Google Gemini Vulnerabilities Let Attackers Exfiltrate User’s Saved Data and Location

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Three new vulnerabilities in Google’s Gemini AI assistant suite could have allowed attackers to exfiltrate users’ saved information and location data. The vulnerabilities uncovered by Tenable, dubbed the “Gemini Trifecta,” highlight how AI systems can be turned into attack vehicles, …

Threat Actors Allegedly Listed Veeam RCE Exploit for Sale on Dark Web

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Veeam Backup & Replication, a cornerstone of many enterprises’ data protection strategy, has reportedly become the focus of a new exploit being offered on a clandestine marketplace. According to a recent listing, a seller operating under the handle “SebastianPereiro” claims …

Hackers Actively Scanning to Exploit Palo Alto Networks PAN-OS Global Protect Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers are observing a significant increase in internet-wide scans targeting the critical PAN-OS GlobalProtect vulnerability (CVE-2024-3400).  Exploit attempts have surged as attackers seek to leverage an arbitrary file creation flaw to achieve OS command injection and ultimately full root …

Linux 6.17 Released With Fix for use-after-free Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Linus Torvalds has announced the release of Linux Kernel 6.17, a new version focused on stability and incremental improvements rather than groundbreaking features. The update brings a host of bug fixes, security enhancements, and driver updates across various subsystems. In …

Tesla’s Telematics Control Unit Vulnerability Let Attackers Gain Code Execution as Root

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A security vulnerability in Tesla’s Telematics Control Unit (TCU) allowed attackers with physical access to bypass security measures and gain full root-level code execution. The flaw stemmed from an incomplete lockdown of the Android Debug Bridge (ADB) on an external …

Lunar Spider Infected Windows Machine in Single Click and Harvested Login Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Lunar Spider, a newly observed malware strain, has emerged as a potent threat to Windows environments by compromising systems in a single click. First detected in mid-September 2025, its operators have quickly refined delivery and payload strategies to evade traditional …

Beer Brewing Giant Asahi Halts Production Following Cyberattack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Japanese beverage conglomerate Asahi Group Holdings has halted production at its domestic factories following a significant cyberattack that crippled its systems on Monday. A company spokesperson confirmed on Tuesday that production has not resumed and that there is no foreseeable …

Fake Postmark MCP Server Silently Stole Thousands of Emails With a Single Line of Malicious Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A malicious npm package masquerading as the official Postmark MCP Server has been exfiltrating user emails to an external server.  This fake “postmark-mcp” module, available on npm from versions 1.0.0 through 1.0.15, built trust over 15 incremental releases before dropping …

VMware Tools and Aria 0-Day Vulnerability Exploited for Privilege Escalation and Code Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A zero-day local privilege escalation vulnerability in VMware Tools and VMware Aria Operations is being actively exploited in the wild. The flaw, tracked as CVE-2025-41244, allows an unprivileged local attacker to gain root-level code execution on affected systems. On September …

VMware Tools and Aria Operations Vulnerabilities Let Attackers Escalate Privileges to Root

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

VMware has released an advisory to address three high-severity vulnerabilities in VMware Aria Operations, VMware Tools, VMware Cloud Foundation, VMware Telco Cloud Platform, and VMware Telco Cloud Infrastructure.  Disclosed on 29 September 2025, the advisory covers CVE-2025-41244, CVE-2025-41245, and CVE-2025-41246 …