Mastodon.ie @mastodonie

22 posts7 participants4 posts today

**Pyrzout** @jos1264@social.skynetcloud.site · 2h

Pyrzout @jos1264@social.skynetcloud.site

FortiWeb Authentication Bypass Vulnerability Let Attackers Log in As Any Existing User https://cybersecuritynews.com/fortiweb-authentication-bypass-vulnerability/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #Vulnerability #cybersecurity #vulnerability

Cyber Security News · 2hFortiWeb Authentication Bypass Vulnerability Let Attackers Log in As Any Existing UserA critical authentication bypass vulnerability in FortiWeb allows unauthenticated remote attackers to impersonate any existing user on affected systems.

**Pyrzout** @jos1264@social.skynetcloud.site · 4h

Pyrzout @jos1264@social.skynetcloud.site

Windows Remote Desktop Services Vulnerability Let Attacker Deny Services Over Network https://cybersecuritynews.com/windows-remote-desktop-services-vulnerability-deny/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #Vulnerability #cybersecurity #vulnerability

Cyber Security News · 4hWindows Remote Desktop Services Vulnerability Let Attacker Deny Services Over NetworkMicrosoft released security patches addressing a significant vulnerability in Windows Remote Desktop Services that could allow unauthorized attackers to launch denial of service attacks over network connections.

**Pyrzout** @jos1264@social.skynetcloud.site · 5h

Pyrzout @jos1264@social.skynetcloud.site

FortiOS, FortiProxy, and FortiPAM Auth Bypass Vulnerability Allows Attackers to Gain Full Control https://cybersecuritynews.com/fortinet-authentication-bypass/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #Vulnerabilities #cybersecurity #vulnerability

Cyber Security News · 5hFortiOS, FortiProxy, and FortiPAM Auth Bypass Vulnerability Allows Attackers to Gain Full ControlA high-severity authentication bypass vulnerability affecting multiple Fortinet security products, including FortiOS, FortiProxy, and FortiPAM systems.

**Pyrzout** @jos1264@social.skynetcloud.site · 5h

Pyrzout @jos1264@social.skynetcloud.site

New Windows 0-Click NTLM Credential Leakage Vulnerability Bypasses Microsoft’s Patch https://cybersecuritynews.com/windows-0-click-ntlm-credential-leakage/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #Vulnerability #cybersecurity #vulnerability

Cyber Security News · 5hNew Windows 0-Click NTLM Credential Leakage Vulnerability Bypasses Microsoft’s PatchA critical zero-click NTLM credential leakage vulnerability that circumvents Microsoft's recent patch for CVE-2025-24054.

**Pyrzout** @jos1264@social.skynetcloud.site · 19h

19h

Pyrzout @jos1264@social.skynetcloud.site

Microsoft Teams RCE Vulnerability Let Attackers Read, Write and Delete Messages https://cybersecuritynews.com/microsoft-teams-rce-vulnerability/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #cybersecurity #vulnerability #Microsoft

Cyber Security News · 20hMicrosoft Teams RCE Vulnerability Let Attackers Read, Write and Delete MessagesMicrosoft disclosed a significant remote code execution (RCE) vulnerability in its Teams collaboration software as part of its August 2025 Patch Tuesday updates.

**Pyrzout** @jos1264@social.skynetcloud.site · 1d

Pyrzout @jos1264@social.skynetcloud.site

Critical Vulnerability in Carmaker Portal Let Hackers Unlock the Car Remotely https://cybersecuritynews.com/critical-vulnerability-in-carmaker-portal/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #Vulnerability #cybersecurity #cyberattack

Cyber Security News · 1dCritical Vulnerability in Carmaker Portal Let Hackers Unlock the Car RemotelyA severe flaw in a major automaker’s dealer portal that allowed unauthorized attackers to register for dealer accounts, escalate privileges to a national administrator, and ultimately control vehicles remotely.

**Pyrzout** @jos1264@social.skynetcloud.site · 1d

Pyrzout @jos1264@social.skynetcloud.site

Smart Bus Systems Vulnerability Let Hackers Remotely Track and Control Vehicles https://cybersecuritynews.com/smart-bus-systems-vulnerability/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #cybersecurity #databreach

Cyber Security News · 1dSmart Bus Systems Vulnerability Let Hackers Remotely Track and Control VehiclesA newly discovered security flaw in leading smart bus systems threatens to expose passenger safety and fleet integrity.

**Pyrzout** @jos1264@social.skynetcloud.site · 1d

Pyrzout @jos1264@social.skynetcloud.site

Linux Legitimate System Behaviours Weaponized to Harvest Secrets from Shared Environments https://cybersecuritynews.com/linux-environments-weaponized/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #cybersecurity #databreach

Cyber Security News · 1dLinux Legitimate System Behaviours Weaponized to Harvest Secrets from Shared EnvironmentsA significant vulnerability in multi-user Linux environments where standard system behaviors can be exploited to harvest sensitive credentials and secrets from other users.

**Pyrzout** @jos1264@social.skynetcloud.site · 2d

Pyrzout @jos1264@social.skynetcloud.site

Critical Vulnerabilities Uncovered in Zero Trust Network Access Products of Check Point, Zscaler, and NetSkope https://cybersecuritynews.com/zero-trust-network-access-vulnerabilities/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #Vulnerabilities #cybersecurity #vulnerability

Cyber Security News · 2dCritical Vulnerabilities Uncovered in Zero Trust Network Access Products of Check Point, Zscaler, and NetSkopeMajor cybersecurity flaws have been discovered in enterprise-grade Zero Trust Network Access solutions that could allow malicious actors to infiltrate corporate networks with minimal effort.

**Pyrzout** @jos1264@social.skynetcloud.site · 2d

Pyrzout @jos1264@social.skynetcloud.site

Xerox FreeFlow Vulnerabilities leads to SSRF and RCE Attacks https://cybersecuritynews.com/xerox-freeflow-vulnerabilities/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #cybersecurity #vulnerability

Cyber Security News · 2dXerox FreeFlow Vulnerabilities leads to SSRF and RCE AttacksAn urgent security update has been released for Xerox FreeFlow Core software, addressing two critical vulnerabilities that could allow attackers to execute remote code and perform server-side request forgery attacks.

**Pyrzout** @jos1264@social.skynetcloud.site · 2d

Pyrzout @jos1264@social.skynetcloud.site

SSHamble – New Open Source Tool to Exploit Vulnerabilities in SSH Protocol https://cybersecuritynews.com/sshamble/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #Vulnerability #cybersecurity

Cyber Security News · 2dSSHamble - New Open Source Tool to Exploit Vulnerabilities in SSH ProtocolSSHamble, a powerful open-source reconnaissance tool designed to identify and exploit vulnerabilities in SSH implementations across internet-facing systems.

**Pyrzout** @jos1264@social.skynetcloud.site · 2d

Pyrzout @jos1264@social.skynetcloud.site

WinRAR 0-Day in Phishing Attacks to Deploy RomCom Malware https://cybersecuritynews.com/winrar-0-day-in-phishing-attacks/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #CyberAttackNews #CyberSecurity #cybersecurity #vulnerability #phishing

Cyber Security News · 2dWinRAR 0-Day in Phishing Attacks to Deploy RomCom MalwareA critical zero-day vulnerability identified in WinRAR that cybercriminals are actively exploiting through sophisticated phishing campaigns to distribute RomCom malware.

**Pyrzout** @jos1264@social.skynetcloud.site · 2d

Pyrzout @jos1264@social.skynetcloud.site

GPT-5 Jailbreaked With Echo Chamber and Storytelling Attacks https://cybersecuritynews.com/gpt-5-jailbreaked/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #cybersecurity #CyberAI

Cyber Security News · 2dGPT-5 Jailbreaked With Echo Chamber and Storytelling AttacksResearchers have compromised OpenAI's latest GPT-5 model using sophisticated echo chamber and storytelling attack vectors, revealing critical vulnerabilities in the company's most advanced AI system.

**Pyrzout** @jos1264@social.skynetcloud.site · 2d

Pyrzout @jos1264@social.skynetcloud.site

7-Zip Arbitrary File Write Vulnerability Allows Attackers to Execute Code https://cybersecuritynews.com/7-zip-arbitrary-file-write-vulnerability/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #cybersecurity #vulnerability

Cyber Security News · 2d7-Zip Arbitrary File Write Vulnerability Allows Attackers to Execute Arbitrary CodeA newly disclosed security vulnerability in the popular 7-Zip file compression software has raised significant concerns in the cybersecurity community.

**Pyrzout** @jos1264@social.skynetcloud.site · 2d

Pyrzout @jos1264@social.skynetcloud.site

New ‘Win-DoS’ Zero-Click Vulnerabilities Turns Windows Server/Endpoint, Domain Controllers Into DDoS Botnet https://cybersecuritynews.com/win-dos-zero-click-vulnerabilities-turns-windows-domain-controllers-into-ddos-botnet/ #CyberSecurityNewsLive #CyberSecurityNews #VulnerabilityNews #Vulnerabilities #CyberSecurity #Windows

Cyber Security News · 2dNew 'Win-DoS' Zero-Click Vulnerabilities Turns Windows Server/Endpoint, Domain Controllers Into DDoS BotnetAt the DEF CON 33 security conference, researchers Yair and Shahak Morag of SafeBreach Labs unveiled a new class of denial-of-service (DoS) attacks, dubbed the "Win-DoS Epidemic."

**Pyrzout** @jos1264@social.skynetcloud.site · 4d

Pyrzout @jos1264@social.skynetcloud.site

ChatGPT Connectors ‘0-click’ Vulnerability Let Attackers Exfiltrate Data From Google Drive https://cybersecuritynews.com/chatgpt-0-click-connectors-vulnerability/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #CyberSecurity #cybersecurity #vulnerability

Cyber Security News · 4dChatGPT Connectors '0-click' Vulnerability Let Attackers Exfiltrate Data From Google DriveA critical vulnerability in OpenAI's ChatGPT Connectors feature allows attackers to exfiltrate sensitive data from connected Google Drive accounts without any user interaction beyond the initial file sharing.

**Pyrzout** @jos1264@social.skynetcloud.site · 4d

Pyrzout @jos1264@social.skynetcloud.site

28,000+ Microsoft Exchange Servers Vulnerable to CVE-2025-53786 Exposed Online https://cybersecuritynews.com/microsoft-exchange-servers-vulnerable/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #CyberSecurity #cybersecurity #vulnerability

Cyber Security News · 4d28,000+ Microsoft Exchange Servers Vulnerable to CVE-2025-53786 Exposed OnlineOver 28,000 unpatched Microsoft Exchange servers are exposed on the public internet and remain vulnerable to a critical security flaw designated CVE-2025-53786, according to new scanning data released on August 7, 2025, by The Shadowserver Foundation.

**Pyrzout** @jos1264@social.skynetcloud.site · 5d

Pyrzout @jos1264@social.skynetcloud.site

ECScape: Exploiting ECS Protocol on EC2 to Exfiltrate Cross-Task IAM and Execution Role Credentials https://cybersecuritynews.com/ecscape/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #Vulnerabilities #cybersecurity #vulnerability

Cyber Security News · 5dECScape: Exploiting ECS Protocol on EC2 to Exfiltrate Cross-Task IAM and Execution Role CredentialsA sophisticated technique dubbed "ECScape" that allows malicious containers running on Amazon Elastic Container Service (ECS) to steal AWS credentials from other containers sharing the same EC2 instance.

**Pyrzout** @jos1264@social.skynetcloud.site · 5d

Pyrzout @jos1264@social.skynetcloud.site

CISA Releases Emergency Advisory Urges Feds to Patch Exchange Server Vulnerability by Monday https://cybersecuritynews.com/cisa-exchange-server-advisory/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #CyberSecurity #cybersecurity #vulnerability

Cyber Security News · 5dCISA Releases Emergency Advisory Urges Feds to Patch Exchange Server Vulnerability by MondayCISA has issued an emergency advisory directing all Federal Civilian Executive Branch agencies to mitigate a newly disclosed Microsoft Exchange urgently hybrid-joined vulnerability, tracked as CVE-2025-53786, by 9:00 AM EDT on Monday, August 11, 2025.

**Pyrzout** @jos1264@social.skynetcloud.site · 5d

Pyrzout @jos1264@social.skynetcloud.site

New Ghost Calls Attack Abuses Web Conferencing for Covert Command & Control https://cybersecuritynews.com/ghost-calls-attack/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #cybersecurity

Cyber Security News · 6dNew Ghost Calls Attack Abuses Web Conferencing for Covert Command & ControlA sophisticated new attack technique called "Ghost Calls" exploits web conferencing platforms to establish covert command and control (C2) channels.

Drag & drop to upload

Recent searches

Search options

Administered by:

Server stats:

#vulnerabilitynews