⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Cybersecurity researchers have disclosed details of worm-like activity that abuses ConnectWise ScreenConnect to distribute a malicious Visual Basic Script (VBScript) payload to newly connected systems. According to Huntress , three unrelated incidents have been found to use diverse initial access methods, namely a Quick Assist tech-support scam, a phishing-delivered MSI installer, and a fake Geek Squad refund form lure, to activate a four-stage VBScript chain that leads to rogue ScreenConnect installations.
A TantoSec proof-of-concept turns an AES-CBC "padding oracle" in Telerik UI for ASP.NET AJAX into unauthenticated remote code execution but only against applications in a specific non-default configuration, and Progress patched the chain in July. There are no confirmed reports of exploitation in the wild.
Researchers at Malwarebytes have identified a campaign where OnlyFans promoters on X (formerly Twitter) are using AI-generated content to appear human and engage with users. The AI-powered accounts create fake personas that drive traffic to adult content platforms through automated interactions.
ChatGPT can now connect to users personal applications to learn their writing style and mimic it across different contexts. OpenAI new feature allows the AI to analyze user writing patterns from connected apps and apply the same tone and style to its responses.
Hackers are actively exploiting new MikroTik RouterOS vulnerabilities to hijack routers. The attacks target unpatched RouterOS devices and install malware that enables the attackers to use compromised routers for DDoS attacks and as proxy nodes.
ConnectWise has warned customers about a new ScreenConnect vulnerability that currently has no patch available. The flaw could allow attackers to bypass authentication and gain remote access to ScreenConnect instances.