Dolby Digital Plus 0-Click Vulnerability Enables RCE Attack via Malicious Audio on Android

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical zero-click vulnerability in Dolby Digital Plus (DDP) audio decoding software has been disclosed, allowing attackers to execute malicious code remotely via seemingly innocuous audio messages. Google Project Zero’s …

AWS Outage Impacts Amazon, Snapchat, Prime Video, Canva and More – Update

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A widespread Amazon Web Services (AWS) outage on Monday disrupted operations for millions of users worldwide, knocking out access to everything from streaming giants to social media platforms and financial …

Canva Down – Suffers Global Outage, Leaving Millions of Users Unable to Access Platform

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Canva, the popular graphic design platform, is reeling from a widespread outage that has rendered its services inaccessible to millions of users worldwide. As of 19:16 AEDT (02:46 IST), the …

PoC Exploit Released for Windows Server Update Services Remote Code Execution Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A proof-of-concept (PoC) exploit has been released for a critical vulnerability in Microsoft’s Windows Server Update Services (WSUS), enabling unauthenticated attackers to execute remote code with SYSTEM privileges on affected …

New DefenderWrite Tool Let Attackers Inject Malicious DLLs into AV Executable Folders

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new tool called DefenderWrite exploits whitelisted Windows programs to bypass protections and write arbitrary files into antivirus executable folders, potentially enabling malware persistence and evasion. Developed by cybersecurity expert …

PoC Exploit Released for Linux-PAM Vulnerability Allowing Root Privilege Escalation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A high-severity vulnerability in the Pluggable Authentication Modules (PAM) framework was assigned the identifier CVE-2025-8941. This vulnerability stems from the heart of Linux operating systems, enabling attackers with local access …

WatchGuard VPN Vulnerability Let Remote Attacker Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WatchGuard has disclosed a critical out-of-bounds write vulnerability in its Fireware OS, enabling remote unauthenticated attackers to execute arbitrary code via IKEv2 VPN connections. Designated CVE-2025-9242 under advisory WGSA-2025-00015, the …

Volkswagen Allegedly Hit by Ransomware Attack as 8Base Claims Sensitive Data Theft

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Volkswagen Group has issued a statement addressing claims by the ransomware group 8Base, which alleges it has stolen and leaked sensitive data from the automaker. The German carmaker maintains that …

Windows 11 24H2/25H2 Update Blocks Mouse and Keyboard in Recovery Mode

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft’s latest security update has rendered USB keyboards and mice inoperable within the Windows Recovery Environment (WinRE). Released on October 14, 2025, as KB5066835 for OS Build 26100.6899, the patch …

American Airlines Subsidiary Envoy Compromised in Oracle Hacking Campaign

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Envoy Air, a wholly owned subsidiary of American Airlines, has confirmed it fell victim to a hacking campaign exploiting vulnerabilities in Oracle’s E-Business Suite (EBS). The breach, first highlighted by …