The Hacker News (2 hours ago)
A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge’s sandbox, a security researcher has shown.
Read the full story on The Hacker News.
Discord will allow search engines to index discussions in Discoverable Servers and make them accessible on the web to users outside the platform without an account or invitation.
The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access.
This is according to the threat research arm of NordVPN.
A simple barcode scanner could be the gateway to a large-scale cyberattack, Kaspersky is warning.
Amnezia VPN has launched Amnezia Pulse, a public map that tracks internet shutdowns and whitelist restrictions in Russia and worldwide using anonymized VPN data.
Sony Network Communications has confirmed a data breach that compromised approximately 2.5 million records containing current and former customers’ personal information.
Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android’s usual confirmation screens, and to update them in the background.
Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems.
Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber.
A critical 16-year-old flaw in EDK II, the open-source code that most hardware makers use to build UEFI firmware, can allow an attacker to run code on a machine before its operating system loads, but only while the machine is booting over the network.
71 active sources
26 Turkish · 45 English
All sources
