Cyberthreat News – New Vulnerabilities and Attacks
Sophisticated cyber actors and nation-states are constantly exploiting vulnerabilities to steal information, take control of systems, and even threaten our ability to deliver vital services. We can’t stop these attacks, but we can identify and mitigate them as quickly as possible. This is why cybersecurity is everyone’s responsibility – individuals and families, small businesses and large corporations, SLTT and federal agencies. By working together to stop attackers, we can make it impossible for them to succeed.
Anthropic sandbox escape vulnerability
A researcher has discovered a macOS vulnerability in Anthropic’s Claude Cowork that could be used by a threat actor to steal files on the victim’s machine and break out of the security virtual machine. The researcher, who shared details with The Hacker News, said about 500,000 macOS users were affected prior to the fix.
View-based espionage
A view-based attack in Zimbra’s email client lets attackers read the last 90 days of email, including passwords saved in browsers and codes for two-factor recovery. The attack targets government and commercial organizations in the West and only requires a victim to open a malicious email. The NSA and CISA warned about the flaw on Thursday along with research from Palo Alto Networks’ Unit 42 and Proofpoint.