Hackers exploit TrueConf zero-day to push malicious software updates:
Hackers have targeted TrueConf conference servers in attacks that exploit a zero-day ...
bleepingcomputer.com/news/security/hackers-exploit-trueconf-zero-day-to-push-malicious-software-updates/
Story Details
| Last Updated | |
| Total Articles | 1 |
Main Topics
software that is intentionally hostile, intrusive, or damaging to a computer or network
software, data or commands that use a bug or vulnerability to compromise a computer system
software program or group of programs designed for end-users
Similar to This
Previous
Plex2Shell: Hackers hijack Plex server shortly after exploit disclosure: Users of the Plex Media Server urgently need to update their software ...
winfuture.de/news,162059.html
Hackers exploit SiteGuard WAF flaw to run commands as admins: Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets ...
bleepingcomputer.com/news/security/hackers-exploit-siteguard-waf-flaw-to-run-commands-as-system-root/
Israeli Firm Used Targeted Ads to Infect Al Jazeera Devices with Zero-Click Spyware
democracynow.org/2026/10/16/headlines/israeli_firm_used_targeted_ads_to_infect_al_jazeera_devices_with_zero_click_spyware
CISA warns admins to immediately fix Ivanti flaw exploited as zero-day: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to ...
bleepingcomputer.com/news/security/cisa-warns-admins-to-immediately-fix-ivanti-flaw-exploited-as-zero-day/
Hackers exploit Tencent app flaw to deploy GrayRabbit malware: Threat actors linked to a China-aligned espionage group are exploiting a critical vulnerability ...
bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/
dlvr.it Aug 21
Homeland security cybercops say patch TrueConf (Russia's Zoom) if you're using it
theregister.com/patches/2026/08/21/homeland-security-cybercops-say-patch-trueconf-russias-zoom-if-youre-using-it/5291156
Hackers breach TrueConf to trojanize client installers with backdoors: The Head Mare hacktivist group has been exploiting vulnerabilities in unpatched TrueConf ...
bleepingcomputer.com/news/security/hackers-breach-trueconf-to-trojanize-client-installers-with-backdoors/
Passkeys were pushed as a safer future. Hackers have figured out ways to break those synced to Google
digitaltrends.com/computing/passkeys-were-pushed-as-a-safer-future-hackers-have-figured-out-ways-to-break-those-synced-to-google/
Key FactsResearchers uncover attacks on Google-synced passkeys
Aug 4, 2026 · Reading time: ~30 sec.
Summary created with AI assistance · Source: digitaltrends.com
Summary created with AI assistance · Source: digitaltrends.com
- The three Pass-ta-key techniques target Google Password Manager in Chrome on Windows PCs with a Trusted Platform Module.
- The first attack can request a valid passkey response without administrator privileges, biometrics, a PIN, or victim interaction.
- GitHub rejected this attack, while eBay initially accepted it and closed the gap after researchers reported it.
- According to Unit 42, malware can extract the master key temporarily present in Chrome’s memory and decrypt existing and future passkeys.
JFrog tries to spin OpenAI 0-day exploit of its app into a success story: 10 days passed from OpenAI models exploiting JFrog Artifactory 0-day to release of a ...
arstechnica.com/security/2026/07/jfrog-tries-to-spin-openai-0-day-exploit-of-its-app-into-a-success-story/
Hackers exploit FortiClient EMS flaw to push infostealer malware: Hackers are exploiting an authentication bypass vulnerability (CVE-2026-35616) in FortiClient ...
bleepingcomputer.com/news/security/hackers-exploit-forticlient-ems-flaw-to-push-infostealer-malware/
Hackers Exploit GTA 6 Hype to Spread Malware Via Fake Beta Tests: 'We need you to help us build Vice City,' one of the scam sites says. The downloads are nothing ...
uk.pcmag.com/security/165169/hackers-exploit-gta-6-hype-to-spread-malware-via-fake-beta-tests
Ziff Davis May 12
Google Says It Stopped the World's First AI‑Built Zero-Day Exploit: The hack could have broken two-factor authentication at scale.
extremetech.com/internet/google-says-it-stopped-the-worlds-first-aibuilt-zero-day-exploit
Google just blocked a zero-day exploit made with AI: Google says AI is rapidly becoming a much bigger cybersecurity threat than most people realize ...
androidauthority.com/google-ai-made-zero-day-exploit-3665858/
Hackers used AI to build zero-day attack, Google researchers say: Researchers at Alphabet Inc.’s Google believe a cybercrime group used AI to create a hacking ...
financialpost.com/cybersecurity/hackers-used-ai-build-zero-day-attack
Paid articlePaywall Hackers exploit Marimo flaw to deploy NKAbuse malware from Hugging Face: Hackers are exploiting a critical vulnerability in Marimo reactive Python notebook to ...
bleepingcomputer.com/news/security/hackers-exploit-marimo-flaw-to-deploy-nkabuse-malware-from-hugging-face/
dlvr.it Apr 09
Months-old Adobe Reader zero-day uses PDFs to size up targets: : Malicious PDFs abuse legit features to harvest system data and decide which victims get a ...
theregister.com/2026/04/09/monthsold_adobe_reader_zeroday_uses/
Spyware-grade Coruna iOS exploit kit now used in crypto theft attacks: A previously undocumented set of 23 iOS exploits named "Coruna" has been ...
bleepingcomputer.com/news/security/spyware-grade-coruna-ios-exploit-kit-now-used-in-crypto-theft-attacks/
CyberNews Feb 17
Chrome browsers under attack as Google releases emergency patch for zero-day exploit
cybernews.com/security/chrome-browsers-google-emergency-patch-zero-day/
Next