Hackers Exploit N‑central Flaws to Infect 21 Servers, Including 19 Clients
Vulnerabilities 4EverAble2Shell and Agent2Shell allow remote code execution and were used to install Monero miners on 21 N‑central servers worldwide.
All news
9 articles
- CibersegurançaHackers Exploit N‑central Flaws to Infect 21 Servers, Including 19 ClientsVulnerabilities 4EverAble2Shell and Agent2Shell allow remote code execution and were used to install Monero miners on 21 N‑central servers worldwide.By CyberX I.T Solutions
CibersegurançaFBI confirms theft of more than $400 million in crypto by North Korean hackers using deepfake video callsThe FBI identified a social engineering scheme, called FaceStealer, that allegedly stole more than $400 million in cryptocurrencies using fake video calls, attributed to the North Korean group BlueNoroff.By CyberX I.T Solutions
CibersegurançaHackers exploit PHP2Shell vulnerabilities in Check Point gateways and deploy TSGA backdoorUnknown group uses PHP2Shell vulnerabilities and CVE‑2026‑123039 to compromise Check Point gateways, install TSGA backdoor, and distribute destroy_v6 wiper on ESXi hosts.By CyberX I.T Solutions
CibersegurançaTrezor confirms hidden implants in wallets sold by resellerTrezor identified extra circuits in three Safe 5 devices that copy recovery phrases. A firmware update mitigates the risk, but users must migrate funds.By CyberX I.T Solutions
CibersegurançaMior and Skyfall expose flaws in AMD SEV‑SNP that allow data theft in VMsResearchers from ETH Zurich and Google demonstrated two vulnerabilities – Mior and Skyfall – that allow a compromised host to read and modify memory of VMs protected by AMD SEV‑SNP.By CyberX I.T Solutions
CibersegurançaPostgreSQL releases patches for 52 vulnerabilities, including 22-year-old bug allowing authenticated RCEUpdates fix a type confusion flaw (CVE-2026-6460) that can execute code with PostgreSQL user privileges, alongside 51 other critical vulnerabilities.By CyberX I.T Solutions
CibersegurançaChainalysis Leak Exposes Credentials and Threatens Global Crypto Asset EcosystemAn advanced cyberattack using autonomous artificial intelligence agent techniques compromised Chainalysis servers, resulting in the exposure of password hashes and user authentication tokens, forcing the shutdown of critical monitoring services.By CyberX I.T Solutions
Critical APT flaw allows Man-in-the-Middle attacks and root code execution on Debian and UbuntuVulnerability CVE-2026-109518 allows attackers to intercept package downloads and replace legitimate files with malicious versions, compromising Linux systems with administrative privileges.By CyberX I.T Solutions
cPGuard Update Channel Compromised to Distribute Backdoor to Linux ServersAn attack on OPSSHIELD's distribution infrastructure allowed a malicious script to be injected into cPGuard updates. The operation harvested password hashes, database configurations, and SSH files from Linux servers. The manufacturer confirms that data from 32 servers was exfiltrated by the attacker.By CyberX I.T Solutions