The Hacker News reports that Silent Lynx is using crafted WinRAR archives exploiting CVE-2025-8088 to deploy reverse shells in attacks on government organizations across the CIS. The campaign also uses macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell, and malicious shortcut files. Windows users should update WinRAR and avoid opening suspicious archives, documents, or shortcuts from email.
Source: thehackernews.com
…
The Hacker News reports that Google has fixed three Chrome bugs that could let an attacker run code on a Windows computer when a user only loads a web page. Two of the bugs were fixed in Chrome 152.0.7977.65 and 152.0.7977.82; Chrome updates automatically, but the fix only applies after the browser restarts, so Windows users should relaunch Chrome and confirm it is 152.0.7977.82 or later.
Source: thehackernews.com
The Hacker News reports that LG has fixed three webOS vulnerabilities that could let an attacker on the same local network gain root access to certain smart TVs without a PIN or any action from the owner. Owners of affected TVs should check for a firmware update. No workaround is available for those who cannot update yet.
Source: thehackernews.com
SecurityWeek reports that attackers are already exploiting a critical SonicWall flaw in SMA1000 appliances days after it was disclosed. SonicWall says customers should update 6210, 7210, and 8200v models to versions 12.5.0-03082 or 12.4.3-03670. The bug could let a remote attacker direct the appliance to issue requests on their behalf and reach internal functionality.
Source: securityweek.com
