Aggregator

New Lucid Stealer Targets 18 Browsers, Crypto Wallets, and Discord Tokens With Hidden Remote Access

Cyber Security News
1 month ago

A newly identified piece of Windows malware is raising serious concerns among cybersecurity professionals for its wide reach and unusually deep set of capabilities. Discovered through underground channels linked to Telegram, the threat known as Lucid Stealer goes far beyond stealing a few stored passwords. It can take full control of an infected machine without […]

The post New Lucid Stealer Targets 18 Browsers, Crypto Wallets, and Discord Tokens With Hidden Remote Access appeared first on Cyber Security News.

Tushar Subhra Dutta

Cairn 深度架构分析

网络安全回收站
1 month ago
Cairn 的独特价值在于：不给 LLM 贴角色标签，不注入领域知识，而是提供一个结构化的"棋盘"和规则，让 LLM 的涌现能力自行驱动问题求解。

8th June – Threat Intelligence Report

Check Point Research
1 month ago

For the latest discoveries in cyber research for the week of 8th June, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES DentaQuest, a U.S. dental benefits administrator owned by Sun Life, has suffered a data breach after threat group ShinyHunters leaked exfiltrated data. Analysts assessed that 2.6 million accounts were exposed, including names, emails, […]

The post 8th June – Threat Intelligence Report appeared first on Check Point Research.

urias

Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups

The Hackers News
1 month ago
Check Point has warned of active exploitation of a critical vulnerability impacting Remote Access VPN and Mobile Access deployments that are configured to use the deprecated IKEv1 key exchange protocol. The vulnerability, tracked as CVE-2026-50751 (CVSS score: 9.3), is a case of a logic flow weakness in certificate validation that allows an unauthenticated remote attacker to bypass user
The Hacker News

Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access

Security Affairs
1 month ago
Hackers exploit CVE-2026-3300 in Everest Forms Pro to inject PHP via form fields, creating rogue admin accounts. 29,300 attempts blocked. Researcher h0xilo submitted a flaw in Everest Forms Pro for WordPress, tracked as CVE-2026-3300, to Wordfence’s bug bounty program and earned $325 for it. WPEverest patched the flaw on March 18. Wordfence published a full […]
Pierluigi Paganini

Reducing security operations complexity with Wazuh Cloud

Bleeping Computer.
1 month ago
Security teams are increasingly overwhelmed by alert fatigue, infrastructure maintenance, and complex hybrid environments. This article explores how Wazuh Cloud helps simplify SIEM/XDR operations through managed infrastructure, automated scaling, and AI-driven security analysis. [...]
Sponsored by Wazuh

Managed ad