VulnCheck CTO Jacob Baines claims that Zbtlink routers are intentionally designed to communicate with command and control servers, a feature he calls a "phone-home trojan horse."
Cyber Insider disclosed that a popular Wansview indoor security camera model, the WVC Q5, was found to be shipping with a web server vulnerable to a flaw first identified over 20 years ago.
In the news this week: InfraTrust and knowing what to patch, Adversary in the middle triggered command injection, Exploitarium again, FreeRDP comes with free vulnerabilities, AI breaking out of sandboxes on its own, Wordpress RCE, DMA dangers, Nightmware eclypse is at it again, Fortisandbox, Turning AI to the dark side, more prompt injection, Secur...
The LG Monitor App Installer, identified by YouTube channel Gamers Nexus, installs automatically when a compatible LG monitor is connected to a Windows PC.
A researcher, known as tokay0, detailed how a flawed policy attached to a certificate on Shark RV2320EDUS robot vacuums enables attackers to execute root commands on other Shark vacuums.
In the security news: Son of Anton strikes again!, HalluSquatting and using Claude to defend itself, CISA KEV’s Revolving Door , LLM's hallucinate and companies get sued, Additionally - GitLost, Yet even more Linux vulnerabilities, Citrix just keeps bleeding, Old hardware is new again, A sneak peak into next week's tech segment, Tenda hidden backdo...
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
