Ionut Arghire

A patch bypass for an authenticated code execution bug, the flaw leads to zero-click remote code execution attacks.

Hackers stole names, Social Security numbers, driver’s license information, voter registration records, and health-related information.

An integer overflow or wraparound in the Qualcomm graphics component, the bug leads to memory corruption.

Improper input sanitization in the framework can be exploited through the Shell tool, allowing attackers to modify system files and steal data.

Using low-cost receivers deployed along roads, academic researchers tracked drivers and their movement patterns.

Malicious extensions could hijack the Gemini Live in Chrome feature to spy on users and steal their files.

Malicious websites could open a WebSocket connection to localhost on the OpenClaw gateway port, brute force passwords, and take control of the agent.

Using Windows shortcut files, the APT deployed a new implant, a loader, a propagation tool, and two backdoors.

The internet giant is developing an evolution of the certificates based on Merkle Tree Certificates (MTCs).

The AI was abused to write exploits, create tools, and automatically exfiltrate over 150GB of data.

Names, addresses, email addresses, phone numbers, and encrypted passwords were compromised in the attack.

Hackers stole personal information such as names, email addresses, phone numbers, and other information.

The attacks exploited a post-authentication command injection vulnerability in the endpoint manager’s interface.

Aeternum operates on smart contracts, making its command-and-control (C&C) infrastructure difficult to disrupt.

The seed and Series A investment will enable the startup to accelerate product development and expand sales and customer success teams.

The issue impacts the UPnP function of multiple device models and could be exploited for remote code execution.

The broker acquired eight zero-day exploits from a US defense contractor executive jailed for his actions.

Already added to CISA’s KEV catalog, the flaw allows attackers to bypass authentication and gain administrative privileges.

The four security defects could be exploited for remote code execution but require administrative privileges.

Peter Williams was sentenced to 87 months in prison for selling cyber exploits to a Russian broker.