The Hacker News (2 hours ago)
This2Shell, That2Shell, Everything2Shell. That’s pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere.
Read the full story on The Hacker News.
Samsung TVs are being accused of sinister snooping online, but it looks like the discussion is based on some false assumptions about features Samsung has actively marketed to everyone
Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell.
Siemens, Schneider Electric, ABB and others have confirmed that some of their products are affected by the PHP2Shell vulnerabilities.
The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected.
The bug can trigger remote code execution but only under certain, “unlikely” conditions.
This Cybersecurity Awareness Month’s theme, “Securing the Next 250,” asks us to look beyond vulnerabilities and consider what will make our digital systems resilient for generations.
Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox intended to contain it, the project’s maintainers say.
Every SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started or how it progressed.
A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, researcher Ovi found.
Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in sessions and then replay the stolen tokens to break into email accounts at 79 organizations.
71 active sources
26 Turkish · 45 English
All sources
