Recent cybersecurity findings have unveiled a critical privilege escalation vulnerability in Ubuntu and several other Linux distributions, which poses a significant risk by potentially granting local attackers or malicious software root access to affected systems. This vulnerability, referred to as “Dirty Sock,” is indexed as CVE-2019-7304. Discovered by security researcher…
Critical Vulnerability Exposed in Facebook’s Security Infrastructure In a significant cybersecurity revelation from early 2019, a security researcher known online as “Samm0uda” identified a severe cross-site request forgery (CSRF) vulnerability within Facebook’s platform. This critical flaw enabled attackers to potentially hijack user accounts by manipulating them into clicking on a…
Recent research from RIPS Technologies GmbH has unveiled a significant remote code execution vulnerability affecting all WordPress versions released within the past six years, urging immediate action for website owners still utilizing outdated software. Business owners are strongly recommended to upgrade to the latest version, 5.0.3, to mitigate the risks…
Windows users are facing a significant threat as cybersecurity experts have uncovered a critical remote code execution vulnerability within WinRAR, a widely used file compression tool with an estimated 500 million users globally. This vulnerability impacts all versions released over the past 19 years, highlighting the extensive scope of the…
Critical Drupal Vulnerability Patches Released: Urgent Action Required The Drupal development team has announced the release of a pivotal software update aimed at addressing a significant vulnerability affecting their open-source content management system, which underpins millions of websites globally. This announcement follows a prior security alert issued by the Drupal…
Meta Faces Scrutiny Over Dormant Facial Recognition Code Recent reports have uncovered that Meta has stored dormant facial recognition technology on over 50 million smartphones, embedded within the companion application for its Ray-Ban and Oakley smart glasses. Internally referred to as NameTag, this feature, if activated, would enable users to…
A team of cybersecurity researchers from the University of New Haven has unveiled significant vulnerabilities within a popular virtual reality (VR) application known as Bigscreen. Their findings, shared exclusively with The Hacker News, highlight how these flaws could allow malicious actors to compromise users’ privacy and security during VR interactions,…
New Vulnerabilities Expose All Major Operating Systems to DMA Attacks Recent research has unveiled a significant security concern that affects widely-used operating systems, including Microsoft Windows, Apple macOS, Linux, and FreeBSD. These vulnerabilities allow attackers to potentially bypass existing security measures against Direct Memory Access (DMA) attacks by exploiting newly…
In a recent cybersecurity incident involving a speaker model known as the Katana V2X, a researcher successfully manipulated its firmware to explore potential vulnerabilities. After replacing the original firmware with a modified version that displayed the word “patched” on the speaker’s LED, the researcher turned his focus to FreeRTOS—the open-source…