Rapid7 researchers believe the BeyondTrust Remote Support attacks from December also exploited a zero-day flaw in PostgreSQL.

The attacks they presented come in three flavors: UART, eMMC, and command injection bugs. I’m going to add the break now, but I’ll give a rundown of most of the device exploits they showed off.

China's Salt Typhoon hackers are still actively targeting telecoms worldwide and have breached more U.S. telecommunications ...

Zyxel legacy DSL CPE products affected by exploited zero-day vulnerabilities (CVE-2024-40891 and CVE-2024-40890) will not be ...

Rapid7 finds a new zero-day vulnerability in PostgreSQL and links it to chain of attacks against a BeyondTrust Remote Support ...

Programmers are being urged to update their Rust versions after the security experts working on the language addressed a critical vulnerability that could lead to malicious command injections on ...

Rapid7's vulnerability research team says attackers exploited a PostgreSQL security flaw as a zero-day to breach the network ...

Another thing worth noting is that this is a prompt injection attack ... a legitimate open source command-and-control (C2) framework developed by BishopFox for red teaming and penetration testing ...