Cyber Security News

An organization’s cyber security operation center (SOC) is a unit in charge of cyber threat prevention and mitigation.  Within this framework, several critical tasks imply gathering and analyzing data on threats, incidents and attacks. This process is usually referred to as threat intelligence. It is not limited to mere collection of information. It aims to […]

The post 3 SOC Challenges Solved by Threat Intelligence appeared first on Cyber Security News.

A new, highly sophisticated malware known as Tiny FUD has been identified, targeting macOS users with advanced evasion techniques that allow it to bypass traditional antivirus and security tools. This malware leverages process name spoofing, DYLD injection, and C2-based command execution to remain undetected. While this malware is particularly dangerous due to its ability to […]

The post New Tiny FUD Attacking macOS Users Bypassing Antivirus and Security Tools appeared first on Cyber Security News.

Hackers have increasingly been using HTTP client tools to orchestrate sophisticated account takeover attacks on Microsoft 365 environments. A staggering 78% of Microsoft 365 tenants have been targeted at least once by such attacks, highlighting the evolving tactics of threat actors. HTTP client tools are software applications or libraries that enable users to send HTTP […]

The post Hackers Using HTTP Client Tools To Takeover Microsoft 365 Accounts appeared first on Cyber Security News.

A critical security flaw, identified as CVE-2025-21298, has been disclosed in Microsoft’s Windows Object Linking and Embedding (OLE) technology.  This zero-click vulnerability, which carries a CVSS score of 9.8, allows attackers to execute arbitrary code remotely by exploiting Microsoft Outlook and other applications.  The flaw has raised alarms across the cybersecurity community due to its […]

The post Critical Windows OLE Zero-Click Vulnerability Let Attacker to Execute Arbitrary Code appeared first on Cyber Security News.

SpyCloud’s Identity Threat Protection solutions spearhead a holistic identity approach to security, illuminating correlated hidden identity exposures and facilitating fast, automated remediation. SpyCloud, a leading identity threat protection company, announced key innovations in its portfolio, pioneering the shift to holistic identity threat protection. By operationalizing its vast collection of darknet data with automated identity analytics […]

The post SpyCloud Pioneers the Shift to Holistic Identity Threat Protection appeared first on Cyber Security News.

Researchers from the Anthropic Safeguards Research Team have developed a new approach to protect AI models from universal jailbreaks. This innovative method, known as Constitutional Classifiers, has shown remarkable resilience against thousands of hours of human red teaming and synthetic evaluations. Universal jailbreaks refer to inputs designed to bypass the safety guardrails of AI models, […]

The post Researchers Uncovers New Methods To Defend AI Models Against Universal Jailbreaks appeared first on Cyber Security News.

A critical security flaw in Apple’s service ticket portal has come to light, potentially exposing the sensitive data of millions of users.  The vulnerability, rooted in a combination of Insecure Direct Object Reference (IDOR) and privilege escalation, allowed unauthorized access to user information, including Mac serial numbers, IMEI numbers, and service ticket details. When Virtuvil, […]

The post Apple Service Ticket Portal Vulnerability Exposes Millions of Users Data appeared first on Cyber Security News.

The popular food delivery platform Grubhub has disclosed a significant data breach involving unauthorized access to customer, merchant, and driver information.  The breach, which was caused by a compromised third-party contractor account, raised concerns about data security and third-party risk management practices. Grubhub detected “unusual activity” within its systems, which was traced to an account […]

The post GrubHub Data Breach – Customers Phone Numbers Exposed  appeared first on Cyber Security News.

A new security vulnerability, identified as CVE-2025-24860, has been disclosed in Apache Cassandra, a widely used distributed database system. The flaw involves an authorization bypass that could allow users to gain unauthorized access to data centers or network regions when using specific authorizer configurations. Additionally, users with restricted access can escalate their permissions via DCL […]

The post Apache Cassandra Vulnerability Let Attackers Gain Access to the Data Centers Remotely appeared first on Cyber Security News.

Researchers from the Positive Technologies Expert Security Center (PT ESC) have identified and prevented a malicious campaign targeting users of the Python Package Index (PyPI). The attack involved two fake packages named deepseeek and deepseekai, which were designed to steal sensitive user and system data. These packages were masquerading as legitimate clients for the DeepSeek […]

The post Beware of Fake DeepSeek PyPI Packages That Delivers Malware appeared first on Cyber Security News.

A new variant of malware, known as FlexibleFerret, has been identified targeting macOS users while evading detection by Apple’s XProtect tool. This malware is part of a broader campaign attributed to North Korean threat actors, who have been using sophisticated tactics to lure victims into installing malicious software. The Ferret family of malware, including variants […]

The post FlexibleFerret Malware Attacking macOS Users, Evading XProtect Detections appeared first on Cyber Security News.

Hackers have exploited a zero-day vulnerability in the popular file archiver 7-Zip to deploy SmokeLoader malware.  The vulnerability, tracked as CVE-2025-0411, was identified in September 2024 and has since been actively used in cyberattacks targeting Ukrainian entities.  CVE-2025-0411 is a high-severity vulnerability (CVSS score: 7.0) that allows attackers to bypass Windows’ Mark-of-the-Web (MoTW) security mechanism.  […]

The post Hackers Exploiting 7-Zip Zero-Day Vulnerability to Deploy SmokeLoader Malware  appeared first on Cyber Security News.

A new cyberattack technique has emerged, enabling attackers to bypass Endpoint Detection and Response (EDR) systems while operating under a low-privileged standard user account.  Traditionally, EDR evasion requires elevated privileges, such as administrative or system-level access.  However, this innovative approach leverages masquerading and path obfuscation to disguise malicious payloads as legitimate processes, deceiving both automated […]

The post New Attack Technique to Bypassing EDR as Low Privileged Standard User appeared first on Cyber Security News.

U.S. prosecutors have charged Andean Medjedovic, a 22-year-old Canadian, with five counts of criminal indictment for allegedly orchestrating a sophisticated cryptocurrency theft.  Medjedovic is accused of exploiting vulnerabilities in the KyberSwap and Indexed Finance DeFi protocols, resulting in significant financial losses. The alleged schemes carried out between 2021 and 2023, resulted in the theft of […]

The post Canadian National Charged for Stealing $65 Million in Crypto  appeared first on Cyber Security News.

A critical Cross-Site Scripting (XSS) vulnerability, tracked as CVE-2024-57004, has been discovered in Roundcube Webmail version 1.6.9.  This flaw allows remote authenticated users to upload malicious files disguised as email attachments, posing significant risks to individuals and organizations using the popular open-source webmail client. The vulnerability stems from insufficient sanitization of user input during the […]

The post Roundcube XSS Vulnerability Let Attackers Inject Malicious Files appeared first on Cyber Security News.

Microsoft has disclosed a critical vulnerability, CVE-2025-21415, impacting the Azure AI Face Service, which is classified as an Elevation of Privilege issue, allowing attackers to bypass authentication mechanisms via spoofing, escalating their privileges over a network. However, Microsoft has confirmed that the vulnerability has been fully mitigated and requires no customer action. This disclosure underscores […]

The post Microsoft Azure AI Face Service Elevation of Privilege Vulnerability Let Attackers Gain Network Access appeared first on Cyber Security News.

Dell Technologies has disclosed multiple critical vulnerabilities affecting its PowerProtect product line, including Data Domain (DD) appliances, PowerProtect Management Center, and other associated systems.  These vulnerabilities, if exploited, could allow attackers to compromise system integrity, escalate privileges, or execute arbitrary code.  Organizations relying on these systems for data protection and recovery are urged to take […]

The post Multiple Dell PowerProtect Vulnerabilities Let Attackers Compromise System  appeared first on Cyber Security News.

Microsoft has issued a security advisory for CVE-2025-21396, a critical authentication bypass vulnerability that could allow attackers to spoof credentials and gain unauthorized access to Microsoft accounts. Cybersecurity experts are urging users and organizations to swiftly address this issue by applying relevant updates and following Microsoft’s guidance. The vulnerability is linked to CWE-290, Authentication Bypass […]

The post Critical Microsoft Accounts Authentication Bypass Vulnerability Let Attackers Gain Remote Access appeared first on Cyber Security News.

Researchers unveiled a sophisticated malware campaign in a recent cybersecurity alert involving ValleyRAT, a Remote Access Trojan (RAT) frequently linked to the Silver Fox APT group. This threat has evolved with new delivery techniques, targeting key roles within organizations, particularly in finance and accounting departments. The attackers exploit vulnerabilities in legitimate software and use advanced […]

The post ValleyRAT Attacking Org’s Accounting Department With New Delivery Techniques appeared first on Cyber Security News.

A recent cybersecurity threat has emerged in the form of AsyncRAT, a remote access trojan (RAT) that leverages Python and TryCloudflare for stealthy malware delivery. This sophisticated campaign involves a complex sequence of events, starting with phishing emails that deceive users into downloading malicious payloads. Here the attack chain exploits legitimate infrastructure which makes the […]

The post AsyncRAT Abusing Python and TryCloudflare For Stealthy Malware Delivery appeared first on Cyber Security News.