The Hacker News (3 hours ago)
Zyxel GS1900 network switches that received the vendor’s earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers at Binarly found. The exploit lets anyone who can reach a switch’s web management interface run commands on it without logging in.
Read the full story on The Hacker News.
The September breach has made it to the dark web and investigators are analyzing the nature of the leaked files.
Attackers can force Android devices into a continuous boot loop using a specially crafted app that requires no permissions and only needs to be installed.
Apple has revealed that it plans to start checking public iCloud links for harmful content starting with iOS 27.3, iPadOS 27.3, macOS 27.3, and visionOS 27.3.
The Indian Computer Emergency Response Team (CERT-In) has disclosed that an artificial intelligence (AI)-assisted threat actor it tracks as Crafty Falcon is targeting organizations in the Banking, Financial Services, and Insurance (BFSI) sectors in the country.
OpenAI uncovered 948 unique local privilege escalation flaws in Linux kernel and generated working root exploits bypassing SMEP, SMAP, and KASLR protections.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a medium-severity security flaw impacting multiple Apple operating systems to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation.
OpenAI on Wednesday detailed a pipeline that employed an upcoming cyber-focused artificial intelligence (AI) model to validate and patch 948 local privilege escalation vulnerabilities in Linux for $1.2 million in API costs.
A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The attacker’s code then runs as root, according to advisories that Debian, Ubuntu, and APT’s developers published on November 4.
SonicWall has warned of two vulnerabilities impacting end-of-life Global Management System (GMS) systems that it said will not be patched.
Cybersecurity researchers have disclosed details of an OpenAI Codex jailbreak bundle that’s designed to modify an artificial intelligence (AI) agent’s trusted instructions to insert advertisements for a third-party AI gateway. The phenomenon has been codenamed prompt adware by Check Point Research.
69 active sources
24 Turkish · 45 English
All sources
