Cyberbytes Daily

Low-code/no-code (LCNC) and robotic process automation (RPA) technologies allow companies to speed up development processes and reduce costs, but security is often overlooked. When this happens, the risks can outweigh the benefits.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding three critical vulnerabilities that are currently being exploited in the wild. These vulnerabilities affect Mitel MiCollab and Oracle WebLogic Server systems, posing significant risks to organizations and federal agencies. Mitel MiCollab Vulnerabilities Two of the vulnerabilities impact Mitel MiCollab, a widely used The post CISA Warns of Three Vulnerabilities Actively Exploited in Attacks appeared first on Cyber Security News.

A critical security vulnerability has been identified in Dell’s Update Package (DUP) Framework, potentially exposing systems to privilege escalation and denial-of-service attacks. The vulnerability tracked as CVE-2025-22395, affects DUP Framework versions before 22.01.02 and has been assigned a CVSS score of 8.2, categorizing it as “high severity.” Details of the Vulnerability The flaw allows a The post Dell Update Package Framework Vulnerability Let Attackers Escalate Privileges appeared first on Cyber Security News.

Hackers have claimed to have breached Gravy Analytics, a prominent location intelligence company, and its subsidiary Venntel. The attackers allege they have exfiltrated 17 terabytes of data, including sensitive customer information, industry insights, and smartphone location data that could reveal individuals’ precise movements. This breach has sparked alarm over the potential misuse of such data The post Gravy Analytics Hacked – Attackers Allegedly Claiming 17TB Data Stolen appeared first on Cyber Security News.

Cybersecurity researchers have shed light on a new remote access trojan called NonEuclid that allows bad actors to remotely control compromised Windows systems. “The NonEuclid remote access trojan (RAT), developed in C#, is a highly sophisticated malware offering unauthorised remote access with advanced evasion techniques,” Cyfirma said in a technical analysis published last week. “It employs