cyberpress

AWS Fixes Critical Loom and SageMaker Flaws Enabling Code Execution and Credential Theft

AWS has released fixes for four security vulnerabilities affecting its open-source Loom AI agent orchestration platform and ...
cyberpress

Microsoft Warns of ClickFix Attacks Using Browser Cache to Hide Malicious Payloads

Microsoft Threat Intelligence has uncovered a ClickFix campaign in which compromised websites abuse browser cache storage to ...
cyberpress

New Citrix NetScaler SAML Flaw Triggers Crashes and Suspected Exploitation Attempts

Citrix NetScaler administrators are reporting repeated appliance crashes and forced reboots after applying emergency updates for recently disclosed zero-day vulnerabilities, with the disruption now ...
cyberpress

Cling IoT Malware Masquerades as Google STUN Traffic to Hide C2 Communications

A newly observed IoT botnet named Cling exploits vulnerable internet-facing devices and disguises its command-and-control ...
cyberpress

Software Supply Chain Attacks Use Malicious npm Updates to Steal Credentials and Spread Malware

Software supply chain attacks are turning trusted developer tools into channels for credential theft and malware delivery.
cyberpress

GitLab Patches Critical AI Gateway Flaw Allowing Arbitrary Command Execution

GitLab has released critical security updates for its AI Gateway to address CVE-2026-90970, a vulnerability that could allow authenticated users to execute arbitrary commands on vulnerable self-hosted ...
cyberpress

ATM Jackpotting Malware Attacks Could Enable Criminals to Remotely Drain Cash Machines

The US Treasury has sanctioned a Tren de Aragua network accused of using malware to force ATMs to release cash. The alleged ...
cyberpress

Zammad Vulnerabilities Enable Remote Code Execution and Root Privilege Escalation

Two newly disclosed vulnerabilities in the Zammad open-source helpdesk platform could let attackers achieve remote code ...
cyberpress

Multiple Axios Vulnerabilities Enable SSRF, DoS, Proxy Bypass and Request Hijacking Attacks

Axios maintainers have disclosed a cluster of security vulnerabilities affecting the widely deployed JavaScript HTTP client, ...
cyberpress

PS5 Relapse Jailbreak Uses WebKit and Kernel Exploit to Gain Read/Write Access

A newly published proof-of-concept called Relapse-Exploit targets PlayStation 5 consoles running firmware versions 7.00 ...
cyberpress

Critical Capacitor Flaw Lets Malicious Links Access App Data and Native Features

A critical vulnerability in Capacitor’s Android and iOS runtimes could allow attackers to use malicious links to load remote ...
cyberpress

Critical TeamViewer Vulnerabilities Enable Remote Code Execution and Privilege Escalation Attacks

TeamViewer has released security updates for five high-severity vulnerabilities in its remote-access software that could ...