873 matches found
Microsoft Xbox Gaming Services < 30.104.13001.0 Elevation of Privilege (September 2025)
The version of Microsoft Xbox Gaming Services on the remote Windows host is prior to 30.104.13001.0. It is, therefore, affected by an elevation of privilege vulnerability: - Improper link resolution before file access 'link following' in Xbox allows an authorized attacker to elevate privileges...
KLA87443 PE vulnerabuility in Microsoft Apps
An elevation of privilege vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-55245 Related products Xbox-Gaming-Services CVE list CVE-2025-55245 critical Solution Install necessary updates from the KB section,...
Malicious code in @flutteruki-gaming/gfe-prismic (npm)
The package @flutteruki-gaming/gfe-prismic was found to contain malicious code...
MAL-2025-42509 Malicious code in @flutteruki-gaming/gfe-prismic (npm)
The package @flutteruki-gaming/gfe-prismic was found to contain malicious code...
KLA87340 OSI vulnerability in Microsoft Apps
OSI vulnerability was found in Microsoft Xbox Gaming Services. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2025-55242 Related products Xbox-Gaming-Services CVE list CVE-2025-55242 critical Solution Install necessary updates from the KB...
Malicious code in joker123-gaming (npm)
The package joker123-gaming was found to contain malicious code...
MAL-2025-7935 Malicious code in @flutter-global/uki-gaming-commits (npm)
The package @flutter-global/uki-gaming-commits was found to contain malicious code...
Malicious code in @flutter-global/uki-gaming-commits (npm)
The package @flutter-global/uki-gaming-commits was found to contain malicious code...
MAL-2025-23841 Malicious code in joker123-gaming (npm)
The package joker123-gaming was found to contain malicious code...
AccuKnox partners with SecuVerse.ai to deliver Zero Trust CNAPP Security for National Gaming Infrastructure
Menlo Park, California, USA, 7th August 2025, CyberNewsWire...
Scammers Unleash Flood of Slick Online Gaming Sites
Fraudsters are flooding Discord and other social media platforms with ads for hundreds of polished online gaming and wagering websites that lure people with free credits and eventually abscond with any cryptocurrency funds deposited by players. Here's a closer look at the social engineering tacti...
NETGEAR XR300 Stack Buffer Overflow Vulnerability (CNVD-2025-20497)
The NETGEAR XR300 is the entry-level Nighthawk Pro Gaming series wireless router from NETGEAR. The NETGEAR XR300 suffers from a stack buffer overflow vulnerability that stems from a stack buffer overflow in the HTTPD service when processing a POST request from the usbdevice.cgi endpoint, no detai...
A week in security (July 7 – July 13)
Last week on Malwarebytes Labs: Deepfake criminals impersonate Marco Rubio to uncover government secrets McDonald’s AI bot spills data on job applicants Millions of people spied on by malicious browser extensions in Chrome and Edge No thanks: Google lets its Gemini AI access your apps, including...
Gamers hacked playing Call of Duty: WWII—PC version temporarily taken offline
On Saturday, the Call of Duty team announced that the PC version of Call of Duty: WWII has been taken offline following "reports of an issue." That issue seems to be a serious security problem, after reports surfaced about a remote code execution RCE vulnerability in the game. After Microsoft’s...
ASUS Armoury Crate 安全漏洞
ASUS Armoury Crate is a utility software developed by ASUS to centrally control and manage ROG Gamerland and some ASUS gaming products. ASUS Armoury Crate suffers from a Competitive Condition Vulnerability, which stems from a check-use timing issue that can be exploited by an attacker to cause...
Rust-based Myth Stealer Malware Spread via Fake Gaming Sites Targets Chrome, Firefox Users
Cybersecurity researchers have shed light on a previously undocumented Rust-based information stealer called Myth Stealer that's being propagated via fraudulent gaming websites. "Upon execution, the malware displays a fake window to appear legitimate while simultaneously decrypting and executing...
What Really Happened in the Aftermath of the Lizard Squad Hacks
On Christmas Day in 2014 hackers knocked out the Xbox and PlayStation gaming networks, impacting how video game companies handled cybersecurity for years...
Demystifying Myth Stealer: A Rust Based InfoStealer
Demystifying Myth Stealer: A Rust Based InfoStealer By Niranjan Hegde, Vasantha Lakshmanan Ambasankar and Adarsh S · June 5, 2025 Introduction During regular proactive threat hunting, the Trellix Advanced Research Center identified a fully undetected infostealer malware sample written in Rust. Up...
Hackers Use Fake VPN and Browser NSIS Installers to Deliver Winos 4.0 Malware
Cybersecurity researchers have disclosed a malware campaign that uses fake software installers masquerading as popular tools like LetsVPN and QQ Browser to deliver the Winos 4.0 framework. The campaign, first detected by Rapid7 in February 2025, involves the use of a multi-stage, memory-resident...
CVE-2023-42433
Incorrect default permissions in some Endurance Gaming Mode software installers before version 1.3.937.0 may allow an authenticated user to potentially enable escalation of privilege via local access...