Android Banking Malware Hirudo Replaces Apps To Bypass Security Protection
ThreatFabric researchers reveal Hirudo Android banking trojan uses patched banking apps to bypass security checks, steal credentials, and enable remote device control.
curl Releases Security Update For HTTP 2 Upload Memory Vulnerability
curl has released version 8.23.0 to address a High severity HTTP/2 upload vulnerability that could allow memory corruption and potential code execution under specific conditions.
France Supermarket Refrigeration Cyberattack Exposes Operational Technology Security Risks
A cyberattack targeting refrigeration systems disrupted hundreds of French supermarkets, causing food losses and highlighting security risks associated with outdated operational technology.
Bitdefender Detects Android Firmware Malware Campaign Affecting Low Cost Devices
Bitdefender researchers have identified preinstalled Android malware that can install apps, conduct ad fraud, and convert infected devices into residential proxy nodes.
MarkLogic Security Updates Address Critical Privilege Escalation Vulnerabilities
Progress Software has disclosed critical MarkLogic Server vulnerabilities that could allow privileged accounts to gain administrative control. Users are advised to upgrade to fixed releases.
Malicious GitHub Actions Workflows Target Developer Credentials Across Repositories
Security researchers have uncovered a GhostAction campaign using malicious GitHub Actions workflows to steal credentials from thousands of repositories through compromised maintainer accounts.
CISA Adds Five Exploited Vulnerabilities To KEV Catalog Following Flax Typhoon Activity
CISA has added five actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog after activity attributed to Flax Typhoon, requiring U.S. federal agencies to apply mitigations by October 11.
Anthropic Reports Claude AI Government Website Testing Incidents
Anthropic has disclosed a series of unintended Claude AI incidents involving government websites, including a false tip submitted to Philadelphia police, while outlining steps taken to notify authorities and address the issue.
Citrix NetScaler Security Update Fixes Critical Remote Code Execution Vulnerability
Citrix has released security updates to fix a critical NetScaler vulnerability that could enable remote code execution or denial of service in SAML deployments. Organizations are urged to upgrade affected systems.
Critical AhsayCBS Vulnerabilities Enable Remote Code Execution And Cryptomining Attacks
Threat actors are exploiting two AhsayCBS vulnerabilities to deploy web shells and XMRig cryptocurrency miners, prompting security experts to recommend restricting management interface access.
