The Hacker News13h
LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers
The CVE-2024-49113 PoC devised by SafeBreach Labs, codenamed LDAPNightmare, is designed to crash any unpatched Windows Server ...
The Hacker News10h
Apple to Pay Siri Users $20 Per Device in Settlement Over Accidental Siri Privacy Violations
Apple has agreed to pay $95 million to settle a proposed class action lawsuit that accused the iPhone maker of invading users ...
The Hacker News10h
New AI Jailbreak Method 'Bad Likert Judge' Boosts Attack Success Rates by Over 60%
New Likert-scale-based AI jailbreak technique boosts attack success rates by 60%, highlighting urgent safety challenges.
The Hacker News16h
Severe Security Flaws Patched in Microsoft Dynamics 365 and Power Apps Web API
Three patched Dynamics 365 and Power Apps vulnerabilities exposed sensitive data, highlighting risks of API flaws.
The Hacker News16h
Malicious Obfuscated NPM Package Disguised as an Ethereum Tool Deploys Quasar RAT
Malicious npm package 'ethereumvulncontracthandler' delivers Quasar RAT to Windows systems, bypassing sandbox defenses, with ...
The Hacker News16h
New "DoubleClickjacking" Exploit Bypasses Clickjacking Protections on Major Websites
New "DoubleClickjacking" attack bypasses clickjacking protections by exploiting double-click timing gaps, enabling account takeovers.