cyberpress

ConnectWise SkyKick Credentials Abused in Microsoft 365 Attacks, Backup Services Shut Down

Attackers abused a compromised credential from ConnectWise Cloud Backup (formerly SkyKick) to access Microsoft 365 customer ...
cyberpress

Multiple MOVEit Transfer Flaws Could Let Attackers Bypass MFA and Access Sensitive Data

Progress has disclosed 12 security vulnerabilities in MOVEit Transfer that could expose sensitive information, undermine ...
cyberpress

37-Year-Old OpenBSD Kernel Flaw Lets Attackers Gain Root Access – PoC Released

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a separate out-of-bounds write to obtain root privileges.
cyberpress

CISA Warns Hackers Are Exploiting Palo Alto PAN-OS Zero-Day to Gain Root Access

The U.S. Cybersecurity and Infrastructure Security Agency has added a critical Palo Alto Networks PAN-OS vulnerability, ...
cyberpress

Indian Government Warns SideCopy Hackers Are Targeting Organizations With ReverseRAT Malware

Indian authorities have warned that the SideCopy advanced persistent threat group is targeting Indian organisations, ...
cyberpress

Canonical Confirms DDoS Attack Disrupting Ubuntu Websites and Security Services

Canonical confirmed that a sustained distributed denial-of-service attack disrupted Ubuntu and Canonical websites on October ...
cyberpress

China-Linked Hackers Exploit Critical BeyondTrust Zero-Day to Steal Credentials

A suspected China-linked espionage group exploited a critical BeyondTrust Remote Support zero-day to compromise appliances, ...
cyberpress

MITRE ATT&CK Adds New AI Attack Techniques Covering Prompt Injection and Data Theft

MITRE has released ATT&CK v20, expanding its Enterprise framework with techniques covering prompt injection, AI-enabled data ...
cyberpress

Researchers Expose Hacker’s AI Toolkit Revealing Second PaperCut RCE Attack Path

An exposed attacker toolkit that reveals how AI agents supported a PaperCut exploitation campaign, including a second remote ...
cyberpress

Hackers Exploit Critical WordPress Flaws to Execute Remote Code Without Authentication

A critical WordPress exploit chain dubbed WP2Shell lets unauthenticated attackers run arbitrary code on vulnerable websites ...
cyberpress

Hackers Exploit BeyondTrust Zero-Day to Establish Persistent Root Access and Target Credentials

Hackers linked to a suspected Chinese espionage group exploited a BeyondTrust Remote Support zero-day to gain persistent root ...
cyberpress

Anthropic Warns AI Models Could Soon Self-Replicate Across Smart TVs and IoT Devices

Anthropic researchers warn that small AI models could soon autonomously replicate across compromised consumer devices, ...