Early versions of the 7-Zip file compression program are affected by a critical security flaw, first discovered in June. The flaw affects versions prior to 24.07 and allows attackers to execute code on victims’ machines. The software does not have automatic updates, thus users are urged to manually install the latest version to prevent potential cyberattacks.
Spies hack Wi-Fi networks in far-off land to launch attack on target next door
GruesomeLarch, an advanced persistent threat group, compromised several account passwords on a web service platform using credential-stuffing attacks. However, two-factor authentication prevented actual account breaches.