Cyber Security News

Security researchers have uncovered a sophisticated malware campaign where threat actors are coercing popular YouTubers to distribute SilentCryptoMiner malware disguised as restriction bypass tools. This campaign has already affected more than 2,000 victims in Russia, with the actual number potentially much higher. The malware leverages Windows Packet Divert drivers, a technology increasingly used in utilities […]

The post Threat Actors Leverage YouTubers to Attack Windows Systems Via SilentCryptoMiner appeared first on Cyber Security News.

Physical penetration testing provides crucial insights into real-world security vulnerabilities that might be overlooked in purely digital assessments. A recent case study conducted by Hackmosphere for a furniture retailer, referred to as ExCorp, revealed how physical access to facilities could compromise internal networks despite robust cybersecurity measures. The penetration test identified four critical vulnerabilities that […]

The post Getting Access to Internal Networks Via Physical Pentest – Case Study appeared first on Cyber Security News.

Security researchers at Positive Technologies have uncovered a sophisticated malware campaign dubbed “Desert Dexter” that has compromised more than 900 victims worldwide since September 2024. The attack, discovered in February 2025, primarily targets countries in the Middle East and North Africa, with Egypt, Libya, UAE, Russia, Saudi Arabia, and Turkey being the most affected regions. […]

The post New Malware Attacked ‘Desert Dexter’ Compromised 900+ Victims Worldwide appeared first on Cyber Security News.

Cybersecurity researchers at G DATA have uncovered a sophisticated malware campaign using fake CAPTCHA prompts to deliver LummaStealer, a dangerous information-stealing malware. This emerging threat, first discovered in January 2025, represents a new approach for LummaStealer distribution which previously spread primarily through channels like GitHub or Telegram. The attack specifically targets users of booking websites […]

The post Beware of Fake CAPTCHA Prompts That May Silently Install LummaStealer on Your Device appeared first on Cyber Security News.

Advanced threat actors increasingly leverage x86-64 binaries and Apple’s Rosetta 2 translation technology to bypass execution policies and deploy malware on Apple Silicon devices. The technique exploits architectural differences between Intel and ARM64 processors while leaving behind forensic artifacts that investigators can use to reconstruct attacks. Attackers Leveraging x86-64 Binaries on Apple Silicon Apple’s Rosetta […]

The post Hackers Leveraging x86-64 Binaries on Apple Silicon to Deploy macOS Malware appeared first on Cyber Security News.

The Tails Project announced the release of Tails 6.13 on March 6, 2025, marking a significant update to its privacy-centric Linux distribution.  This iteration introduces improved diagnostics for Wi-Fi hardware compatibility, updates to the Tor Browser and client, and critical fixes for Persistent Storage creation and software installation workflows.  Targeted at users prioritizing anonymity, Tails […]

The post Linux Distro Tails 6.13 Released with Improved Wi-Fi Hardware Detection appeared first on Cyber Security News.

Tax season has become a high-stakes battleground for cybercriminals, who leverage advanced technologies like deepfake audio and AI-generated phishing campaigns to steal over $10,000 from unsuspecting victims.  According to a 2025 McAfee survey, 10% of tax scam losses exceeded $10,000, with Gen Z adults (18–24) reporting the highest exposure to fraudulent attempts.  Meanwhile, the IRS’s […]

The post Beware of Fake Tax Claims that Tricks Users to Steal Over $10,000 From Victims appeared first on Cyber Security News.

A sophisticated cyber espionage campaign dubbed “Operation Sea Elephant” has been discovered targeting scientific research organizations, with a particular focus on ocean-related studies. The operation, attributed to a threat actor group known as CNC with South Asian origins, aims to steal valuable research data to ensure regional dominance in the Indian Ocean. The CNC group […]

The post Operation Sea Elephant Attacking Organizations to Steal Research Details appeared first on Cyber Security News.

A series of critical vulnerabilities in DrayTek Vigor routers widely deployed in small office/home office (SOHO) environments have been uncovered, exposing devices to remote code execution (RCE), denial-of-service (DoS) attacks, and credential theft.  The flaws discovered during firmware reverse-engineering efforts highlight systemic security weaknesses in routers that act as gateways between local networks and the […]

The post Critical Vulnerabilities in DrayTek Routers Exposes Devices to RCE Attack appeared first on Cyber Security News.

Jenkins, the widely adopted open-source automation server central to CI/CD pipelines, has disclosed four critical security vulnerabilities enabling unauthorized secret disclosure, cross-site request forgery (CSRF), and open redirect attacks.  These flaws, patched in versions 2.500 (weekly) and 2.492.2 (LTS), affect earlier releases, including Jenkins 2.499 and LTS 2.492.1. Potential impacts range from credential theft to […]

The post Multiple Jenkins Vulnerability Let Attackers Expose Secrets appeared first on Cyber Security News.

YouTube has issued an urgent alert to content creators regarding a highly sophisticated phishing campaign exploiting AI-generated deepfake technology to hijack accounts.  The attack, first detected in late February 2025, uses fabricated videos of YouTube CEO Neal Mohan to deceive creators into surrendering login credentials or installing malware. The campaign begins with an email sent […]

The post YouTube Warns of Phishing Emails Attacking Creators to Steal Login Credentials appeared first on Cyber Security News.

Microsoft’s Remote Desktop Protocol (RDP) has introduced a lesser-known but critical security feature colloquially referred to as “incognito mode” through its /public command-line parameter.  This functionality, formally called public mode, prevents the client from storing sensitive session artifacts a development with significant implications for cybersecurity, digital forensics, and enterprise IT management. According to Devolutions, public […]

The post Enabling Incognito Mode in RDP to Hide All the Traces appeared first on Cyber Security News.

A newly identified vulnerability in the Cisco Secure Client for Windows could allow attackers to execute arbitrary code with SYSTEM privileges. The vulnerability lies within the interprocess communication (IPC) channel and can be exploited by an authenticated, local attacker to perform a DLL hijacking attack. This vulnerability is present only when the Secure Firewall Posture […]

The post Cisco Secure Client for Windows Let Attackers Execute Arbitrary Code With SYSTEM Privileges appeared first on Cyber Security News.

Network traffic analysis has emerged as one of the most effective methods for detecting and investigating linux based malware infections . By scrutinizing communication patterns, security professionals can uncover signs of malicious activity, including command-and-control (C2) connections, data exfiltration, and Distributed Denial-of-Service (DDoS) attacks. This guide explores how traffic analysis aids in malware detection, the […]

The post As an SOC/DFIR Team Member, How to Analyse Real-Time Linux Malware Network Traffic appeared first on Cyber Security News.

Cybersecurity researchers have uncovered a sophisticated campaign targeting the Albion Online gaming community through impersonation of the Electronic Frontier Foundation (EFF). The operation, discovered in early March 2025, leverages decoy documents designed to appear as official EFF communications while deploying malware in the background. Albion Online, a multiplayer online role-playing game with a player-driven economy, […]

The post Threat Actors Mimic Electronic Frontier Foundation To Attack Gaming Community appeared first on Cyber Security News.

With recent attack disclosures like Browser Syncjacking and extension infostealers, browser extensions have become a primary security concern at many organizations. SquareX’s research team discovers a new class of malicious extensions that can impersonate any extension installed on the victim’s browser, including password managers and crypto wallets. These malicious extensions can morph themselves to have […]

The post SquareX Unveils Polymorphic Extensions that Morph Infostealers into Any Browser Extension – Password Managers, Wallets at Risk appeared first on Cyber Security News.

Securing Active Directory (AD) is a critical priority for organizations. Misconfigurations in AD, such as excessive permissions, outdated protocols, or unprotected service accounts, are common targets for attackers. Traditional methods of manually running disjointed PowerShell scripts to audit AD environments are time-consuming, error-prone, and ill-suited for modern security demands. To address this gap, cybersecurity professionals […]

The post InvokeADCheck – Powershell Based Tool to Detect Active Directory Misconfigurations appeared first on Cyber Security News.

Security researchers at SEC Consult have discovered a significant vulnerability in CrowdStrike’s Falcon Sensor that allowed attackers to bypass detection mechanisms and execute malicious applications. This vulnerability, dubbed “Sleeping Beauty,” was initially reported to CrowdStrike in late 2023 but was dismissed as merely a “detection gap.” The bypass technique involved suspending the EDR processes rather […]

The post Researchers Bypassed CrowdStrike Falcon Sensor to Execute Malicious Applications appeared first on Cyber Security News.

A newly disclosed critical vulnerability in Sitecore Experience Platform (CVE-2025-27218) allows unauthenticated attackers to execute arbitrary code on unpatched systems.  The flaw, rooted in insecure deserialization practices, affects Sitecore Experience Manager (XM) and Experience Platform (XP) versions 8.2 through 10.4 prior to patch KB1002844.  Security firm Assetnote discovered the vulnerability, which leverages Sitecore’s misuse of […]

The post Sitecore 0-Day Vulnerability Let Attackers Execute Remote Code appeared first on Cyber Security News.

A critical security oversight in widely used Apache Airflow instances has exposed credentials for platforms like AWS, Slack, PayPal, and other services, leaving organizations vulnerable to data breaches and supply chain attacks.  Researchers at Intezer discovered thousands of unprotected instances across industries, including finance, healthcare, e-commerce, and cybersecurity. These instances revealed systemic risks tied to […]

The post Misconfigured Apache Airflow Servers Exposes Login Credentials to Hackers appeared first on Cyber Security News.