⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Researchers disclosed two denial-of-service attack techniques that exploit how CDNs convert HTTP/3 traffic to HTTP/1.1 when forwarding to origin servers. The attacks can achieve up to 350x amplification factors, affecting major CDNs including Akamai, Cloudflare, Amazon CloudFront, Fastly, and Tencent.
A new Android malware strain named Manic is actively targeting Ukrainian banks, government services, and messaging apps, as well as Russian and European financial institutions. The malware can exfiltrate data from offline phones by using nearby infected devices as relay points.
The Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that threat actors are now exploiting a critical vulnerability in the MLflow open-source AI engineering platform.
Security researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL's open-source AMMOS Instrument Toolkit, that allow an unauthenticated attacker to issue arbitrary commands to the software's spacecraft and instrument command bus. The chain, tracked asGHSA-p9r8-2q67-fp86and rated 9.
Cybersecurity researchers have shed light on an updated version ofToxicPanda(aka TgToxic) that comes with "significant enhancements," including a set of 167 remote commands and expands its targeting footprint globally. Zimperium zLabs, in aWednesday report, said the Android malware also features a PIN harvesting workflow targeting more than 140 banking and cryptocurrency applications.
A new Android malware named Manic targeting users in multiple European countries has a fallback data exfiltration mechanism that uses nearby infected devices.