WAY 401 Hida House - Al Khuwair South - Muscat -Oman
info@tscogroup.com

Darius Moukhtarzadeh

DIVD says Zammad zero-days enabled AI-driven network breach

The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system. Previously, the nonprofit organization of volunteer security researchers said the attack was “loud and very, very messy,” driven by an AI agent that moved autonomously and decided its next steps without external intervention or direction. DIVD retrieved extensive details about the attack because the AI agent left behind clear explanations
Read More

Cloudflare fixes Containers cross-tenant flaw exposing customer data

Cloudflare has fixed a vulnerability in Containers and Sandboxes that allowed customers with a Workers Paid account to recover residual data from other customers’ containers on the same physical host. Cloudflare Containers is a service available on the Workers Paid plan that lets developers run containerized applications on Cloudflare’s infrastructure, alongside Cloudflare Workers. Developers and companies building applications on Cloudflare typically use it, including those running backend services, processing jobs, and code execution environments. The flaw was reported through HackerOne
Read More

New RemControl Android banking malware targets users in Europe and Canada

A new Android malware-as-a-service (MaaS) platform called RemControl is targeting users through malvertising campaigns that impersonate the TVTap IPTV application. Although the infrastructure has been active since at least May, the first samples were observed in July and contained more than 30 phishing overlays designed to steal banking credentials. Researchers at cybersecurity company Group-IB say that the malware targets users in Europe (Italy, France, Spain, Poland, Portugal), Canada, and countries in the Middle East. In one of the overlays, the
Read More
Gyazo server flaw exploited to steal 23.6 million user records

Gyazo server flaw exploited to steal 23.6 million user records

The Gyazo image-sharing platform has confirmed it suffered a data breach after hackers exploited a server vulnerability that allowed them to steal 23.6 million user records. Gyazo is a cloud-based screenshot and screen-recording tool operated by Helpfeel that automatically uploads user screen captures to the cloud and gives them a shareable link to share on chats, forums, social media, etc. It's especially popular in gaming communities and claims 23 million users worldwide, who have submitted 3.1 billion media items. According to
Read More
Google TV projector myths busted: 5 things most people get wrong about using projectors as TVs

Google TV projector myths busted: 5 things most people get wrong about using projectors as TVs

Kaitlyn Cimino / Android AuthorityFor the longest time, the idea of replacing your living room television with a projector was something only true-blue home theater enthusiasts entertained. You needed a perfectly dark room, a sizable budget, and a willingness to deal with an oversized setup, likely suspended from the ceiling, just to watch the evening
Read More
Bixby users are hearing weird voices they never selected

Bixby users are hearing weird voices they never selected

Adamya Sharma / Android AuthorityTL;DR A Samsung user says Bixby started switching between different voices after a recent update. The selected voice reportedly appears on occasion, while other responses use a lower, unfamiliar voice. Samsung’s Bixby team acknowledged the complaint but did not confirm a bug or promise a fix. Samsung has been working to
Read More

Archives

Categories