Researchers Hacked into Apple’s New USB-C Controller
Security researchers have successfully hacked Apple’s proprietary ACE3 USB-C controller. This chip, introduced with the iPhone 15 and iPhone 15 Pro, represents a significant leap…
Category: CyberSecurityNews
Critical Samsung 0-Click Vulnerability Found in Samsung S24 and S23 Devices Fixed
On September 21, 2024, a critical security vulnerability was identified by Google researchers in the Monkey’s Audio (APE) decoder used in Samsung’s flagship Galaxy S23…
New Skimmer Malware Hijacking WordPress Websites to Steal Credit Cards
A sophisticated credit card skimmer malware had been found hitting WordPress checkout pages, silently injecting malicious JavaScript into database records to obtain sensitive payment details. …
Samsung Patches Multiple Vulnerabilities That Let Attackers Execute Arbitrary Code
Samsung Mobile has announced the release of a comprehensive maintenance update as part of its monthly Security Maintenance Release (SMR) process. This latest update addresses…
Microsoft Fixes Outlook Client Freeze Issue When Copying Text Using Ctrl+C
Microsoft has resolved a persistent issue that caused classic Outlook to freeze or hang when users attempted to copy text using the Ctrl+C shortcut. The…
Darktrace to Acquire Cado Security to Enhance Cloud Forensic Capabilities
Darktrace, a global leader in AI cybersecurity, has announced plans to acquire Cado Security, a UK-based cyber investigation and response solution provider. The acquisition, expected…
Robot Vacuums Hacked To Spy On Their Owners
Critical vulnerabilities in Ecovacs robot vacuums enable hackers to exploit these devices for surveillance and harassment. The findings, presented at the DEF CON 32 hacking…
Weaponized LDAP PoC Exploit Installing Information-Stealing Malware
Security researchers are tricked into downloading and executing information-stealing malware by a fake proof-of-concept (PoC) exploit for CVE-2024-49113, dubbed LDAPNightmare. During Microsoft’s monthly Patch Tuesday…
Fake CrowdStrike Job Offers Attacking Developers to Deploy Cryptominer
In a sophisticated phishing campaign, uncovered cybercriminals are exploiting CrowdStrike’s recruitment branding to target developers and deploy the XMRig cryptominer. This deceptive operation leverages fake…
Apple Says, “Siri Audio is Always Private, Never Used for Ads”
Following the $95 million privacy breach settlement, Apple has clarified that Siri audio is not used for advertisements, remains private, and is not utilized to…
Facebook Awarded $100,000 for Bug that Allows Internal Access to Server
Facebook has awarded a $100,000 bug bounty to security researcher Ben Sadeghipour for discovering a critical vulnerability in the company’s ad platform. The flaw, identified…
Proton Mail Down – Services Recovered after a Massive Outage
Proton Mail, the renowned privacy-focused email service, experienced a significant global outage today, leaving users worldwide unable to access their email accounts. The disruption began…