Security News
Joomla XSS Bugs Open Millions of Websites to RCE
Improper content filtering in a core function allows multiple paths to exploitation for CVE-2024-21726.
Dark Reading
21 Feb 2024 933 Views
Musk claims Neuralink patient doing OK with implant, can move mouse with brain
Medical ethicists alarmed by Musk being "sole source of information" on patient.
Ars Technica
21 Feb 2024 3642 Views
Signal rolls out usernames that let you hide your phone number
End-to-end encrypted messaging app Signal finally allows users to pick custom usernames to connect with others while protecting their phone number privacy. [...]
Bleepingcomputer
21 Feb 2024 738 Views
Over 28,500 Exchange servers vulnerable to actively exploited bug
Up to 97,000 Microsoft Exchange servers may be vulnerable to a critical severity privilege escalation flaw tracked as CVE-2024-21410 that hackers are actively exploiting. [...]
Bleepingcomputer
20 Feb 2024 1099 Views
Anatsa Android malware downloaded 150,000 times via Google Play
The Anatsa banking trojan has been targeting users in Europe by infecting Android devices through malware droppers hosted on Google Play. [...]
Bleepingcomputer
19 Feb 2024 1119 Views
OpenAI collapses media reality with Sora, a photorealistic AI video generator
On Thursday, OpenAI announced Sora, a text-to-video AI model that can generate 60-second-long photorealistic HD video from written descriptions. While it's only a research preview that we have not tested, it reportedly creates synthetic video (...
Ars Technica
17 Feb 2024 3637 Views
SolarWinds fixes critical RCE bugs in access rights audit solution
SolarWinds has patched five remote code execution (RCE) flaws in its Access Rights Manager (ARM) solution, including three critical severity vulnerabilities that allow unauthenticated exploitation. [...]
Bleepingcomputer
17 Feb 2024 896 Views
New ‘Gold Pickaxe’ Android, iOS malware steals your face for fraud
A new iOS and Android trojan named 'GoldPickaxe' employs a social engineering scheme to trick victims into scanning their faces and ID documents, which are believed to be used to generate deepfakes for unauthorized banking access.
Bleeping Computer
16 Feb 2024 1047 Views
Over 13,000 Ivanti gateways vulnerable to actively exploited bugs
Thousands of Ivanti Connect Secure and Policy Secure endpoints remain vulnerable to multiple security issues first disclosed more than a month ago and which the vendor gradually patched.
Bleeping Computer
16 Feb 2024 934 Views
GoldPickaxe Trojan Uses Biometric Data and Deepfake Tech to Scam Banks
The trojan captures facial biometric data to create deepfake videos for bypassing banking logins, demonstrating a high level of sophistication and operational maturity by the cybercriminal group GoldFactory.[...]
Cyware News
15 Feb 2024 722 Views
