cyberpress

ConnectWise SkyKick Credentials Abused in Microsoft 365 Attacks, Backup Services Shut Down

Attackers abused a compromised credential from ConnectWise Cloud Backup (formerly SkyKick) to access Microsoft 365 customer ...
cyberpress

37-Year-Old OpenBSD Kernel Flaw Lets Attackers Gain Root Access – PoC Released

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a separate out-of-bounds write to obtain root privileges.
cyberpress

Indian Government Warns SideCopy Hackers Are Targeting Organizations With ReverseRAT Malware

Indian authorities have warned that the SideCopy advanced persistent threat group is targeting Indian organisations, ...
cyberpress

China-Linked Hackers Exploit Critical BeyondTrust Zero-Day to Steal Credentials

A suspected China-linked espionage group exploited a critical BeyondTrust Remote Support zero-day to compromise appliances, ...
cyberpress

Hackers Hide LegionLoader Malware in Massive Executable Files to Evade Security Scanners

Hackers are delivering LegionLoader through an executable inflated to 882,716,672 bytes, roughly 842 MiB, to challenge ...
cyberpress

CISA Warns Hackers Are Exploiting Palo Alto PAN-OS Zero-Day to Gain Root Access

The U.S. Cybersecurity and Infrastructure Security Agency has added a critical Palo Alto Networks PAN-OS vulnerability, ...
cyberpress

Critical Linux Kernel Zero-Day Lets Attackers Escape Virtual Machines and Gain Root Access

A critical Linux kernel networking vulnerability dubbed PwnEscape lets researchers escape virtual machines and run ...
cyberpress

Researchers Expose Hacker’s AI Toolkit Revealing Second PaperCut RCE Attack Path

An exposed attacker toolkit that reveals how AI agents supported a PaperCut exploitation campaign, including a second remote ...
cyberpress

Hackers Exploit Critical WordPress Flaws to Execute Remote Code Without Authentication

A critical WordPress exploit chain dubbed WP2Shell lets unauthenticated attackers run arbitrary code on vulnerable websites ...
cyberpress

MITRE ATT&CK Adds New AI Attack Techniques Covering Prompt Injection and Data Theft

MITRE has released ATT&CK v20, expanding its Enterprise framework with techniques covering prompt injection, AI-enabled data ...
cyberpress

Proofpoint Acquires Varonis in $6.3 Billion Deal to Expand AI Security

Proofpoint has signed a definitive agreement to acquire Varonis in an all-cash transaction valued at approximately $6.3 ...
cyberpress

Multiple MOVEit Transfer Flaws Could Let Attackers Bypass MFA and Access Sensitive Data

Progress has disclosed 12 security vulnerabilities in MOVEit Transfer that could expose sensitive information, undermine ...