VulnHub

Hackers have started using a new technique called the browser-in-the-browser (BitB) method to steal Facebook login credentials. This method creates a fake Facebook login window that appears to be part of the user's browser, tricking them into entering their username and password. Over the past six months, this tactic has gained traction among cybercriminals, making it easier for them to capture sensitive information. Users are at risk, especially if they are not aware of this deception. It's crucial for Facebook users to be vigilant and ensure they are logging in through the official website or app to avoid falling victim to these scams.

The article discusses a vulnerability in Opto 22's groov View that allows for the exposure of sensitive information through metadata, potentially leading to credential and key exposure as well as privilege escalation. This vulnerability, assigned CVE-2025-13084, has a CVSS v4 score of 6.1 and affects multiple versions of groov View, necessitating immediate remediation to mitigate risks.

The Opto 22 GRV-EPIC and groov RIO products are vulnerable to an OS Command Injection flaw that could allow remote attackers to execute arbitrary shell commands with root privileges. This vulnerability, identified as CVE-2025-13087, has a CVSS v4 score of 7.5, indicating a significant risk to affected systems.