Aggregator

ThreatFabric researchers have identified a sophisticated new campaign by the Anatsa banking trojan specifically targeting mobile banking customers across the United States and Canada, marking the malware’s third major offensive against North American financial institutions. The latest campaign represents a significant escalation in the threat landscape, with cybercriminals successfully infiltrating the official Google Play Store […]

The post Anatsa Android Banking Malware from Google Play Targeting Users in the U.S. and Canada appeared first on Cyber Security News.

You must login to view this content

CISA has issued a critical warning regarding a path traversal vulnerability in the Ruby on Rails framework that poses significant risks to web applications worldwide.  The vulnerability, cataloged as CVE-2019-5418, affects the Action View component of Rails and enables attackers to exploit specially crafted accept headers in combination with render file: calls to access arbitrary […]

The post CISA Warns of Rails Ruby on Rails Path Traversal Vulnerability Exploited in Attacks appeared first on Cyber Security News.

Fortinet has disclosed a critical security vulnerability in FortiOS that could allow authenticated attackers to execute arbitrary code through a heap-based buffer overflow in the cw_stad daemon, affecting multiple versions of the popular network security operating system. Critical Security Flaw Discovered in FortiOS Fortinet announced today the discovery of a significant security vulnerability, designated as CVE-2025-24477, […]

The post FortiOS Buffer Overflow vulnerability Enables Remote Code Execution by Attackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.