Cybersecurity News
-
Fake Meta Job Interview Pages Target Facebook and Google Accounts in Phishing Campaign
Cybercriminals are using fraudulent job interview scheduling pages that impersonate Meta and Calendly to steal Facebook and Google login credentials, including two-factor authentication (2FA) codes, in a phishing campaign targeting job seekers.…
-
NGINX Security Update Addresses Critical Code Execution and TLS Vulnerabilities
F5 has released security updates addressing five vulnerabilities in NGINX Open Source and NGINX Plus, including three critical memory-safety flaws that could allow unauthenticated attackers to crash web servers or potentially execute…
-
Drupal Releases Security Fix for Critical Remote Code Execution Vulnerability
The Drupal Security Team has disclosed a critical vulnerability in Drupal core that could allow attackers to execute malicious code on affected websites. The flaw can be exploited without authentication under certain…
-
AI-Discovered Linux Kernel Flaw Could Allow Root Access and Virtual Machine Escape
Researchers at Tencent Zhuque Lab have uncovered a high-severity vulnerability in the Linux kernel that could allow attackers to gain root access or breach virtual machine isolation under certain conditions. Discovered with…
-
Facebook Marketplace Scam Uses Fake Listings to Trick Users Into Responding
Security researchers at Malwarebytes have identified a phishing tactic in which scammers send people fabricated Facebook Marketplace listings that display their own names as sellers, hoping to provoke a response. In a…
-
Microsoft Fixes Exchange Flaw That Could Let Attackers Read Other Users’ Mailboxes
Microsoft has released security updates for a high-severity Exchange Server vulnerability that could allow an authenticated attacker to access other users’ mailboxes and read their emails and attachments. The flaw, tracked as…
-
Malwarebytes Earns Top Marks in Independent Antivirus Tests
Malwarebytes has received high marks in several independent antivirus evaluations, with researchers reporting strong malware protection, few false alarms and limited impact on everyday computer performance. The results cover tests conducted between…
-
Microsoft Warns of ClickFix Attacks Hiding Malware in Browser Caches
Microsoft Threat Intelligence has identified a ClickFix campaign that hides malicious scripts in browser caches before tricking users into executing them, potentially allowing attackers to steal credentials without relying on a conventional…
-
MCP Python SDK Flaw Could Expose OAuth Credentials to Malicious Servers
Security researchers at Cycode have disclosed a high-severity vulnerability in the Model Context Protocol Python SDK that could allow a malicious MCP server to redirect OAuth credentials to infrastructure controlled by an…