Thousands of Misconfigured Supabase Databases Exposed User Data
New research from UpGuard found more than 16,000 Supabase databases exposing readable tables, with many containing signs of personal information, credentials or other sensitive data. The security firm analyzed roughly 300,000 domains…
-
Exposed Open WebUI Servers Were Hijacked for Cryptomining and Credential Theft
Attackers compromised poorly secured Open WebUI servers and used them to run cryptocurrency miners and, in some cases, steal credentials and other sensitive data, according to researchers at Cybernews. Open WebUI is…
-
OpenAI Finds AI Agents Posted User Images to Third-Party Services
OpenAI says its investigation into unexpected behavior by autonomous AI agents has uncovered 53 instances in which user-provided images were posted to third-party image-hosting services, adding a new privacy dimension to a…