Latest CyberSec News by @thecyberpicker

GeoVision GV-ASManager 6.1.0.0 - Broken Access Control. CVE-2024-56898 . webapps exploit for Multiple platform

GeoVision GV-ASManager 6.1.1.0 - CSRF. CVE-2024-56901 . webapps exploit for Multiple platform

The NVD program manager has announced undergoing process improvements to catch up with its growing vulnerability backlog

qBittorrent 5.0.1 - MITM RCE. CVE-2024-51774 . local exploit for Multiple platform

ABB Cylon Aspect 3.08.02 - PHP Session Fixation.. hardware exploit for Multiple platform

Netman 204 - Remote command without authentication.. hardware exploit for Multiple platform

Microsoft has now confirmed that an April 2025 Windows security update is creating a new empty "inetpub" folder and warned users not to delete it.

WebFileSys 2.31.0 - Directory Path Traversal. CVE-2024-53586 . webapps exploit for Multiple platform

ABB Cylon FLXeon 9.3.4 - Remote Code Execution (RCE). CVE-2024-48841 . hardware exploit for Multiple platform

ABB Cylon FLXeon 9.3.4 - WebSocket Command Spawning. CVE-2024-48849 . hardware exploit for Multiple platform

Cary, North Carolina, 11th April 2025, CyberNewsWire

Google's AI video generator tool Veo 2, which is the company's take on OpenAI's Sora, is now rolling out to some users in the United States.

ABB Cylon FLXeon 9.3.4 - System Logs Information Disclosure. CVE-2024-48852 . hardware exploit for Multiple platform

ABB Cylon FLXeon 9.3.4 - Default Credentials.. hardware exploit for Multiple platform

Nagios Log Server 2024R1.3.1 - API Key Exposure.. webapps exploit for Multiple platform

CMU CERT/CC VINCE 2.0.6 - Stored XSS.. webapps exploit for Multiple platform

ABB Cylon FLXeon 9.3.4 - Cross-Site Request Forgery.. hardware exploit for Multiple platform

The Chromium-based Microsoft Edge has seen up to 9% performance improvements following the release of version 134.

Paper Werewolf deploys PowerModul in phishing attacks between July and December 2024, expanding espionage with password changes and media file theft.

The Chromium-based Microsoft Edge has seen up to 9% performance improvements following the release of version 134.

Laboratory Services Cooperative (LSC) has released a statement informing it suffered a data breach where hackers stole sensitive information of roughly 1.6 million people from its systems.

Fourlis Group, the operator of IKEA stores in Greece, Cyprus, Romania, and Bulgaria, has informed that the ransomware attack it suffered just before Black Friday on November 27, 2024, caused losses estimated to €20 million ($22.8M).

This week in cybersecurity from the editors at Cybercrime Magazine

Incubée au sein de l'Anssi, la start-up publique MonAideCyber s'adresse aux organisations peu expérimentées dans la sécurisation de leurs...-Cybersécurité

Explore the key differences between human and non-human identities in cloud security, focusing on their behaviors, interactions, and management strategies.

Microsoft is reporting that its AI systems are able to find new vulnerabilities in source code: Microsoft discovered eleven vulnerabilities in GRUB2, including integer and buffer overflows in filesystem parsers, command flaws, and a side-channel in cryptographic comparison. Additionally, 9 buffer overflows in parsing SquashFS, EXT4, CramFS, JFFS2, and symlinks were discovered in U-Boot and Barebox, which require physical access to exploit. The newly discovered flaws impact devices relying on UEFI Secure Boot, and if the right conditions are met, attackers can bypass security protections to execute arbitrary code on the device...

Experts at the Google Cloud Next event set out how security teams need to adapt their focuses in the wake of trends such as rising cyber-attacks and advances in AI

Researchers are trying to use squid color-changing biochemistry for solar tech. This appears to be new and related research to a 2019 squid post. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.

Initial Access Brokers shift to low-cost, high-volume access sales in 2024, fueling broader, faster cyberattacks.

The company, which makes sensors for the automotive and aerospace sectors, does not currently expect the attack to have a material impact.