exploit

Security

Hacker Claims Exploit Used on Streamers in Apex Legends Has Been Resolved by Game Developers

Last month, a hacker wreaked havoc during an esports tournament of the popular shooter game Apex Legends, hacking two well-known streamers mid-game to make it look like they were using cheats. “The exploit I’ve used in [Apex Legends Global Series] is fully patched,” the hacker who goes by Destroyer2009 said in an online chat. Or other video game hacking incidents? Or other video game hacking incidents? Destroyer2009’s hacks were high-profile, disruptive, and caused a big stir in the Apex Legends community.

Max Chen
April 18, 2024

Fintech, Gadgets

“False Alarm or Real Threat? iMessage Bug Concerns Crypto Wallet Developer”

A crypto wallet maker claimed this week that hackers may be targeting people with an iMessage “zero-day” exploit — but all signs point to an exaggerated threat, if not a downright scam. Trust Wallet’s official X (previously Twitter) account wrote that “we have credible intel regarding a high-risk zero-day exploit targeting iMessage on the Dark Web. According to Apple, there is no evidence anyone has successfully hacked someone’s Apple device while using Lockdown Mode. For its part, CodeBreach Lab appears to be a new website with no track record. TechCrunch could not reach CodeBreach Lab for comment because there is no way to contact the alleged company.

Ava Patel
April 16, 2024

Apps

** Warning: High-Risk Exploit of ConnectWise Vulnerability Poses Harm, Researchers Claim

Researchers warn high-risk ConnectWise flaw under attack is ’embarrassingly easy’ to exploit “I can’t sugarcoat it — this shit is bad," said Huntress' CEOSecurity experts are warning that a high-risk vulnerability in a widely used remote access tool is “trivial and embarrassingly easy” to exploit, as the software’s developer confirms malicious hackers are actively exploiting the flaw. The maximum severity-rated vulnerability affects ConnectWise ScreenConnect (formerly ConnectWise Control), a popular remote access software that allows managed IT providers and technicians to provide real-time remote technical support on customer systems. Cybersecurity company Huntress on Wednesday published an analysis of the actively exploited ConnectWise vulnerability. ConnectWise also released a fix for a separate vulnerability affecting its remote desktop software. The U.S. agencies also observed hackers abusing remote access software from AnyDesk, which was earlier this month forced to reset passwords and revoke certificates after finding evidence of compromised production systems.