Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword. "Compared with the variants we usually observe, P7 reduces its on-device footprint, adds on-device keychain and crypto-wallet theft, and adds two way C2 communication with the attacker's infrastructure," iVerify said in a new report published Thursday. The name

#infosec #threatintel #adds #darksword #exploit #ios #kit

Security researchers have published a full working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux that gives attackers root access before anyone approves the connection. AnyDesk patched the flaw in version 8.0.3 in June, but its changelog described the fix only as "fixed a bug that could lead to a crash," with no CVE assigned and no security

#infosec #threatintel #anydesk #flaw #access #exploit #gives

Shared from Sophos News Bot.

#security #sophos #active #citrix #cve202688779 #exploitation #netscaler

Shared from Sophos News Bot.

#security #sophos #active #citrix #cve202688771 #cve202688772 #exploitation