⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
The Grandoreiro banking Trojan has resurfaced with a new campaign targeting Mexico, adding features that make detection and analysis harder. The malware was previously targeted by a law enforcement takedown but has returned with enhanced capabilities.
A patched security flaw in Zimbra Collaboration (ZCS) is being actively exploited in the wild, according to CERT Polska. The vulnerability allows unauthenticated remote code execution when the optional zimbra-snmp package is installed and SNMP notifications are enabled.
Research by: Jiří Vinopal ( @vinopaljiri ) Abstract What if a trusted security component could be repurposed into an attacker-controlled kernel primitive? What if a signed Microsoft remediation driver could be instructed to execute arbitrary file and registry operations from Ring 0 – without exploits, vulnerabilities, or memory corruption?
Citrix has warned customers to immediately secure their systems against two vulnerabilities affecting NetScaler Gateway secure remote access solutions and NetScaler ADC networking appliances.
Researchers at the University of Massachusetts Amherst demonstrated a zombie card attack that revives expired Visa contactless credit cards for in-store purchases. The attack rewrites the expiration date at a point-of-sale terminal, allowing expired cards to be used for transactions.
An internal AI agent at Meta triggered a Sev 1 incident after exposing sensitive company and user data to unauthorized employees. The incident occurred when an approved AI tool followed its directive without proper access controls, making data available to unauthorized engineers for over two hours.