> TODAY'S SUMMARY (4 articles)
Today’s cybersecurity landscape highlights several critical threats. Researchers from Param have identified a vulnerability in ChatGPT where a malicious share link can execute code in a user's session, potentially exposing private chats. Meanwhile, Cloudflare reported a staggering 18.2 million network-layer DDoS attacks in Q3, an increase of 38%, averaging over 8,200 attacks per hour. Additionally, Microsoft has issued warnings regarding a malicious extension mimicking Claude Code, which establishes a persistent SSH backdoor for attackers. Organizations need to be vigilant in improving their defenses against these escalating threats.
|
// AI-powered summary generated at 08:00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.