A phishing campaign targeting WordPress admins uses fake renewal emails to steal credit card data and 2FA codes in real time. The post WordPress Admins Targeted by Renewal Email Phishing Scam appeared first on eSecurity Planet. This article has been…
Category: eSecurity Planet
macOS Flaw Enables Silent Bypass of Apple Privacy Controls
A macOS vulnerability (CVE-2025-43530) allows attackers to silently bypass TCC privacy controls and access sensitive user data. The post macOS Flaw Enables Silent Bypass of Apple Privacy Controls appeared first on eSecurity Planet. This article has been indexed from eSecurity…
NordVPN Says Breach Claims Involve Dummy Test Data
NordVPN says breach claims involved only dummy data from an isolated test environment. The post NordVPN Says Breach Claims Involve Dummy Test Data appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article:…
Critical SmarterMail Bug Enables Unauthenticated File Uploads
A critical SmarterMail flaw allows unauthenticated file uploads, putting thousands of mail servers at risk of remote code execution. The post Critical SmarterMail Bug Enables Unauthenticated File Uploads appeared first on eSecurity Planet. This article has been indexed from eSecurity…
2M Devices at Risk as Kimwolf Botnet Abuses Proxy Networks
The Kimwolf botnet is abusing residential proxies to spread through consumer devices, putting roughly two million systems at risk worldwide. The post 2M Devices at Risk as Kimwolf Botnet Abuses Proxy Networks appeared first on eSecurity Planet. This article has…
Google Tasks Used to Deliver Stealth Phishing Attacks
Attackers are abusing Google Tasks notifications to deliver trusted-domain phishing emails that bypass traditional email security controls. The post Google Tasks Used to Deliver Stealth Phishing Attacks appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet…
Handala Leak Shows Telegram Account Risk, Not iPhone Hacks
The Handala incident shows how Telegram account takeovers can expose sensitive data without compromising entire devices. The post Handala Leak Shows Telegram Account Risk, Not iPhone Hacks appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet…
Security Professionals Plead Guilty in ALPHV Ransomware Case
Two U.S. cybersecurity professionals pleaded guilty to working as ALPHV/BlackCat ransomware affiliates, highlighting insider threat risks. The post Security Professionals Plead Guilty in ALPHV Ransomware Case appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read…
APT36 Uses Malicious Windows Shortcuts to Target Indian Government
APT36 is targeting Indian government entities using malicious Windows shortcut files disguised as PDFs. The post APT36 Uses Malicious Windows Shortcuts to Target Indian Government appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the…
DarkSpectre Malware Hit 8.8M Browsers via Malicious Extensions
DarkSpectre infected over 8.8 million browser users by abusing trusted extensions and advanced evasion techniques. The post DarkSpectre Malware Hit 8.8M Browsers via Malicious Extensions appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the…
Critical Flaw Puts WHILL Electric Wheelchairs at Risk of Hijacking
A critical Bluetooth flaw could allow nearby attackers to remotely control WHILL electric wheelchairs, posing serious safety risks. The post Critical Flaw Puts WHILL Electric Wheelchairs at Risk of Hijacking appeared first on eSecurity Planet. This article has been indexed…
TriZetto Data Breach Triggers Class-Action Lawsuits Against Cognizant
Cognizant faces lawsuits after a prolonged TriZetto data breach exposed sensitive healthcare data. The post TriZetto Data Breach Triggers Class-Action Lawsuits Against Cognizant appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article:…
Malicious Jackson Lookalike Library Slips Into Maven Central
A malicious Jackson lookalike library was used to distribute Cobalt Strike malware through Maven Central. The post Malicious Jackson Lookalike Library Slips Into Maven Central appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the…
EmEditor Website Breach Turns Trusted Installer Into Infostealer Malware
A supply chain attack on the EmEditor website delivered a trojanized installer that installed infostealer malware. The post EmEditor Website Breach Turns Trusted Installer Into Infostealer Malware appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet…
Bluetooth Headphones Can Be Weaponized to Hack Phones
High-severity flaws in popular Bluetooth headphones can enable eavesdropping and smartphone hijacking, with many devices still unpatched. The post Bluetooth Headphones Can Be Weaponized to Hack Phones appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet…
Copilot Studio Feature Enables Silent AI Backdoors
Copilot Studio’s Connected Agents feature can be abused to create silent AI backdoors that bypass visibility and audit controls. The post Copilot Studio Feature Enables Silent AI Backdoors appeared first on eSecurity Planet. This article has been indexed from eSecurity…
2.5M Malicious Requests Hit Adobe ColdFusion and Others in Holiday Attack
A holiday-timed campaign drove 2.5 million malicious requests targeting Adobe ColdFusion and other enterprise platforms. The post 2.5M Malicious Requests Hit Adobe ColdFusion and Others in Holiday Attack appeared first on eSecurity Planet. This article has been indexed from eSecurity…
Zero-Day RCE Exposes 70,000+ XSpeeder Devices Worldwide
A critical zero-day in XSpeeder’s SXZOS firmware allows unauthenticated remote code execution on more than 70,000 exposed devices worldwide. The post Zero-Day RCE Exposes 70,000+ XSpeeder Devices Worldwide appeared first on eSecurity Planet. This article has been indexed from eSecurity…
OpenAI Hardens ChatGPT Atlas Against Prompt Injection Attacks
OpenAI updated ChatGPT Atlas to strengthen defenses against prompt injection. The post OpenAI Hardens ChatGPT Atlas Against Prompt Injection Attacks appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article: OpenAI Hardens ChatGPT…
TeamViewer DEX Bugs Enable DoS and Local Network Attacks
TeamViewer DEX bugs enable DoS attacks and local network exploitation. The post TeamViewer DEX Bugs Enable DoS and Local Network Attacks appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article: TeamViewer DEX…