Tag: unauthorized
-
Wiz Uncovers Critical Access Bypass Flaw in AI-Powered Vibe Coding Platform Base44
Cybersecurity researchers have disclosed a now-patched critical security flaw in a popular vibe coding platform called Base44 that could allow unauthorized access to private applications built by its users.”The vulnerability we discovered was remarkably simple to exploit — by providing only a non-secret app_id value to undocumented registration and email verification endpoints, an attacker First…
-
Critical Authentication Flaw Identified in Base44 Vibe Coding Platform
Flaw in Base44 allowed unauthorized access to private apps, bypassing authentication systems First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/authentication-flaw-base44/
-
Critical Flaw in Vibe-Coding Platform Base44 Exposed Apps
A now-patched authentication issue on the popular vibe-coding platform gave unauthorized users open access to any private application on Base44. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/critical-flaw-vibe-coding-base44-exposed-apps
-
The healthcare industry is at a cybersecurity crossroads
Tags: access, ai, api, attack, backdoor, backup, breach, business, ciso, cloud, communications, compliance, control, cyber, cybersecurity, data, encryption, firmware, flaw, framework, governance, government, healthcare, infrastructure, intelligence, Internet, monitoring, network, nist, programming, ransomware, risk, risk-management, service, software, tactics, technology, threat, tool, training, unauthorized, vulnerabilityDigital transformation of business processes. Examples include telehealth, remote patient monitoring, e-prescribing, and ambient listening/note taking. These systems require new equipment, such as internet of medical things (IoMT), high-speed networks, cloud services, APIs, and tightly integrated applications.Aggressive adoption of AI. AI diagnostics are gaining popularity in areas such as cardiology, oncology, and radiology, especially at…
-
AIIMS ORBO Portal Vulnerability Leads to Massive Data Exposure
A critical vulnerability in the AIIMS portal exposed highly sensitive data of voluntary organ and tissue donors registered with the Organ Retrieval Banking Organisation (ORBO). The AIIMS portal vulnerability allowed unauthorized access to personally identifiable and medical information of donors across India. This vulnerability was discovered in mid-May 2025 by independent cybersecurity researcher Aniket Tomar.…
-
Critical Salesforce Tableau Flaws Allow Remote Code Execution Patch Immediately!
Salesforce has disclosed a series of critical security vulnerabilities in its Tableau Server platform that could allow attackers to execute remote code and gain unauthorized access to production databases. The vulnerabilities, announced on June 26, 2025, affect multiple versions of Tableau Server and carry CVSS scores ranging from 8.0 to 8.5, indicating severe security risks…
-
Critical Salesforce Flaws Allow Remote Code Execution Patch Immediately!
Salesforce has disclosed a series of critical security vulnerabilities in its Tableau Server platform that could allow attackers to execute remote code and gain unauthorized access to production databases. The vulnerabilities, announced on June 26, 2025, affect multiple versions of Tableau Server and carry CVSS scores ranging from 8.0 to 8.5, indicating severe security risks…
-
AI-forged panda images hide persistent cryptomining malware ‘Koske’
Tags: ai, control, crypto, detection, dns, infrastructure, malware, monitoring, service, tactics, unauthorizedModular payload for stealth and persistence: Koske employs multiple tactics to stay hidden and persistent. It hijacks hidden configuration files used by the Bash shell to execute a custom system script that maintains communication with the command-and-control (C2) infrastructure for persistence.Additionally, the rootkit, written in C, hijacks readdir(), a system call for reading directory content,…
-
Fake Indian Banking Apps on Android Steal Login Credentials from Users
A malicious Android application has been uncovered, impersonating legitimate Indian banking apps to orchestrate credential theft, surveillance, and unauthorized financial transactions. This malware employs a modular architecture featuring a dropper and a primary payload, leveraging deceptive user interfaces, silent installation techniques, and extensive abuse of Android permissions to evade detection and ensure persistence. In-Depth Malware…
-
Mitel patches critical MiVoice MX-ONE Auth bypass flaw
Mitel addressed a critical MiVoice MX-ONE flaw that could allow an unauthenticated attacker to conduct an authentication bypass attack. A critical authentication bypass flaw (CVSS score of 9.4) in Mitel MiVoice MX-ONE allows attackers to exploit weak access controls and gain unauthorized access to user or admin accounts. >>An authentication bypass vulnerability has been identified…
-
GitLab Publishes Security Update Addressing Several Vulnerabilities in Community and Enterprise Edition
GitLab has released critical security patches addressing six vulnerabilities across its Community Edition (CE) and Enterprise Edition (EE) platforms, with two high-severity cross-site scripting (XSS) flaws requiring immediate attention from self-managed installations. The security update, distributed through versions 18.2.1, 18.1.3, and 18.0.5, includes fixes for vulnerabilities that could potentially allow unauthorized access to sensitive information…
-
GitLab Publishes Security Update Addressing Several Vulnerabilities in Community and Enterprise Edition
GitLab has released critical security patches addressing six vulnerabilities across its Community Edition (CE) and Enterprise Edition (EE) platforms, with two high-severity cross-site scripting (XSS) flaws requiring immediate attention from self-managed installations. The security update, distributed through versions 18.2.1, 18.1.3, and 18.0.5, includes fixes for vulnerabilities that could potentially allow unauthorized access to sensitive information…
-
Top 10 MCP vulnerabilities: The hidden risks of AI integrations
Tags: access, ai, api, attack, authentication, backdoor, breach, business, data, data-breach, detection, email, encryption, github, google, identity, injection, least-privilege, LLM, login, malicious, mfa, network, risk, social-engineering, software, sql, supply-chain, theft, threat, tool, unauthorized, vulnerabilityLiving off AI attacks: A threat actor posing as an employee, business partner, or customer sends a request to a human support agent. But the request contains a hidden prompt injection with instructions that only an AI can read. When the human employee passes the request on to their AI assistant it then, by virtue…
-
Cyberattack on Germany’s AMEOS Hospital Network Exposes Patient Data
Tags: access, authentication, cyber, cyberattack, data, defense, detection, germany, healthcare, infrastructure, mfa, network, unauthorized, vulnerabilityGermany’s AMEOS Hospital Network has confirmed a sophisticated cyberattack that compromised its IT infrastructure, leading to unauthorized access and potential exposure of sensitive data. Despite robust defenses including multi-factor authentication, intrusion detection systems, and regular vulnerability assessments, attackers managed to infiltrate the network, resulting in a brief but impactful breach. Potential Ramifications The incident involved…
-
Ring denies breach after users report suspicious logins
Ring is warning that a backend update bug is responsible for customers seeing a surge in unauthorized devices logged into their account on May 28th. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ring-denies-breach-after-users-report-suspicious-logins/
-
Microsoft SharePoint zero-day breach hits on-prem servers
Tags: access, advisory, attack, breach, cisa, cloud, conference, credentials, cve, cybercrime, cybersecurity, data-breach, detection, exploit, flaw, infrastructure, Internet, kev, microsoft, mitigation, monitoring, network, risk, service, strategy, threat, unauthorized, update, vulnerability, zero-dayEnterprise impact escalates as security keys are compromised: The attack’s sophistication poses particular risks for enterprise environments where SharePoint serves as a central hub for document collaboration and workflow management. Unlike traditional web attacks focused on simple command execution, this exploit specifically targets SharePoint’s cryptographic infrastructure to maintain persistent access.As part of the exploitation, attackers…
-
Threat Actors Weaponize WordPress Sites to Redirect Visitors to Malicious Domains
Security researchers identified a sophisticated malware campaign targeting WordPress websites, where threat actors embedded malicious code within core files to facilitate unauthorized redirects and search engine optimization (SEO) poisoning. The infection was traced to the wp-settings.php file, a fundamental component of the WordPress framework, which had been altered to include two anomalous lines of PHP…
-
7 obsolete security practices that should be terminated immediately
Tags: access, advisory, antivirus, api, attack, authentication, awareness, breach, business, cloud, compliance, control, cybersecurity, data, defense, detection, edr, endpoint, exploit, google, grc, identity, infrastructure, iot, linkedin, mfa, microsoft, mobile, monitoring, network, office, password, phishing, phone, ransomware, risk, service, siem, social-engineering, strategy, tactics, technology, threat, tool, training, unauthorized, update, vpn, vulnerability, zero-trust2. Taking a compliance-driven approach to security: Too many teams let compliance drive their security programs, focusing more on checking boxes than solving actual cybersecurity challenges, says George Gerchow, CSO at data security services firm Bedrock Security. He notes that many enterprises drive to meet compliance standards, yet still suffer serious breaches. The reason? They…
-
Louis Vuitton Suffers Data Breach”, Customer Information Stolen
Luxury fashion house Louis Vuitton has confirmed that customer data from its UK operations was compromised in a cyber-attack, marking the latest in a series of high-profile retail breaches targeting major brands. The incident, which occurred on July 2, 2025, resulted in unauthorized access to customer information, including names, contact details, and purchase histories, though…
-
Patch immediately: CVE-2025-25257 PoC enables remote code execution on Fortinet FortiWeb
Tags: cve, exploit, flaw, fortinet, injection, rce, remote-code-execution, sql, unauthorized, update, vulnerabilityPoC exploits released for critical Fortinet FortiWeb flaw allowing pre-auth RCE. Fortinet urges users to patch. Proof-of-concept (PoC) exploits for CVE-2025-25257 in Fortinet FortiWeb (CVSS 9.8) enable pre-auth RCE on vulnerable servers. The flaw is a SQL injection vulnerability in FortiWeb (CWE-89) that allows unauthenticated attackers to execute unauthorized SQL commands via crafted HTTP/HTTPS requests.…
-
Fortinet FortiWeb Fabric Connector Flaw Enables Remote Code Execution
Tags: authentication, cve, cyber, flaw, fortinet, injection, remote-code-execution, sql, unauthorized, vulnerabilitySecurity researchers have identified a severe pre-authentication SQL injection vulnerability in Fortinet’s FortiWeb Fabric Connector, designated as CVE-2025-25257, that allows unauthenticated attackers to execute unauthorized SQL commands and potentially achieve remote code execution. The vulnerability affects multiple versions of FortiWeb, including 7.6.0 through 7.6.3, 7.4.0 through 7.4.7, 7.2.0 through 7.2.10, and 7.0.0 through 7.0.10, with…
-
Bitcoin Depot Breach Exposes Data of 27,000 Crypto Users
Bitcoin Depot, Inc., a prominent cryptocurrency ATM operator, has disclosed a data breach that compromised the personal information of approximately 27,000 users. The breach, which involved unauthorized access to sensitive customer records, underscores the persistent vulnerabilities in the fintech sector, particularly for platforms handling digital asset transactions. Detected on June 23, 2024, the incident prompted…
-
Employees are quietly bringing AI to work and leaving security behind
While IT departments race to implement AI governance frameworks, many employees have already opened a backdoor for AI, according to ManageEngine. The rise of unauthorized AI … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/07/11/organizations-shadow-ai-risk/
-
CISA Warns ValveLink Products May Expose Sensitive System Information
Tags: access, advisory, cisa, cvss, cyber, cybersecurity, infrastructure, unauthorized, vulnerabilityThe Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical security advisory warning that multiple vulnerabilities in Emerson ValveLink Products could allow attackers to access sensitive system information and execute unauthorized code. The alert, designated ICSA-25-189-01 and released on July 8, 2025, carries a maximum CVSS v4 score of 9.3, indicating the severity of…
-
Unauthorized Data Exposure via Range Queries in ServiceNow ACLs CVE-2025-3648
Summary A vulnerability has been identified in the ServiceNow Platform that may allow unauthenticated or authenticated users to infer data they should not have access First seen on research.kudelskisecurity.com Jump to article: research.kudelskisecurity.com/2025/07/10/unauthorized-data-exposure-via-range-queries-in-servicenow-acls-cve-2025-3648/
-
New “Opossum” Attack Breaches Secure TLS by Injecting Malicious Messages
A newly discovered man-in-the-middle exploit dubbed “Opossum” has demonstrated the unsettling ability to compromise secure communications over Transport Layer Security (TLS) by injecting unauthorized messages into an active session. Researchers warn that Opossum targets a wide range of widely used application protocols”, including HTTP, FTP, POP3, SMTP, LMTP and NNTP”, that support both “implicit” TLS…
-
Gold Melody IAB Exploits Exposed ASP.NET Machine Keys for Unauthorized Access to Targets
The Initial Access Broker (IAB) known as Gold Melody has been attributed to a campaign that exploits leaked ASP.NET machine keys to obtain unauthorized access to organizations and peddle that access to other threat actors.The activity is being tracked by Palo Alto Networks Unit 42 under the moniker TGR-CRI-0045, where “TGR” stands for “temporary group”…
-
Hackers Exploit IIS Machine Keys to Breach Organizations
A sophisticated campaign by an initial access broker (IAB) group exploiting leaked Machine Keys from ASP.NET websites to gain unauthorized access to targeted organizations. The threat group, tracked as TGR-CRI-0045, has been active since October 2024 with a significant surge in attacks between January and March 2025, targeting organizations across Europe and the United States…
-
Chinese Hacker Xu Zewei Arrested for Ties to Silk Typhoon Group and U.S. Cyber Attacks
A Chinese national has been arrested in Milan, Italy, for his alleged links to a state-sponsored hacking group known as Silk Typhoon and for carrying out cyber attacks against American organizations and government agencies.The 33-year-old, Xu Zewei, has been charged with nine counts of wire fraud and conspiracy to cause damage to and obtain information…
-
Suspected Hacker Linked to Silk Typhoon Arrested in Milan
The alleged Chinese state-sponsored hacker faces multiple charges, including wire fraud, aggravated identity theft, and unauthorized access to protected computers. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/suspected-hacker-silk-typhoon-arrested