Aggregator

New Zealand Model Brings Cyber and Fraud Teams Together to Defend Against Scammers
To help financial institutions counter crime, the FS-ISAC earlier this month introduced a major initiative: the Cyberfraud Prevention Framework. This new initiative is designed to unify cybersecurity and fraud prevention teams to more effectively protect customers and secure the enterprise.

The current offline/open source model boom is unstoppable. Its impact depends on how well the risks are managed today.

Administrators of a Telegram channel named CoderSharp have been advertising Gremlin Stealer since March 2025

A vulnerability, which was classified as critical, has been found in Google Chrome. This issue affects some unknown processing of the component Content Security Policy. The manipulation leads to improper access controls. The identification of this vulnerability is CVE-2022-3056. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Google Chrome. Affected by this vulnerability is an unknown functionality of the component Storage. The manipulation leads to out-of-bounds write. This vulnerability is known as CVE-2022-3195. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Google Chrome. Affected is an unknown function of the component Mojo. The manipulation leads to sandbox issue. This vulnerability is traded as CVE-2022-3075. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in vim and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to stack-based buffer overflow. This vulnerability is known as CVE-2022-3324. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in PHP up to 7.4.30/8.0.23/8.1.10. This issue affects some unknown processing of the component Cookie Handler. The manipulation leads to improper input validation. The identification of this vulnerability is CVE-2022-31629. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A spear-phishing campaign sent Trojanized versions of legitimate word-processing software to members of the World Uyghur Congress as part of China's continued cyber-espionage activity against the ethnic minority.

A vulnerability was found in Mozilla Firefox up to 104. It has been classified as critical. Affected is an unknown function of the component FeaturePolicy. The manipulation leads to improper access controls. This vulnerability is traded as CVE-2022-40959. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Mozilla Firefox up to 104. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component URL Parser. The manipulation leads to use after free. This vulnerability is known as CVE-2022-40960. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Mozilla Firefox up to 104. It has been rated as critical. Affected by this issue is some unknown functionality of the component Cookie Handler. The manipulation leads to session fixiation. This vulnerability is handled as CVE-2022-40958. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Google Chrome. It has been declared as critical. This vulnerability affects unknown code of the component DOMStorage. The manipulation leads to double free. This vulnerability was named CVE-2019-5797. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Mozilla Firefox up to 104. Affected is an unknown function. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2022-40962. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Mozilla Firefox up to 104. This vulnerability affects unknown code of the component Content-Security-Policy. The manipulation leads to injection. This vulnerability was named CVE-2022-40956. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Mozilla Firefox up to 104 on ARM64. This issue affects some unknown processing. The manipulation leads to denial of service. The identification of this vulnerability is CVE-2022-40957. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Mozilla Thunderbird up to 91.13.0 and classified as problematic. Affected by this issue is some unknown functionality of the component HTML Email Handler. The manipulation leads to information disclosure. This vulnerability is handled as CVE-2022-3033. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Mozilla Thunderbird up to 91.13.0. It has been classified as problematic. This affects an unknown part of the component HTML Email Handler. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2022-3032. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A critical vulnerability in Google Chrome has recently been discovered that allows malicious actors to break out of the browser’s protective sandbox environment, potentially giving attackers access to the underlying operating system. The flaw, identified as CVE-2025-2783, affects Chrome versions prior to 134.0.6998.142 across Windows, macOS, and Linux platforms. This vulnerability represents a significant security […]

The post Google Chrome Vulnerability Let Attackers Escape Payload from Sandbox – Technical Details Disclosed appeared first on Cyber Security News.

In response to the concerning rise of “violence-as-a-service” (VaaS) and the exploitation of youth by organized crime, Europol has announced the formation of a new Operational Task Force (OTF), codenamed GRIMM.  This multinational initiative, led by Sweden, brings together law enforcement agencies from Belgium, Denmark, Finland, France, Germany, the Netherlands, and Norway. Europol provides operational […]

The post Europol Creates Operational Taskforce to Tackle Violence-as-a-Service appeared first on Cyber Security News.