Firefox v147.0.3 Released With Fix for Heap Buffer Overflow Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Firefox v147.0.3 Released Mozilla has released Firefox version 147.0.3, addressing a critical memory-related flaw that could allow attackers to execute arbitrary code by exploiting a heap buffer overflow issue in the …

Microsoft Teams With AI Workflows Use Microsoft 365 Copilot to Automate Tasks via Scheduled Prompts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft Teams With AI Workflows Microsoft is enhancing Teams productivity with AI Workflows. This new feature leverages Microsoft 365 Copilot to automate routine tasks through scheduled prompts and intelligent templates. …

Keenadu Android Backdoor Infects Firmware, Spreads via Google Play for Remote Control Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated new Android backdoor that infects device firmware at the build stage and spreads through Google Play apps, enabling attackers to seize remote control over victims’ tablets and phones. …

Apache NiFi Vulnerability Enables Authorization Bypass

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apache NiFi Vulnerability A newly disclosed high-severity vulnerability in Apache NiFi exposes systems to an authorization bypass that could allow lower-privileged users to modify restricted components. Tracked as CVE-2026-25903, the flaw …

Malicious Chrome Extension Steals Facebook Business Manage 2FA Codes and Analytics Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Malicious Chrome Extension Steals Facebook Business Manage 2FA Codes A malicious Chrome extension that claims to help Meta Business users quietly steals Facebook Business Manager 2FA codes and analytics data, putting …

Langchain Community SSRF Bypass Vulnerability Enables Access to Internal Services

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Langchain Community SSRF Bypass Vulnerability A Server‑Side Request Forgery (SSRF) vulnerability has been identified in the langchain/community package, affecting versions up to 1.1.13. The flaw, tracked as CVE‑2026‑26019, has a moderate severity rating, with a CVSS …

25 Vulnerabilities in Cloud Password Managers Allow Unauthorized Access and Modifications

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Password Managers Vulnerability Researchers from ETH Zurich have uncovered 25 serious vulnerabilities in three leading cloud-based password managers: Bitwarden, LastPass, and Dashlane. These flaws enable a malicious server to bypass …

Noodlophile Malware Creators Evolve Tactics with Fake Job Postings and Phishing Lures

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Noodlophile information stealer, originally uncovered in May 2025, has significantly evolved its attack strategies to bypass security measures. Initially, this malware hid behind deceptive advertisements for fake AI video …

Beware of Fake Shops from Threat Actors to Attack Winter Olympics 2026 Fans

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals are targeting fans of the Milano Cortina 2026 Winter Olympics through an extensive network of fake online merchandise stores designed to steal payment information and personal data from unsuspecting …

Single IP Dominates Exploitation Campaign Attacking Ivanti EPMM with RCE Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Single IP Dominates Ivanti EPMM with RCE Vulnerability A critical remote code execution (RCE) flaw in Ivanti Endpoint Manager Mobile (EPMM), tracked as CVE-2026-1281, is being heavily exploited. GreyNoise shows …