-
Crew members aboard the Vivit Africa say hackers briefly controlled safety-critical systems on the LNG carrier near Gibraltar. Maritime authorities have not publicly confirmed the alleged LNG tanker cyberattack. Crew Reports Loss of Critical System Access The incident reportedly affected the Liberian-flagged Vivit Africa, which began operating in 2023. The vessel departed Louisiana on August…
-
BigCommerce has notified several merchants about data exposure linked to compromised third-party application credentials. Attackers used the stolen Ribon credentials to access customer records and inject malicious scripts into online stores. Attackers Compromise Ribon Application Credentials BigCommerce confirmed the credential compromise on September 17. The incident affected the Ribon and Ribon 1.5 applications. Both apps…
-
CISA has warned that attackers are actively exploiting three Linux kernel flaws, including one critical vulnerability. The agency ordered US federal organisations to patch affected systems and conduct forensic checks. CISA Adds Three Flaws to Exploited Vulnerability List The US Cybersecurity and Infrastructure Security Agency added the three vulnerabilities to its Known Exploited Vulnerabilities catalogue.…
-
Security researchers have disclosed technical details and proof-of-concept code for a new WordPress vulnerability called Click2Shell. Attackers can exploit the flaw to install themes and execute arbitrary PHP code on vulnerable servers. WordPress 7.1.1 Fixes Click2Shell The WordPress Click2Shell flaw affects the platform’s Core component. WordPress addressed the security issue with the release of version…
-
Ireland’s privacy regulator has fined Google €403 million for GDPR violations involving users’ location information. The authority found problems with transparency, data retention and the legal basis for processing Google location data. DPC Investigates Three Google Features Ireland’s Data Protection Commission launched its investigation in February 2020. The inquiry followed several complaints from consumer rights…
-
Microsoft confirmed the problem after users reported failures across several support platforms. The affected functions included copying and pasting, autofill and dragging formulas between cells. The issue affected Excel 2016, 2019, 2021 and 2024. It also disrupted Excel Online within Office Online Server environments. When users tried to paste content, Excel kept the original source…
-
The FBI says government impersonation scams caused more than $1.6 billion in reported losses in 19 months. Criminals pose as officials, threaten victims with arrest or professional consequences and demand immediate payment. FBI Receives 61,000 Scam Complaints The FBI’s Internet Crime Complaint Center received around 61,000 reports involving government or law enforcement impersonation. Victims submitted…
-
An ongoing supply chain campaign shows how malicious npm packages can bypass installation protections by activating during normal application use. The indexed-btree package hides its malware loader inside a commonly called function instead of using detectable installation scripts. Package Impersonates Popular Library Security researchers at Checkmarx discovered the malicious indexed-btree package during an investigation into…
-
Security researchers discovered two ways to escape the OpenAI Codex sandbox and reach resources on the host computer. OpenAI reportedly fixed both vulnerabilities within eight days, but one flaw enabled command execution from the strictest sandbox mode. Researchers Discover Two Codex Flaws Oren Yomtov of Accomplish AI and fellow researchers reported both vulnerabilities to OpenAI…
-
A security researcher has demonstrated how BragJack attacks can hijack AI assistants inside popular browsers. The technique uses a malicious extension to access sensitive data and make AI agents perform actions without further user interaction. BragJack Affects Five AI Browser Tools Gal Weizman, a security researcher at Forever Security, demonstrated the proof-of-concept attack against five…