Elektrine
Log in Register

#securityaffairs

108 posts · Last used 2d

securityaffairs @securityaffairs@infosec.exchange
· 2mo ago
#VPN Breach Exposes 58 Million Connection Logs Despite "No-Logs" Claims https://securityaffairs.com/196197/security/vpn-breach-exposes-58-million-connection-logs-despite-no-logs-claims.html #securityaffairs #hacking
VPN Breach Exposes 58 Million Connection Logs Despite "No-Logs" Claims - Security Affairs
Security Affairs

VPN Breach Exposes 58 Million Connection Logs Despite "No-Logs" Claims - Security Affairs

A breached "no-logs" VPN exposed 58M connection logs and millions of user, device, and payment records, contradicting its privacy claims.

0
0
1
1
securityaffairs @securityaffairs@infosec.exchange
· 2w ago
U.S. #CISA adds Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/199891/hacking/u-s-cisa-adds-citrix-netscaler-flaws-to-its-known-exploited-vulnerabilities-catalog.html #securityaffairs #hacking
U.S. CISA adds Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog
Security Affairs

U.S. CISA adds Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-88771 (CVSS score: 9.5) is a remote code execution vulnerability caused by improper input validation that could allow an unauthenticated remote […]

0
0
1
0
securityaffairs @securityaffairs@infosec.exchange
· 2w ago
#Citrix Confirmed Two New #NetScaler Flaws Exploited as Zero-Day https://securityaffairs.com/199873/security/citrix-confirmed-two-new-netscaler-flaws-exploited-as-zero-day.html #securityaffairs #hacking
Citrix Confirmed Two New NetScaler Flaws Exploited as Zero-Day
Security Affairs

Citrix Confirmed Two New NetScaler Flaws Exploited as Zero-Day

Citrix confirmed two critical NetScaler zero-days were exploited before patches were available, with attackers able to remotely execute code.

0
0
1
0
securityaffairs @securityaffairs@infosec.exchange
· 2w ago
U.S. #CISA adds #WordPress flaw to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/199790/security/u-s-cisa-adds-wordpress-flaw-to-its-known-exploited-vulnerabilities-catalog.html #securityaffairs #hacking
U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog
Security Affairs

U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds WordPress flaw to its Known Exploited Vulnerabilities catalog.

0
0
1
0
securityaffairs @securityaffairs@infosec.exchange
· 2w ago
AI-Powered #CARBONATO #Botnet Steals Credentials to Fund Its Own #LLM Gateway https://securityaffairs.com/199716/hacking/ai-powered-carbonato-botnet-steals-credentials-to-fund-its-own-llm-gateway.html #securityaffairs #hacking #AI #malware
AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway
Security Affairs

AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway

CARBONATO exploits exposed Docker daemons, installs an AI agent, steals API keys and spreads across networks with autonomous command execution.

1
0
2
0
securityaffairs @securityaffairs@infosec.exchange
· 2w ago
#OpenAI Agent Bypassed an Australian Government Health Portal During Internal Research https://securityaffairs.com/199662/ai/openai-agent-bypassed-an-australian-government-health-portal-during-internal-research.html #securityaffairs #hacking
OpenAI Agent Bypassed an Australian Government Health Portal During Internal Research
Security Affairs

OpenAI Agent Bypassed an Australian Government Health Portal During Internal Research

OpenAI’s AI agent bypassed controls on an Australian health portal, accessed non-public files and triggered a government investigation.

1
0
2
1
securityaffairs @securityaffairs@infosec.exchange
· 3w ago
U.S. #CISA adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/199430/security/u-s-cisa-adds-linux-kernel-flaws-to-its-known-exploited-vulnerabilities-catalog-2.html #securityaffairs #hacking
U.S. CISA adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog
Security Affairs

U.S. CISA adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog.

1
0
2
0
securityaffairs @securityaffairs@infosec.exchange
· 3w ago
#AI Hallucinations Nearly Triggered a #US-#China Military Confrontation https://securityaffairs.com/199415/ai/ai-hallucination-nearly-triggered-a-us-china-military-confrontation.html #securityaffairs #hacking #Cyberwar
AI Hallucination Nearly Triggered a US-China Military Confrontation
Security Affairs

AI Hallucination Nearly Triggered a US-China Military Confrontation

An AI-generated intelligence report falsely identified weapons on a Chinese ship, nearly triggering a US military operation.

0
0
1
0
securityaffairs @securityaffairs@infosec.exchange
· 3w ago
#RatHat Turns Android Accessibility Into an Attack Weapon https://securityaffairs.com/199317/malware/rathat-turns-android-accessibility-into-an-attack-weapon.html #securityaffairs #hacking #android #malware
RatHat Turns Android Accessibility Into an Attack Weapon - Security Affairs
Security Affairs

RatHat Turns Android Accessibility Into an Attack Weapon - Security Affairs

RatHat combines AI-driven screen control, Android debugging abuse and advanced credential theft to gain deep control of infected phones.

0
0
1
1
securityaffairs @securityaffairs@infosec.exchange
· 3w ago
U.S. #CISA adds #Cisco Secure Email Gateway flaw to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/199156/security/u-s-cisa-adds-cisco-secure-email-gateway-flaw-to-its-known-exploited-vulnerabilities-catalog.html #securityaffairs #hacking
U.S. CISA adds Cisco Secure Email Gateway flaw to its Known Exploited Vulnerabilities catalog
Security Affairs

U.S. CISA adds Cisco Secure Email Gateway flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds Cisco Secure Email Gateway vulnerability to its Known Exploited Vulnerabilities catalog.....

0
0
1
0
securityaffairs @securityaffairs@infosec.exchange
· 1mo ago
Critical #GiveWP Flaw Lets Attackers Run Commands on #WordPress Servers https://securityaffairs.com/198156/security/critical-givewp-flaw-lets-attackers-run-commands-on-wordpress-servers.html #securityaffairs #hacking
Critical GiveWP Flaw Lets Attackers Run Commands on WordPress Servers
Security Affairs

Critical GiveWP Flaw Lets Attackers Run Commands on WordPress Servers

A critical GiveWP flaw lets unauthenticated attackers execute server commands. Version 4.16.7.2 fixes the PHP object injection chain.

0
0
1
0
securityaffairs @securityaffairs@infosec.exchange
· 1mo ago
Cyberattack on #UK #Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports https://securityaffairs.com/197966/data-breach/cyberattack-on-uk-airport-operator-mag-exposes-data-of-8-7-million-customers-across-three-airports.html #securityaffairs #hacking #APT
Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports
Security Affairs

Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports

A cyberattack on Manchester Airports Group exposed data of 8.7 million customers across Manchester, Stansted, and East Midlands airports.

0
0
2
0
securityaffairs @securityaffairs@infosec.exchange
· 2mo ago
U.S. #CISA adds a #Progress #LoadMaster flaw to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/196863/hacking/u-s-cisa-adds-a-progress-loadmaster-flaw-to-its-known-exploited-vulnerabilities-catalog.html #securityaffairs #hacking
U.S. CISA adds a Progress LoadMaster flaw to its Known Exploited Vulnerabilities catalog
Security Affairs

U.S. CISA adds a Progress LoadMaster flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds a Progress LoadMaster vulnerability to its Known Exploited Vulnerabilities catalog............

0
0
1
0
securityaffairs @securityaffairs@infosec.exchange
· 2mo ago
Researchers Discover Hidden #Backdoor in 20 Router Models Allowing Remote Root Access https://securityaffairs.com/196785/security/researchers-discover-hidden-backdoor-in-20-router-models-allowing-remote-root-access.html #securityaffairs #hacking #Zbtlink
Researchers Discover Hidden Backdoor in 20 Router Models Allowing Remote Root Access
Security Affairs

Researchers Discover Hidden Backdoor in 20 Router Models Allowing Remote Root Access

A hidden backdoor in 20 router models lets remote servers execute commands as root, putting affected devices at risk of takeover.

2
0
3
0
securityaffairs @securityaffairs@infosec.exchange
· 2mo ago
Exposed SISVISA Database Leaks 102,000 Brazilian Health Surveillance Records https://securityaffairs.com/196766/data-breach/exposed-sisvisa-database-leaks-102000-brazilian-health-surveillance-records.html #securityaffairs #hacking
Exposed SISVISA Database Leaks 102,000 Brazilian Health Surveillance Records
Security Affairs

Exposed SISVISA Database Leaks 102,000 Brazilian Health Surveillance Records

An exposed SISVISA database leaked 102,215 Brazilian health records, exposing IDs, tax data, and regulatory documents without authentication.

0
0
1
0
securityaffairs @securityaffairs@infosec.exchange
· 2mo ago
SMOKE#SCREEN Campaign Abuses ScreenConnect to Give Attackers Remote Control Access https://securityaffairs.com/196637/uncategorized/smokescreen-campaign-abuses-screenconnect-to-give-attackers-remote-control-access.html #securityaffairs #hacking
SMOKE#SCREEN Campaign Abuses ScreenConnect to Give Attackers Remote Control Access
Security Affairs

SMOKE#SCREEN Campaign Abuses ScreenConnect to Give Attackers Remote Control Access

SMOKE#SCREEN uses fake Zoom updates to install ScreenConnect RMM, giving attackers persistent remote access while bypassing defenses.

0
0
1
0