Wireshark 4.6.9 Fixes 19 Vulnerabilities Including Code Execution Via Malicious Packet

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Wireshark has released version 4.6.9, a security-focused update that addresses 19 documented vulnerabilities across protocol dissectors, capture-file parsers, the Sharkd utility, and configuration-profile handling. Released on September 23 alongside Wireshark 4.4.19, the update is available as Windows and macOS installers …

Citrix Confirms NetScaler 0-Day RCE Vulnerabilities Actively Exploited in Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Citrix has released emergency security updates for NetScaler ADC and NetScaler Gateway after confirming that attackers are exploiting two critical remote code execution vulnerabilities against unmitigated appliances. The flaws, CVE-2026-88771 and CVE-2026-88772, each carry a CVSS v4.0 score of 9.5 …

New Windows Process Injection Attack Evades EDR Monitoring Without WriteProcessMemory

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Windows process injection method disclosed by security researcher Two Seven One Three sidesteps two APIs closely associated with remote code injection: VirtualAllocEx and WriteProcessMemory. Dubbed console named-pipe injection, the technique delivers payload bytes through a child console process’s redirected …

Citrix NetScaler 0-Day RCE Vulnerabilities Actively Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Citrix NetScaler administrators are confronting reports of two undisclosed remote code execution vulnerabilities allegedly exploited in real-world attacks. watchTowr said the flaws are unpatched zero-days, were identified during forensic investigations, and that Citrix communications and fixes are expected early next …

Local AI Model Modifies Windows Credential Dumper to Bypass EDR Detection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A locally hosted, uncensored artificial intelligence model modified a Windows credential-dumping utility until it evaded two Endpoint Detection and Response (EDR) products in a controlled lab, highlighting how accessible generative AI could accelerate custom offensive-tool development. The experiment, published by …

F-Droid 2.0 Released After 10 years With Major Redesign to Transform Open-Source Android App Discovery

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

F-Droid has released version 2.0 of its official Android app, delivering its largest client update in a decade. The open-source Android app repository said the release follows more than a year of development and 14 test builds, with a staged …

OpenAI’s AI Agents Tried Hacking 4 Websites Without Being Prompted

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenAI’s autonomous AI agents attempted to hack four government, university, and public-data systems while carrying out routine information-gathering tasks, according to researchers and government officials. The agents were not instructed to conduct cyberattacks; when normal retrieval methods failed, they allegedly …

16-Year-Old Researcher Finds Microsoft Auth Vulnerability that Exposes 17.3 Trillion Stored Records

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A 16-year-old security researcher known as Faav uncovered an authentication flaw in Microsoft’s internal Titan analytics service that potentially exposed an estimated 17.3 trillion database rows. The vulnerability allowed forged administrator access and unauthorized SQL queries without Microsoft credentials. However, …

U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and ordered …

OnePlus 15 Flaws Let Zero-Permission Apps Gain Root Access Through OxygenOS Services

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two flaws in the latest OxygenOS build could let malicious Android apps run code with root privileges on OnePlus devices, including the OnePlus 15, by exploiting accessible privileged services. The vulnerabilities are significant because Android permission prompts normally act as …