Razvijalec Pro-me3us je objavil javno dostopen paket orodij, ki na tretji generaciji naprave Amazon Fire TV Cube omogoča trajen root dostop in odklep bootloaderja. Postopek izkorišča več ranljivosti, med njimi tudi eno, ki je uvrščena v katalog CISA KEV.
13.10.2026, 16:05Razvijalec Pro-me3us je objavil javno dostopen paket orodij, ki na tretji generaciji naprave Amazon Fire TV Cube omogoča trajen root dostop in odklep bootloaderja. Postopek izkorišča več ranljivosti, med njimi tudi eno, ki je uvrščena v katalog CISA KEV.
Raziskovalci so razkrili štiri ranljivosti v LG webOS, ki jih je mogoče verižiti za pridobitev root dostopa do pametnih televizorjev brez PIN kode ali kakršne koli interakcije lastnika. LG je popravek že izdal.
Raziskovalci Bloom Security so odkrili ranljivost v mehanizmu npm Trusted Publishing, imenovano SlugFest, ki je omogočala prevzem objavljanja paketov brez kraje poverilnic. Napaka je bila odpravljena, aktivno izkoriščanje v naravi ni bilo zaznano.
Four Vietnamese Nationals Indicted for Cybercrime Involvement In a recent development in the world of cybersecurity, four Vietnamese nationals with connections to the notorious FIN9 cybercrime...
Introducing the Dangerous Rafel RAT Android Malware In the realm of Android malware, the Rafel RAT has emerged as a formidable threat to users’ privacy and...
Google Introduces Project Naptime to Boost Vulnerability Research Google has once again ventured into the realm of cybersecurity with the launch of Project Naptime. This innovative...
Cybersecurity Researchers Identify Critical Vulnerability in Ollama AI Platform In the realm of cybersecurity, researchers have unearthed a critical security flaw in the Ollama open-source artificial...
LockBit Ransomware Strikes the US Federal Reserve LockBit, a notorious ransomware gang, has recently claimed to have compromised and encrypted a massive 33 terabytes of data...
Mailcow Email Servers Vulnerable to Critical Security Flaws Mailcow email servers have recently been identified to have critical vulnerabilities, known as CVE-2024-31204 and CVE-2024-30270, which could...
Understanding Critical Threats and Bad Actors in IT Security In the realm of IT security, staying informed about critical threats and the individuals orchestrating them is...
[embedyt] https://www.youtube.com/watch?v=621hAxsF0_Y[/embedyt] What is phishing? a) A fishing technique b) A type of encryption c) A social engineering attack d) A network protocol
China-Linked State-Sponsored Cyber Espionage Campaign Targets Taiwan In a recent cyber espionage campaign between November 2023 and April 2024, a state-sponsored threat actor with likely ties...
The Rise of Rafel RAT: A Handy Tool for Cyber Espionage The dark side of technology is always lurking, and the latest tool in the cyber...
Enhanced DDoS Response Guidance Released by CISA, MS-ISAC, and the FBI In the ever-evolving landscape of cybersecurity, staying ahead of threats like Distributed Denial of Service...
[embedyt] https://www.youtube.com/watch?v=Y3L4wRRyNWs[/embedyt] What does SSL stand for? a) Secure Socket Layer b) System Security Lock c) Safe Server Login d) Synchronized System Link
