Security Affairs

Chaotic Eclipse Releases GenDigital Avast Antivirus ZeroDay PrettyPrague

Chaotic Eclipse released PrettyPrague, a PoC exploit for a GenDigital Avast Antivirus ZeroDay Elevation of Privileges ...
Security Affairs

Five Venezuelan Nationals Plead Guilty in Kansas ATM Jackpotting Attempt

Five Venezuelan nationals pleaded guilty after failed ATM jackpotting attempts in Kansas. The FBI recorded 700+ cases in 2025 ...
Security Affairs

Attackers Access Aesto Health AWS Infrastructure, Exposing 9.5 Million Records

Aesto Health suffered a breach exposing personal and health data of +9.5 million people after attackers accessed its AWS ...
Security Affairs

U.S. CISA adds PaperCut NG/MF flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds PaperCut NG/MF flaws to its Known Exploited Vulnerabilities catalog.
Security Affairs

Chaotic Eclipse Releases Kaspersky Zero-Day HardBreacher

Chaotic Eclipse released HardBreacher, a PoC exploit for a Kaspersky Endpoint Security privilege escalation flaw.
Security Affairs

North Korea-linked IT Workers Are Getting Hired Inside Western Companies

Huntress found five North Korea-linked workers using fake identities, remote-access setups and proxy tools to infiltrate ...
Security Affairs

Infostealers Are Hijacking Claude Sessions and Draining Subscriptions

Infostealers can steal active Claude sessions, bypass 2FA and drain paid usage. Anthropic is refunding unauthorized charges.
Security Affairs

Critical GiveWP Flaw Lets Attackers Run Commands on WordPress Servers

A critical GiveWP flaw lets unauthenticated attackers execute server commands. Version 4.16.7.2 fixes the PHP object ...
Security Affairs

ValleyRAT: When Legitimate Software Becomes a Malware Delivery Tool

ValleyRAT hides behind legitimate adware, using DLL sideloading to evade detection, steal data and give Silver Fox control of ...
Security Affairs

Extortion Group FulcrumSec Claims 86GB Manchester Airports Group Data Theft

Extortion group FulcrumSec claims they stole 86GB of Manchester Airports Group data after finding API credentials exposed in ...
Security Affairs

China-linked Fire Ant Hides Inside Trusted Infrastructure

Fire Ant hijacked Cisco routers, stole credentials and altered logs to hide its tracks, using trusted infrastructure to reach ...
securityaffairs

Security Affairs

Chaotic Eclipse released HardBreacher, a PoC exploit for a Kaspersky Endpoint Security privilege escalation flaw, adding another zero-day to his list. Security researcher Chaotic Eclipse, also known ...