Security Affairs

Two CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as Vulnerable

Two miniOrange SAML WordPress plugin auth bypasses were exploited while paid editions never appeared in any vulnerability ...
Security Affairs

Norway ’s Digital Government Infrastructure Hit by a new DDoS Attack

Norway’s shared government infrastructure suffered a third DDoS attack, disrupting digital services but showing no signs of ...
Security Affairs

When the Algorithm Fires You: Uber Faces €825M Fine

Uber faces an €825M GDPR fine for automatically suspending drivers without human review, highlighting the risks of AI ...
Security Affairs

Fake Minecraft Sites Are Still Spreading WeedHack After C2 Takedown

Fake Client Sites Still Active, SEO Poisoning Puts Malicious Downloads at the Top of Google McAfee Labs published a follow-up ...
Security Affairs

U.S. CISA adds maximum-severity Oracle flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Oracle flaw to its Known Exploited Vulnerabilities catalog.
Security Affairs

Slovakia Warns of Cyber Risks in Road Speed Cameras

Slovakia warns that vulnerable speed cameras could enable remote access and provide attackers with a foothold into public ...
Security Affairs

TikTok Settles U.S. Child Privacy Case for $400 Million

TikTok will pay $400 million to settle U.S. claims that it violated child privacy laws by collecting data from users under 13 ...
Security Affairs

iAuthFlow v2: The $10,000 Phishing Toolkit That Survives Your Password Reset

AuthFlow v2 phishing toolkit uses a phished Google session to enroll an attacker-controlled passkey that survives password ...
Security Affairs

Cybercriminals Turn GTA VI Leaks Into Malware Bait

A fake 113GB GTA VI build is packed with malware, using massive empty files to hide a tiny malicious payload. GTA VI hype has ...
Security AffairsOpinion

UK Power Plant Disabled for Four Days by Iran-Linked Hackers, Concurrent with US Water Attacks

Iran-linked hackers shut down a UK power plant for 4 days, concurrent with water facilities attacks across 12 US states ...
Security Affairs

Zero-Click Grok Chat History Theft: Adversa AI Demonstrates Cryptographic Context Injection

New Cryptographic Context Injection technique bypasses AI guardrails via AES-encrypted payloads, leaking full Grok chat ...
securityaffairs

Cyber Crime

WeedHack Minecraft Malware Survives C2 Takedown: Fake Client Sites Still Active, SEO Poisoning Puts Malicious Downloads at the Top of Google McAfee Labs published a follow-up report on the WeedHack ...