cyberpress

ConnectWise SkyKick Credentials Abused in Microsoft 365 Attacks, Backup Services Shut Down

Attackers abused a compromised credential from ConnectWise Cloud Backup (formerly SkyKick) to access Microsoft 365 customer ...
cyberpress

37-Year-Old OpenBSD Kernel Flaw Lets Attackers Gain Root Access – PoC Released

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a separate out-of-bounds write to obtain root privileges.
cyberpress

Indian Government Warns SideCopy Hackers Are Targeting Organizations With ReverseRAT Malware

Indian authorities have warned that the SideCopy advanced persistent threat group is targeting Indian organisations, ...
cyberpress

Proofpoint Acquires Varonis in $6.3 Billion Deal to Expand AI Security

Proofpoint has signed a definitive agreement to acquire Varonis in an all-cash transaction valued at approximately $6.3 ...
cyberpress

China-Linked Hackers Exploit Critical BeyondTrust Zero-Day to Steal Credentials

A suspected China-linked espionage group exploited a critical BeyondTrust Remote Support zero-day to compromise appliances, ...
cyberpress

Hackers Exploit BeyondTrust Zero-Day to Establish Persistent Root Access and Target Credentials

Hackers linked to a suspected Chinese espionage group exploited a BeyondTrust Remote Support zero-day to gain persistent root ...
cyberpress

Researchers Expose Hacker’s AI Toolkit Revealing Second PaperCut RCE Attack Path

An exposed attacker toolkit that reveals how AI agents supported a PaperCut exploitation campaign, including a second remote ...
cyberpress

CISA Warns Hackers Are Exploiting Palo Alto PAN-OS Zero-Day to Gain Root Access

The U.S. Cybersecurity and Infrastructure Security Agency has added a critical Palo Alto Networks PAN-OS vulnerability, ...
cyberpress

Critical Linux Kernel Zero-Day Lets Attackers Escape Virtual Machines and Gain Root Access

A critical Linux kernel networking vulnerability dubbed PwnEscape lets researchers escape virtual machines and run ...
cyberpress

MITRE ATT&CK Adds New AI Attack Techniques Covering Prompt Injection and Data Theft

MITRE has released ATT&CK v20, expanding its Enterprise framework with techniques covering prompt injection, AI-enabled data ...
cyberpress

Hackers Exploit Critical WordPress Flaws to Execute Remote Code Without Authentication

A critical WordPress exploit chain dubbed WP2Shell lets unauthenticated attackers run arbitrary code on vulnerable websites ...
cyberpress

Hackers Hijack 143 Devices Across 34 Countries to Turn Them Into Residential Proxies

Hackers compromised at least 143 devices across 34 countries and installed proxy software to earn money from victims’ ...