The Breach News

Russian Hackers Exploit Zimbra Zero-Day to Steal Emails Without Clicking Links

Recent findings revealed a security threat in which hackers linked to Russia exploited vulnerabilities in Zimbra webmail servers. Users could be compromised simply by opening or previewing a malicious email, with no need for any further interaction such as clicking links or downloading attachments. This approach underscores the seamless and…

Read MoreRussian Hackers Exploit Zimbra Zero-Day to Steal Emails Without Clicking Links

Zero-Day Vulnerabilities in Vanilla Forums Allow Remote Hacking of Websites

A significant cybersecurity issue has surfaced concerning Vanilla Forums, open-source software utilized by over 500,000 websites for online discussions. A Polish security researcher, Dawid Golunski of Legal Hackers, has publicly disclosed two critical zero-day vulnerabilities, potentially allowing unauthenticated remote attackers to compromise targeted websites with relative ease. The vulnerabilities are…

Read MoreZero-Day Vulnerabilities in Vanilla Forums Allow Remote Hacking of Websites

Shadow Brokers Return with New 0-Day Exploits After Leaking WannaCry SMB Vulnerability

The notorious hacking group known as the Shadow Brokers has resurfaced, threatening to unleash a wave of new exploits. This collective previously gained notoriety by leaking the Windows SMB exploit, which facilitated the widespread WannaCry ransomware attack that affected hundreds of thousands of systems globally. Now, with their recent announcement,…

Read MoreShadow Brokers Return with New 0-Day Exploits After Leaking WannaCry SMB Vulnerability

Taylor Swift’s Madison Square Garden Performance Temporarily Interrupts Controversial Camera Coverage

Surveillance Lockout Raises Security Concerns at Madison Square Garden Recent revelations have highlighted potential vulnerabilities in the face-recognition and surveillance systems managed by Madison Square Garden (MSG), owned by James Dolan. On July 2, as security ramped up for an upcoming high-profile event featuring Taylor Swift and Travis Kelce, internal…

Read MoreTaylor Swift’s Madison Square Garden Performance Temporarily Interrupts Controversial Camera Coverage

Joomla 3.7.1 Release Addresses Critical SQL Injection Vulnerability

Website owners utilizing the widely adopted Joomla content management system are urged to promptly update their platforms to today’s newly released version to address a critical software vulnerability. Joomla ranks as the second most popular open-source CMS globally, having recently rectified a significant SQL Injection flaw identified within its core…

Read MoreJoomla 3.7.1 Release Addresses Critical SQL Injection Vulnerability

18-Byte ImageMagick Vulnerability Could Have Exposed Images from Yahoo Mail Server

Yahoo Retires ImageMagick After Discovery of Serious Vulnerability In a significant move, Yahoo has officially retired the ImageMagick image-processing library following the identification of a critical vulnerability that posed substantial risks to user privacy. This vulnerability could have potentially provided unauthorized access to private images stored in Yahoo Mail accounts.…

Read More18-Byte ImageMagick Vulnerability Could Have Exposed Images from Yahoo Mail Server

Apps Targeted at US Troops Contain Chinese and Russian Code

Concerns Rise Over Foreign Software in Military-Targeted Apps A comprehensive analysis of numerous mobile applications designed for US military personnel has revealed that over 12% are embedded with software developed by companies based in adversarial nations, including China and Russia. This alarming finding raises significant concerns regarding the potential for…

Read MoreApps Targeted at US Troops Contain Chinese and Russian Code

Ready for Another Round? NSA’s ‘EsteemAudit’ RDP Exploit on Windows Still Unresolved

Recent cybersecurity advisories signal the potential onset of a significant global cyber threat, marking what experts are calling a “second wave” of attacks. The emergence of zero-day exploits, particularly concerning the Server Message Block (SMB) protocol, is not the only cause for alarm. Last month, hackers identified as the Shadow…

Read MoreReady for Another Round? NSA’s ‘EsteemAudit’ RDP Exploit on Windows Still Unresolved