Cyber Security News

Cybersecurity company SentinelOne has released a comprehensive root cause analysis revealing that a software flaw in an infrastructure control system caused the global service disruption that affected customers worldwide on May 29, 2025. The outage, which lasted approximately 20 hours, was fully restored by May 30 at 10:00 UTC, preventing customers from accessing the SentinelOne […]

The post SentinelOne Global Service Outage Root Cause Revealed appeared first on Cyber Security News.

Google has released an emergency security update for Chrome after confirming that a critical zero-day vulnerability is being actively exploited by attackers in the wild. The vulnerability, tracked as CVE-2025-5419, allows threat actors to execute arbitrary code on victims’ systems through out-of-bounds read and write operations in Chrome’s V8 JavaScript engine. The tech giant pushed […]

The post Google Chrome 0-Day Vulnerability Exploited in the Wild to Execute Arbitrary Code appeared first on Cyber Security News.

As ransomware attacks devastate organizations globally, many companies are turning to professional negotiators to engage directly with cybercriminals, despite strong government opposition to paying ransoms. This emerging practice has sparked intense debate about when negotiation becomes necessary and how organizations can protect themselves while navigating these high-stakes conversations with threat actors. When Negotiation Becomes Necessary […]

The post Ransomware Negotiation When and How to Engage Attackers appeared first on Cyber Security News.

The digital authentication landscape is dramatically transforming as passwordless technologies gain unprecedented momentum. Passkey adoption surging 400% in 2024 alone. Despite predictions that passwords will become obsolete, emerging evidence suggests the future lies not in their complete elimination but in a sophisticated ecosystem where traditional credentials work alongside cutting-edge biometric and cryptographic solutions. Passwords Persist […]

The post Future of Passwords Biometrics and Passwordless Authentication appeared first on Cyber Security News.

Mobile chipmaker Qualcomm has issued urgent security patches for three critical zero-day vulnerabilities in its Adreno GPU drivers that are actively being exploited in targeted attacks against Android users worldwide. The company confirmed that patches for the vulnerabilities have been distributed to device manufacturers with strong recommendations for immediate deployment. The Google Threat Analysis Group […]

The post Qualcomm Adreno GPU 0-Day Vulnerabilities Exploited to Attack Android Users appeared first on Cyber Security News.

Modern organizations face a growing challenge in protecting sensitive data. As more people adopt the cloud and rules get tougher, smart and adaptable security is now a must. Two approaches often compared are DSPM and DLP. While both aim to safeguard data, their methods of operation differ. Understanding their roles and differences helps security teams […]

The post DSPM vs. DLP:Understanding the Key Differences appeared first on Cyber Security News.

Significant vulnerabilities were uncovered in pre-installed applications on Ulefone and Krüger&Matz Android smartphones that expose users to significant risks, including unauthorized factory resets, PIN code theft, and malicious command injection.  These flaws, published on May 30, 2025, demonstrate how Improper Export of Android Application Components (CWE-926) can compromise device security at the system level. Factory […]

The post Vulnerabilities in Preinstalled Android Apps Expose PIN Codes and Allow Command Injection appeared first on Cyber Security News.

Multiple critical security vulnerabilities affecting MediaTek smartphones, tablets, and IoT chipsets could allow attackers to escalate privileges and compromise device security without requiring any user interaction. The Taiwan-based chipset manufacturer published its June 2025 Product Security Bulletin, revealing seven Common Vulnerabilities and Exposures (CVEs) with severity ratings from high to medium severity, according to CVSS […]

The post MediaTek Vulnerabilities Let Attackers Escalate Privileges Without User Interaction appeared first on Cyber Security News.

According to recent industry analysis, cybersecurity professionals are overwhelmed by a flood of security alerts. Organizations process an average of 569,354 alerts annually, yet only 2-5% require immediate action, highlighting the importance of prioritizing vulnerabilities. This overwhelming volume of notifications has created a critical challenge for security teams worldwide. They must now navigate massive amounts […]

The post Prioritizing Vulnerabilities in a Sea of Alerts appeared first on Cyber Security News.

Cybersecurity researchers have identified a sophisticated new malware campaign leveraging the deceptive ClickFix technique to distribute EddieStealer, a dangerous information-stealing malware built using the Rust programming language. This emerging threat represents a significant evolution in social engineering tactics, exploiting user trust through fake CAPTCHA verification systems to trick victims into executing malicious commands. The attack […]

The post Threat Actors Using ClickFix Technique to Deliver EddieStealer Malware appeared first on Cyber Security News.

A new and sophisticated malware distribution framework dubbed “HuluCaptcha” has emerged, leveraging fake CAPTCHA verification pages to trick users into executing malicious PowerShell commands through Windows Run dialogs. This advanced threat represents a significant evolution in social engineering attacks, combining legitimate-looking security verification interfaces with complex multi-stage infection chains that have successfully compromised high-value targets […]

The post HuluCaptcha – A FakeCaptcha Kit That Trick Users to Run Code via The Windows Run Command appeared first on Cyber Security News.

As modern applications increasingly depend on APIs to drive everything from mobile banking to healthcare systems, a growing security crisis is emerging across the digital landscape, highlighting the critical importance of securing APIs. New data reveals that API security incidents have more than doubled in just one year, with 37% of organizations reporting breaches in […]

The post Securing APIs Protecting Backbone of Modern Applications appeared first on Cyber Security News.

A comprehensive security research study has revealed a widespread vulnerable code pattern affecting thousands of open-source projects on GitHub, exposing them to critical path traversal attacks that could allow malicious actors to access sensitive files and crash server systems. The vulnerability, classified as CWE-22, enables attackers to bypass intended directory restrictions and access files outside […]

The post New Study Uncovers Vulnerable Code Pattern Exposes GitHub Projects To Path Traversal Attacks appeared first on Cyber Security News.

Organizations worldwide increasingly recognize that traditional reactive cybersecurity approaches are no longer sufficient to combat sophisticated cyber threats. A comprehensive analysis of current industry practices reveals that threat intelligence has become the cornerstone of effective proactive defense strategies, enabling organizations to anticipate, prepare for, and prevent attacks before they cause significant damage. This shift represents […]

The post Role of Threat Intelligence in Proactive Defense Strategies appeared first on Cyber Security News.

In a significant development for cybersecurity preparedness, MITRE has published a comprehensive Post-Quantum Cryptography (PQC) Migration Roadmap in May 2025. This strategic document aims to guide organizations in transitioning their cryptographic systems to withstand the emerging threat of quantum computing. While experts estimate that cryptographically-relevant quantum computers (CRQCs) may still be 10 to 20 years […]

The post MITRE Publishes Post-Quantum Cryptography Migration Roadmap appeared first on Cyber Security News.

A sophisticated malware campaign that exploits legitimate SSH clients, including both the popular PuTTY application and Windows’ built-in OpenSSH implementation, to establish persistent backdoors on compromised systems. The attack demonstrates how cybercriminals are increasingly leveraging trusted administrative tools to evade detection while maintaining unauthorized access to corporate networks. Malware Exploits OpenSSH in Windows The security […]

The post Hackers Weaponized Free SSH Client Putty to Attack Windows Systems With Malware appeared first on Cyber Security News.

Organizations worldwide are turning to micro-segmentation as a cornerstone technology to combat increasingly sophisticated cyberattacks. Adoption rates are skyrocketing as traditional perimeter-based security models prove inadequate against modern threats. Recent industry data reveals a stark reality: while 70% of cybersecurity professionals agree that micro segmentation is essential for achieving Zero Trust architecture, only 5% of […]

The post Microsegmentation Technical Deep Dive into Network Security appeared first on Cyber Security News.

A significant security vulnerability has been discovered in Denodo Scheduler, a data management software component, that allows attackers to execute remote code on affected systems.  The flaw, identified as CVE-2025-26147, exploits a path traversal vulnerability in the Kerberos authentication configuration feature, potentially compromising the security of enterprise data management infrastructure. Path Traversal Vulnerability  The vulnerability […]

The post Denodo Scheduler Vulnerability Let Attackers Execute Remote Code appeared first on Cyber Security News.

A critical, unauthenticated remote code execution vulnerability in vBulletin forum software is now being actively exploited. The vulnerability, which impacts vBulletin versions 5.0.0 through 6.0.3, has been assigned CVE-2025-48827 and CVE-2025-48828 and is now being actively targeted by threat actors, marking it as a Known Exploited Vulnerability (KEV).  Despite patches being available for over a […]

The post Threat Actors Actively Exploiting Critical vBulletin Vulnerability in the Wild appeared first on Cyber Security News.

A critical vulnerability in the widely used Roundcube Webmail software allows authenticated attackers to execute arbitrary code remotely.  The vulnerability, discovered through PHP object deserialization flaws, affects all installations running versions 1.6. x and 1.5. One of the popular open-source webmail clients.  Security researcher firs0v reported the flaw, prompting immediate patches in versions 1.6.11 and […]

The post Critical Roundcube Vulnerability Let Attackers Execute Remote Code appeared first on Cyber Security News.