Study of 85 Crypto Wallet Extensions Finds Address Leaks and Cross-Site Tracking Risks
Researchers tested 85 popular crypto wallet extensions. According to The Hacker News, researchers tested 85 popular crypto wallet extensions. The…
Technology
11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot
11 old Microsoft-signed UEFI applications could bypass Secure Boot. According to The Hacker News, 11 old microsoft-signed uefi applications could…
RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross-Tenant Queue Metadata
Two access control-related flaws in RabbitMQ. According to The Hacker News, two access control-related flaws in rabbitmq. The development comes…
LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts
Rust-based RAT codenamed LabubaRAT masquerades as NVIDIA software. According to The Hacker News, rust-based rat codenamed labubarat masquerades as nvidia…
Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads
A flaw in Anthropic’s Claude for Chrome browser extension. According to The Hacker News, a flaw in anthropic’s claude for…
SAP Patches CVSS 9.9 NetWeaver ABAP Flaw
SAP rolled out updates to address multiple vulnerabilities. According to The Hacker News, sap rolled out updates to address multiple…
Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack
Microsoft shipped its largest Patch Tuesday on record. According to The Hacker News, microsoft shipped its largest patch tuesday on…
Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware
Four compromised npm packages in the @asyncapi namespace. According to The Hacker News, four compromised npm packages in the @asyncapi…
Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution
Open a repository in Cursor on Windows and it runs git.exe. According to The Hacker News, open a repository in…
Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday
Researcher released a PoC exploit called LegacyHive. According to The Hacker News, researcher released a poc exploit called legacyhive. The…