Vulnerabilities

The latest breaches, scams and hacks in plain English, newest first.

38 stories · Page 2 of 5

Show everything

Ransomware
Pentagon Data Breach Exposes Millions, FBI Patch Failure and Teen Ransomware Arrest Reported
A Pentagon breach exposed millions of records, the FBI blamed a contractor for a patch failure, and a 16-year-old was named as a ransomware group leader. Only one outlet has reported these incidents so far.
9 Oct 20263 min read
Vulnerabilities
Researchers publish exploit for AnyDesk Linux flaw that grants root access
A critical flaw in AnyDesk for Linux allowed attackers to gain root access before a connection was approved. Researchers published a working exploit, and AnyDesk quietly patched the issue in June.
9 Oct 20263 min read
Malware
Attackers Exploit AhsayCBS Backup Flaws to Install Cryptocurrency Miners
Hackers are exploiting two unpatched flaws in AhsayCBS backup software to take control of servers and install cryptocurrency miners disguised as Microsoft Edge. At least five organisations have been targeted.
9 Oct 20264 min read
Vulnerabilities
GoBalance flaw lets attackers hijack Tor .onion addresses, dark-web sites affected
A bug in GoBalance lets attackers take over .onion addresses of dark-web sites by recovering secret keys. Some sites have already been hijacked, with users urged to change passwords.
9 Oct 20263 min read
Vulnerabilities
Researchers Remotely Hack Fully Patched Google Pixel 10 at Pwn2Own
Three teams demonstrated remote hacks of the latest Google Pixel 10 at the Pwn2Own contest, despite the phones being fully up to date. The details of the exploits have not yet been published.
9 Oct 20263 min read
Vulnerabilities
Citrix urges urgent patching for critical NetScaler vulnerability
Citrix has fixed a critical flaw in NetScaler ADC and Gateway that could let attackers run code or disrupt services. No attacks are known yet, but users are urged to patch immediately.
9 Oct 20263 min read
Vulnerabilities
FBI Seizes Domains Used by Flax Typhoon Hackers Targeting Critical Infrastructure
The FBI has seized seven domains linked to the Flax Typhoon hacking group, disrupting tools used to scan and attack critical infrastructure in the US and abroad. The operation targeted a botnet and tools used for large-scale vulnerability scanning and intrusions.
9 Oct 20263 min read
Vulnerabilities
Cisco Patches Over a Dozen Critical Security Flaws Across Key Products
Cisco has released fixes for more than a dozen critical vulnerabilities in its products. The flaws could allow attackers to gain access, steal information, or disrupt services if left unpatched.
8 Oct 20263 min read
Vulnerabilities
Cisco warns of critical flaws in Nexus switches: attackers could take control
Cisco has disclosed five critical vulnerabilities in its Nexus switches that could let attackers run code or disrupt networks. The flaws affect certain features and require urgent patching.
8 Oct 20263 min read

The day's cyber news in 5 minutes.

Cyberend Daily is one short email with the stories that matter, written so anyone can follow.

No spam · 100% free · Unsubscribe anytime