Tag

Remote Access

All articles tagged with #remote access

technology14 days ago•3 min saved

Monero miner spotted via macOS Screen Sharing authentication flaw

The Netherlands’ NCSC warns attackers are exploiting a macOS Screen Sharing authentication bypass (CVE-2026-65400) to gain root access, with exploits observed on systems exposing port 5900 to the Internet. Once in, attackers can run apps, access files, and deploy a Monero cryptocurrency miner. Apple patched the vulnerability in macOS Tahoe 26.6.1 and newer releases (also Sequoia 15.7.9 and Sonoma 14.8.9). Users should update to the patched releases or disable Screen Sharing if not needed, as details on scope and impact remain limited.

via bleepingcomputer.com|

#cryptomining #cve-2026-65400 #macos

technology17 days ago•2 min saved

AI-assisted Zoom screen-sharing bug allows remote device takeover, patched

Cybersecurity researchers found a flaw in Zoom's Workspace screen-sharing that could let attackers remotely execute code and take control of a victim's device without any action from the user; the issue affects Windows, macOS, iOS, Android, and Linux and was AI-assisted to develop the exploit in under a day. Zoom has issued fixes across affected versions, and users should update to the latest build to mitigate the risk. The story also notes a separate macOS Screen Sharing vulnerability prompting additional updates.

via Engadget|

#cybersecurity #remote-access #technology

technology18 days ago•5 min saved

AI-Enabled Bug Lets Zoom Callers Hijack Devices, Now Patched

Researchers used publicly available AI tools to uncover a vulnerability in Zoom's real-time screen-sharing annotation protocol that could allow any caller on a Zoom call to silently hijack another participant's device. Zoom deployed server and client fixes across all supported platforms (Windows, macOS, Linux, iOS, Android). The finding highlights how AI-assisted bug hunting can dramatically lower the barrier to discovering dangerous exploits.

via WIRED|

#remote-access #screen-sharing #security

technology-security1 month ago•4 min saved

RedHook variant weaponizes Wireless ADB to gain shell control on Android

A new RedHook Android malware variant abuses Wireless ADB to obtain shell-level privileges without a PC by tricking victims into granting Accessibility permissions and using Shizuku to run privileged commands. It effectively turns the phone into its own ADB client (via 127.0.0.1), enabling 53 commands including screen streaming, input simulation, app install/uninstall, data theft, overlays, and even camera access, all without device rooting. The malware uses multiple persistence methods (silent audio, WakeLocks, dual services, watchdog, boot autostart, and oom_score_adj) and is distributed via social engineering that impersonates government or financial institutions to push fake Google Play sites. Users are advised to only install from Google Play, scrutinize permissions, and keep Play Protect enabled.

via BleepingComputer|

#android-malware #redhook #remote-access

technology3 months ago•2 min saved

Codex Gains Locked-Screen Mac Access with Safeguards

OpenAI's Codex can now run on a Mac while the screen is locked via a new Locked use feature and an Apple authorization plug-in. Codex can be controlled from a phone to operate Mac apps even when the display is off, but it isn’t a general unlock path; safeguards include a short‑lived authorization window, Codex-only access, and coverage across all connected displays, plus it won’t work if the MacBook lid is closed.

via Macworld|

#codex #locked-use #mac

technology3 months ago•11 min saved

Hacked from Across the Globe: Yarbo Robotic Mowers Reveal Widespread Security Flaws

A security researcher demonstrates that Yarbo’s all-in-one robot lawn mowers can be hijacked remotely due to universal hardcoded root passwords and a built-in backdoor, giving access to owners’ GPS data, Wi‑Fi credentials, and camera/video feeds across thousands of devices worldwide. The demo shows remote control over mowers, potential spying on homes, and even the risk of turning devices into botnets. Yarbo says it’s working on fixes, stronger access controls, and a possible bug‑bounty program, while acknowledging security concerns and ongoing investigations.

via The Verge|

#cybersecurity #remote-access #robot-mower

cybersecurity3 years ago•1 min saved

Beware of GhostTouch: The New Remote Smartphone Hacking Method

Cybercriminals are using a new technique called GhostTouch to remotely hack certain smartphones by using electromagnetic signals to simulate primary touch events like taps and swipes on targeted locations of the touchscreen. The hackers aim to take remote control of the smartphone to manipulate it in potentially dangerous ways, such as accessing the device’s data and passwords, accessing unsafe services or installing malware. The attack works from a distance of up to 40 mm, and the hardware could be placed under the table and used to access the smartphone. The best way to protect your information against GhostTouch is to make sure your smartphone has a security mechanism, either a PIN code, a swipe pattern or biometrics.

via New York Post |

#cybercriminals #cybersecurity #ghosttouch

cybersecurity3 years ago•3 min saved

Azure Serial Console Exploited by Hackers for VM Access and SIM Swapping Attacks

A financially motivated cybergang known as UNC3944 is using phishing and SIM swapping attacks to hijack Microsoft Azure admin accounts and gain access to virtual machines. They abuse the Azure Serial Console to install remote management software for persistence and use Azure Extensions for stealthy surveillance. UNC3944 aims to steal data from victim organizations using Microsoft's cloud computing service. The attack demonstrates the group's deep understanding of the Azure environment and how they can leverage built-in tools to evade detection.

via BleepingComputer|

#azure #cybersecurity #remote-access

cybersecurity3 years ago•2 min saved

Smart Garage Door Opener Vulnerability Allows Remote Hacking

Security researcher Sam Sabetan has discovered a major security hole in the mobile app for Nexx's smart garage door controller, which allows hackers to remotely open connected doors. The vulnerability is due to a shared universal password that applies across all devices and leaks via Nexx's API and firmware. Sabetan also uncovered four other related vulnerabilities that can involve hijacking Nexx's smart plugs and smart alarm products. Despite attempts to contact the company, Nexx has been silent on fixing the issue. Sabetan estimates that over 40,000 devices are impacted and recommends disconnecting the devices and contacting Nexx for remediation steps.

via PCMag|

#cybersecurity #iot-devices #nexx