7579 matches found
North Korean Hackers Deploy EtherRAT Malware in React2Shell Exploits
Sysdig discovered North Korea-linked EtherRAT, a stealthy new backdoor using Ethereum smart contracts for C2 after exploiting the critical React2Shell vulnerability CVE-2025-55182...
PromptPwnd Vulnerability Exposes AI driven build systems to Data Theft
Aikido Security exposes a new AI prompt injection flaw in GitHub/GitLab pipelines, letting attackers steal secrets. Major companies affected...
Everest Ransomware Says It Stole Data of Millions of Under Armour Users
Everest ransomware claims to have breached Under Armour, stealing 343GB of data, including customer info, product records, and internal company files...
YouTube ‘Ghost Network’ Spreads Infostealer via 3,000 Fake Videos
Check Point Research exposed a sophisticated, role-based operation called the YouTube Ghost Network, distributing dangerous Lumma and Rhadamanthys Infostealer malware. Learn how cybercriminals use hijacked channels and bots to triple malicious video output and steal user credentials...
GlassWorm Malware Targets Developers Through OpenVSX Marketplace
GlassWorm, a self-propagating malware, infects VS Code extensions through the OpenVSX marketplace, stealing credentials and using blockchain for control...
Salt Typhoon APT Targets Global Telecom and Energy Sectors, Says Darktrace
The China-linked Salt Typhoon APT group attacked a European telecom via a Citrix NetScaler vulnerability in July 2025, Darktrace reports. This follows past US Army and telecom breaches...
Elasticsearch Leak Exposes 6 Billion Records from Scraping, Old and New Breaches
An Elasticsearch leak exposed 6 billion records from global data breaches and scraping sources, including banking and personal details tied to multiple regions...
Fake Teams Installers Dropping Oyster Backdoor (aka Broomstick)
Hackers are using fake Microsoft Teams installers found in search results and ads to deploy the Oyster backdoor. Learn how to protect your PC from this remote-access threat...
Fake AnyDesk Installer Spreads MetaStealer Through ClickFix Scam
A new and clever ClickFix scam is using a fake AnyDesk installer and Windows search to bypass security,…...
Flowable Named in the latest Gartner® Market Guide for BPA Tools
ZURICH, Switzerland - Zurich-based automation platform Flowable has been recognized as a Representative Vendor in the Gartner newly released…...
AgentSmith Flaw in LangSmith’s Prompt Hub Exposed User API Keys, Data
A CVSS 8.8 AgentSmith flaw in LangSmith's Prompt Hub exposed AI agents to data theft and LLM manipulation. Learn how malicious AI agents could steal API keys and hijack LLM responses. Fix deployed...
New PathWiper Malware Strikes Ukraine’s Critical Infrastructure
Cisco Talos discovers PathWiper, a destructive new malware targeting critical infrastructure in Ukraine, highlighting ongoing cyber threats amidst the Russia-Ukraine conflict...
ChatGPT o3 Resists Shutdown Despite Instructions, Study Claims
ChatGPT o3 resists shutdown despite explicit instructions, raising fresh concerns over AI safety, alignment, and reinforcement learning behaviors...
UK Legal Aid Agency Hit by Cyberattack, Sensitive Data Stolen
The UK Legal Aid Agency has suffered a major cyberattack, with “significant” sensitive data, including criminal records, stolen.…...
ClickFunnels Investigates Breach After Hackers Leak Business Data
ClickFunnels is investigating a data breach after hackers leaked detailed business data, including emails, phone numbers, and company…...
ClickFix Scam: How to Protect Your Business Against This Evolving Threat
Cybercriminals aren’t always loud and obvious. Sometimes, they play it quiet and smart. One of the tricks of…...
Google Introduces Agentic AI to Combat Cybersecurity Threats
Google enhances cybersecurity with Agentic AI, launching Unified Security to fight zero-day exploits, enterprise threats, and credential-based attacks.…...
SSL.com Vulnerability Allowed Fraudulent SSL Certificates for Major Domains
An SSL.com vulnerability allowed attackers to issue valid SSL certificates for major domains by exploiting a bug in…...
CISA Urges Action on Potential Oracle Cloud Credential Compromise
Following reports of unauthorized access to a legacy Oracle cloud environment, CISA warns of potential credential compromise leading…...
Pre-Installed Malware on Cheap Android Phones Steals Crypto via Fake WhatsApp
Cheap Android phones with preinstalled malware use fake apps like WhatsApp to hijack crypto transactions and steal wallet recovery phrases...
Best Data Anonymization Tools in 2025
Top Data Anonymization Tools of 2025 to protect sensitive information, ensure compliance, and maintain performance across industries...
Hackers Exploit Cloud Misconfigurations to Spread Malware
Veriti Research reveals 40% of networks allow 'any/any' cloud access, exposing critical vulnerabilities. Learn how malware like XWorm…...
JavaGhost Uses Amazon IAM Permissions to Phish Organizations
Unit 42 uncovers JavaGhost's evolving AWS attacks. Learn how this threat actor uses phishing, IAM abuse, and advanced…...
Hackers Exploit Fake GitHub Repositories to Spread GitVenom Malware
Kaspersky's Securelist exposes the GitVenom campaign involving fake GitHub repositories to distribute malware. Targeting developers with seemingly legitimate…...
7,000 Exposed Ollama APIs Leave DeepSeek AI Models Wide Open to Attack
UpGuard discovers exposed Ollama APIs revealing DeepSeek model adoption globally. See where these AI models are running and the security risks involved...
Chinese PlushDaemon APT Targets S. Korean IPany VPN with Backdoor
Cybersecurity firm ESET uncovers PlushDaemon, a previously unknown APT group targeting South Korea, deploying a SlowStepper backdoor. This…...
Fintech Bill Pay Platform “Willow Pays” Exposes Over 240,000 Records
Security researcher discovers a non-password-protected database containing over 240,000 records belonging to US-based FinTech bill payment platform Willow…...
The Fintech Wild West: Why Preventive Cybersecurity Is Essential for Survival
Fintech thrives on innovation, but cybersecurity requires a proactive approach. AI, predictive intelligence, and tailored strategies safeguard against…...
The Need for Specialized AI Models in Today’s Transforming Industry Challenges
Specialized AI models provide precise, domain-specific solutions for robotics, biotech, and materials science challenges...
Hackers Leak Partial Cisco Data from 4.5TB of Exposed Records
Yet another day, yet another data leak tied to Cisco!...
GLASSBRIDGE: Google Blocks Thousands of Pro-China Fake News Sites
Google reveals GLASSBRIDGE: A network of thousands of fake news sites pushing pro-China narratives globally. These sites, run by PR firms, spread disinformation and lack transparency...
Hackers Exploit Misconfigured Jupyter Servers for Illegal Sports Streaming
Aqua Nautilus’ research reveals hackers are leveraging vulnerable and misconfigured Jupyter Notebook servers to steal live sports streams.…...
How Bitcoin’s digital signature feature facilitates Web3 adoption
Bitcoin is a pioneer in technological advancement and decentralization. As its creator states in the white paper, peer-to-peer…...
Lazarus Group Exploits Chrome 0-Day for Crypto with Fake NFT Game
North Korean hackers from Lazarus Group exploited a zero-day vulnerability in Google Chrome to target cryptocurrency investors with…...
Intel Broker Claims Cisco Breach, Selling Stolen Data from Major Firms
Intel Broker claims a major data breach at Cisco, allegedly stealing source codes, confidential documents, and credentials from…...
Teraleak: Pokémon Developer Game Freak Hacked; Decades of Data Leaked
Game Freak's "Teraleak" appears to expose nearly 1 terabyte of sensitive Pokémon data, including source code, cancelled games,…...
New Crypto Trojan.AutoIt.1443 Hits 28,000 Users via Game Cheats, Office Tool
Trojan.AutoIt.1443 targets 28,000 users, spreading via game cheats and office tools. This cryptomining and cryptostealing malware bypasses antivirus…...
Badge and CyberArk Announce Partnership to Redefine Privacy in PAM and Secrets Management
San Francisco, CA, 8th October 2024, CyberNewsWire...
Storm-1575 Threat Actor Deploys New Login Panels for Phishing Infrastructure
The Storm-1575 group is known for frequently rebranding its phishing infrastructure. Recently, ANY.RUN analysts identified the deployment of…...
Old Vulnerability Rated 9.9 Impacts All GNU/Linux Systems, Researcher Claims
A researcher claims to have found a decade-old vulnerability rated 9.9 that affects all GNU/Linux systems, allowing attackers…...
Top LMS Training Tips for Effective Learning
LMS training is vital for modern education and corporate learning, enabling efficient course delivery and progress tracking. To…...
Dark Web Sales Fuel 32% Increase in Global Healthcare Cyberattacks
Healthcare organizations face a 32% surge in cyberattacks, with sensitive patient data being sold on the Dark Web.…...
FBI Dismantles Chinese-Linked Botnet of 260,000 IoT Devices
The FBI, in collaboration with U.S. government agencies, dismantled a Chinese state-backed botnet known as Flax Typhoon, comprising…...
Chinese DragonRank Hackers Exploit Global Windows Servers in SEO Fraud
DragonRank, a Chinese-speaking hacking group, has compromised 30+ Windows servers globally. They exploit IIS vulnerabilities to manipulate SEO…...
Telegram Founder Pavel Durov Reportedly Arrested in France
Reports indicate Telegram founder Pavel Durov has been arrested in France. Allegations include inadequate moderation and aiding criminal…...
Cyber A.I. Group Announces Substantial Expansion of Acquisition Pipeline
Pipeline Will Support Company’s Highly Proactive Buy & Build Business Model...
Mirai-like Botnet Targets Zyxel NAS Devices in Europe for DDoS Attacks
Beware, Zyxel customers, and keep your devices up to date...
Cyber A.I. Group Announces the Engagement of Walter L. Hughes as Chief Executive Officer
Miami, United States, 20th June 2024, CyberNewsWire...