New Manic Android malware can exfiltrate data through nearby devices
Teaser from the source
A new Android malware named Manic targeting users in multiple European countries has a fallback data exfiltration mechanism that uses nearby infected devices. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on exfiltrate
Other advisories
- CriticalCVE-2026-89292In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to exfiltrate the MNESTIX_BACKEND_API_…
- Not ratedosv:CVE-2026-105941Kroxylicious-kms-provider-azure-key-vault-kms: streams for apache kafka kroxylicious: azure key vault ssrf exfiltrates bearer token via untrusted edek vaultname
- MediumCVE-2026-43849A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.
- LowCVE-2026-110805Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier allows an authenticated low-privileged user to exfiltrate…
- MediumCVE-2026-63270URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote serve…
- HighCVE-2026-102424Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms < 2.4.3.4 - Balbooa F…
- MediumCVE-2026-63278URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote serve…
- MediumCVE-2026-86497In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication allowed a project administrator to exfiltrate stored mailbox cred…
Other news entries
- Hackers exploit trusted AWS access to breach multiple cloud environmentsNewsBleepingComputer
- Researchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats Without User InteractionNewsThe Hacker News
- ChatGPT Lockdown Mode Bypass: Phishing, Malware Delivery, and Silent Data ExfiltrationNewsCheck Point Research
- Philippine Migrant Worker Data Likely Leaked in 69GB Government BreachNewsDark Reading
- Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by MillionsNewsDark Reading
- Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate CredentialsNewsThe Hacker News
- Recent ZyXEL Switch Vulnerability Exploited by Chinese HackersNewsSecurityWeek
- TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard DataNewsThe Hacker News
ID