Aggregator

At least two websites appear to be victim to 404 hijacking attacks. Army officials took the sites down after being contacted by CyberScoop.

The post US Army websites defaced with pro-Kurdish sentiments, insults to Trump appeared first on CyberScoop.

A new phishing technique is tricking users into handing over their Microsoft account tokens without a fake website in sight. Attackers are exploiting a legitimate Microsoft authentication feature to steal access to email, files, and chat messages. The method works well because victims never leave the real Microsoft login page during the attack. The technique […]

The post Microsoft Device Code Phishing Attack Steals Tokens Through Legitimate Login Page appeared first on Cyber Security News.

A security flaw in how developers implement Google’s Gemini Live API allows attackers to hijack browser-based AI voice sessions, override system prompts, and trigger unauthorized code execution all through a token misconfiguration that traces back to Google’s own reference implementation. Security Researcher Alvin Ferdiansyah observed that Gemini Live API powers real-time voice assistants through persistent […]

The post Gemini Live Voice Session Flaw Enables Tool Injection Through Misconfigured Ephemeral Tokens appeared first on Cyber Security News.

You must login to view this content

A new ransomware strain called The Gentlemen has emerged as one of the more aggressive threats tracked this year, combining strong encryption with a self-spreading worm engine that can take down an entire corporate network from a single infected machine. Written in the Go programming language and disguised using a tool called Garble, the malware […]

The post The Gentlemen Ransomware Uses 21 Remote Execution Techniques to Encrypt Entire Networks appeared first on Cyber Security News.