> TODAY'S SUMMARY (4 articles)
Today’s cybersecurity landscape highlights several critical threats. Researchers from Param have identified a vulnerability in ChatGPT where a malicious share link can execute code in a user's session, potentially exposing private chats. Meanwhile, Cloudflare reported a staggering 18.2 million network-layer DDoS attacks in Q3, an increase of 38%, averaging over 8,200 attacks per hour. Additionally, Microsoft has issued warnings regarding a malicious extension mimicking Claude Code, which establishes a persistent SSH backdoor for attackers. Organizations need to be vigilant in improving their defenses against these escalating threats.
|
// AI-powered summary generated at 08:00
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Use after free in Windows DNS allows an unauthorized attacker to deny service over a network.
Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network.
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Out-of-bounds read in SQL Server allows an authorized attacker to execute code over a network.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.