Tag: EN

Google Contractor Steals Play Files

Google’s internal security apparatus has come under intense scrutiny following revelations of a prolonged breach orchestrated by a contractor with The post Google Contractor Steals Play Files first appeared on CyberMaterial. This article has been indexed from CyberMaterial Read the…

Chrome Zero Day Delivers LeetAgent

New research from Kaspersky has uncovered a cyber espionage campaign that exploited a patched zero-day security vulnerability in Google Chrome The post Chrome Zero Day Delivers LeetAgent first appeared on CyberMaterial. This article has been indexed from CyberMaterial Read the…

ChatGPT Atlas Browser Fooled By Fake Url

OpenAI’s recently released Atlas web browser, which integrates ChatGPT capabilities for functions like summarization and editing, has been The post ChatGPT Atlas Browser Fooled By Fake Url first appeared on CyberMaterial. This article has been indexed from CyberMaterial Read the…

Fake LastPass Death Claims Breach Vaults

LastPass has issued an urgent warning to its users regarding a significant phishing operation that began in mid-October. The campaign uses convincing emails The post Fake LastPass Death Claims Breach Vaults first appeared on CyberMaterial. This article has been indexed…

IPFire 2.29 Released with Enhanced Intrusion Prevention System Reporting

The IPFire project has announced the release of version 2.29, Core Update 198, marking a significant milestone in the open-source firewall’s evolution. This update introduces transformative improvements to the Intrusion Prevention System, coupled with comprehensive reporting capabilities that fundamentally change…

Active Directory at Risk Due to Domain-Join Account Misconfigurations

Active Directory domain join accounts are systematically exposing enterprise environments to compromise, even when administrators follow Microsoft’s official guidance. A comprehensive security analysis reveals that these specialized accounts inherit excessive privileges by default, creating a direct pathway for attackers to…

Anivia Stealer Peddled on Dark Web with UAC Bypass

A newly advertised information-stealing malware called Anivia Stealer has surfaced on the dark web, with threat actor ZeroTrace aggressively promoting the C++17-based infostealer as a commercial malware-as-a-service offering. The malware implements sophisticated privilege escalation capabilities, including automatic User Account Control…

FileFix + Cache Smuggling: A New Evasion Combo

Cybersecurity researchers have uncovered a sophisticated evolution in phishing attacks that combines FileFix social engineering with cache smuggling techniques to bypass modern security defenses. This hybrid attack method eliminates the need for malicious code to make web requests, instead extracting…