Earlier in Cybersecurity
Cybersecurity researchers have detailed a worm-like campaign that exploits ConnectWise ScreenConnect to distribute a malicious Visual Basic Script (VBScript) payload to newly connected systems. Huntress, a cybersecurity firm, reported that three distinct incidents have been observed, each employing different initial…
Security firm TantoSec has released a public proof-of-concept exploit chain that leverages a critical vulnerability in Telerik UI for ASP.NET AJAX, transforming an AES-CBC padding oracle flaw into unauthenticated remote code execution (RCE).
N-able has released its fourth hotfix in five weeks for the N-central remote monitoring and management (RMM) platform, specifically addressing an unauthenticated remote code execution (RCE) vulnerability. This latest update, Hotfix 4, is designated for all on-premises N-central builds prior…
Cybersecurity researchers have detailed JSCeal, a sophisticated malware compiled using the V8 JavaScript engine, capable of harvesting credentials, conducting surveillance, and intercepting network traffic. Check Point Research, a leading cybersecurity firm founded in 1993 and known for its extensive threat…
Attackers are actively exploiting vulnerabilities in MikroTik routers, specifically targeting internet-accessible Secure Shell (SSH) services that lack authentication to achieve full administrative control. CERT Polska issued a warning on September 5, detailing that these successful attacks have been ongoing…
Elastic Security Labs has identified four new malicious programs linked to REVSTEALER, a growing information-stealing malware targeting Windows systems. These programs are designed to persist on an infected machine even after the initial REVSTEALER component has been removed.
An unpatched zero-day vulnerability affecting Magento Open Source and Adobe Commerce is being actively exploited by attackers to gain unauthorized access and install backdoors on online stores. Dutch e-commerce security firm Sansec disclosed the flaw on September 5, reporting…
JetBrains has alerted users of its Cadence workflow orchestration tool to revoke and rotate all credentials following a security incident that occurred last month. Unidentified threat actors successfully breached JetBrains' own environment by exploiting a recently disclosed critical vulnerability…
Broadcom has issued security updates to address two vulnerabilities affecting VMware Workstation and VMware Fusion, two virtualization software products that allow users to run multiple operating systems on a single physical computer.