ZCyberNews
中文

Articles

460 articles

Foxit PDF Reader CVE-2026-5943 Use-After-Free RCE Exploited viaHIGH
Vulnerabilities

Foxit PDF Reader CVE-2026-5943 Use-After-Free RCE Exploited via

CVE-2026-5943: A use-after-free in Foxit PDF Reader's AcroForm annotation handling allows unauthenticated RCE (CVSS 7.8). Requires user to open a malicious PDF.

CVE-2026-5943
3 min read
Foxit PDF Reader Use-After-Free Leaks Memory via AcroForm SignaturesLOW
Vulnerabilities

Foxit PDF Reader Use-After-Free Leaks Memory via AcroForm Signatures

CVE-2026-5942: A use-after-free in Foxit PDF Reader's AcroForm signature handling lets attackers read process memory. CVSS 3.3. User must open a malicious file.

CVE-2026-5942
2 min read
Google Project Zero Details macOS coreaudiod Exploit ChainHIGH
Vulnerabilities

Google Project Zero Details macOS coreaudiod Exploit Chain

Google Project Zero published exploit details for CVE-2024-54529, a type confusion in macOS coreaudiod allowing sandbox escape via knowledge-driven fuzzing.

CVE-2024-54529CVE-2025-31235
3 min read
LiteLLM CVE-2026-42208 Pre-Auth SQLi Exploited in AttacksCRITICAL
Vulnerabilities

LiteLLM CVE-2026-42208 Pre-Auth SQLi Exploited in Attacks

Attackers exploit CVE-2026-42208, a critical pre-authentication SQL injection in LiteLLM LLM gateway, to steal API keys and model data. CVSS 9.8. No patch yet.

CVE-2026-42208
3 min read
LofyGang Returns With Minecraft-Targeted LofyStealer MalwareHIGH
Malware

LofyGang Returns With Minecraft-Targeted LofyStealer Malware

Brazilian cybercrime group LofyGang resurfaces after three years with LofyStealer, a new info-stealer disguised as a Minecraft hack called 'Slinky' that targets player credentials…

2 min readLofyGang
ShinyHunters Breaches Medtronic, Steals 9M RecordsHIGH
Industry News

ShinyHunters Breaches Medtronic, Steals 9M Records

ShinyHunters claims to have stolen 9 million records from medical device maker Medtronic, including personal information. The group threatens to leak the data.

2 min readShinyHunters
Ukraine Police Arrest Hackers Behind Roblox Account Theft RingMEDIUM
Industry News

Ukraine Police Arrest Hackers Behind Roblox Account Theft Ring

Ukrainian police detained hackers suspected of stealing thousands of Roblox accounts containing valuable digital items and in-game currency purchased with real money from players…

2 min read
VECT 2.0 Ransomware Wiper Bug Destroys Files Over 131KBCRITICAL
Malware

VECT 2.0 Ransomware Wiper Bug Destroys Files Over 131KB

VECT 2.0 ransomware contains a critical encryption flaw that irreversibly destroys files larger than 131KB on Windows, Linux, and ESXi — no recovery possible even with a…

2 min readVECT
VECT Ransomware Wiper Bug Destroys Data, Not Just EncryptsCRITICAL
Malware

VECT Ransomware Wiper Bug Destroys Data, Not Just Encrypts

Check Point Research found a bug in VECT ransomware's encryption logic that permanently destroys files on Windows systems — no recovery possible even after paying.

3 min readVECT Ransomware
Vimeo Breach Tied to Anodot Vendor Hack, No Video Data ExposedMEDIUM
Industry News

Vimeo Breach Tied to Anodot Vendor Hack, No Video Data Exposed

Vimeo attributed a security incident to a breach at analytics vendor Anodot; hackers accessed internal systems but not video content, logins, or payment data.

2 min read
73 Fake VS Code Extensions Deliver GlassWorm v2 Info-StealerHIGH
Malware

73 Fake VS Code Extensions Deliver GlassWorm v2 Info-Stealer

Researchers found 73 cloned VS Code extensions on Open VSX, with 6 confirmed malicious, delivering the GlassWorm v2 info-stealer.

2 min readGlassWorm
ADT Breach: ShinyHunters Steals Data of 5.5 MillionHIGH
Industry News

ADT Breach: ShinyHunters Steals Data of 5.5 Million

ShinyHunters breached ADT, stealing personal data of 5.5 million individuals — names, emails, phone numbers, and addresses — from internal systems. No payment data compromised.

2 min readShinyHunters
← PrevPage 22 of 39Next →