Tag: zero click
5 articles
Salesforce Zero-Click Flaws Expose AI Agent Data Risk
Security researchers just uncovered a set of zero-click flaws in Salesforce Agentforce that let attackers silently siphon off sensitive CRM data without even needing to log in. This clever exploit, dubbed "SalesBleed," could put AI agent data at risk - and it's a wake-up call for companies to take action.
Researchers Build WeChat Worm Hijacking Phones via Zero-Click Calls
Meet WeWorm, a powerful tool that can hijack WeChat accounts and take control of phones with just a single, zero-click call - and experts warn that AI has made building such threats faster and more accessible than ever. This alarming innovation can give attackers full control to read and send messages, make calls, and act on a victim's behalf.
WeChat Zero-Click Flaw Exploited to Hijack Accounts via Incoming Calls
A security firm, Calif, has successfully demonstrated a zero-click worm that can hijack WeChat accounts on both iPhone and Android devices with just an incoming call, and fortunately, the exploit has been blocked for all users. This alarming vulnerability was responsibly disclosed to Tencent in July, putting an end to the threat.
Pegasus Spyware Targets Serbian Student Activist via iMessage Exploit
A shocking spyware attack has been uncovered, where a Serbian student activist was secretly infected with Pegasus spyware through a clever iMessage exploit that required zero clicks from the target. This sinister attack allowed the spyware to be delivered undetected, putting the activist's personal data and safety at risk.
Avada WordPress Theme Flaw Enables Zero-Click Remote Code Execution
A critical vulnerability in the Avada WordPress theme, scored 9.8 out of 10, can be exploited through a zero-click remote code execution attack, allowing hackers to run malicious PHP code on affected sites without needing login credentials. This flaw enables attackers to take full control of a site, planting malware, stealing data, or creating rogue admin accounts.