Cyber Security News

The rapid evolution of generative AI has fundamentally transformed the landscape of cybersecurity, especially in the context of red teaming. Traditionally, red teams have focused on simulating adversarial attacks to uncover vulnerabilities in networks, software, and infrastructure. However, the unpredictable and dynamic nature of generative AI models has introduced new challenges and opportunities for red […]

The post How Generative AI is Changing Red Team Tactics appeared first on Cyber Security News.

Digital transformation is no longer a buzzword it is a strategic imperative for organizations seeking to stay competitive in an ever-evolving landscape. As businesses embrace cloud computing, artificial intelligence, IoT, and remote work, the attack surface expands exponentially. This evolution brings unprecedented opportunities for innovation, efficiency, and customer engagement, but it also introduces complex security […]

The post Securing the Digital Transformation Journey – What CISOs Must Consider appeared first on Cyber Security News.

In today’s hyper-connected world, cybersecurity is no longer the sole responsibility of a dedicated security team. As organizations scale and technology becomes increasingly integrated into every aspect of business, the risks and attack surfaces multiply. Yet, security teams are often outnumbered by developers, engineers, and business units, making it nearly impossible for them to monitor […]

The post How to Build a Security Champions Program Within Your Organization appeared first on Cyber Security News.

Fortinet has announced the complete removal of SSL VPN tunnel mode functionality in the upcoming FortiOS 7.6.3 release.  This change, affecting all FortiGate models regardless of size, marks the culmination of Fortinet’s gradual phase-out of SSL VPN that began with smaller devices in previous releases.  Organizations must now prepare to migrate to IPsec VPN solutions […]

The post Fortinet Ends SSL-VPN Support From 7.6.3 Onwards!  appeared first on Cyber Security News.

A newly discovered vulnerability, CVE-2024-53141, in the Linux kernel’s IP sets framework has exposed a critical security flaw that allows local attackers to escalate privileges and potentially gain root access.  The vulnerability, assigned a CVSS score of 7.8, uncovered by researchers st424204 and d4em0n, specifically affects the bitmap:ip set type within the netfilter subsystem.  Linux […]

The post Linux Kernel Vulnerability Let Attackers Escalate Privilege – PoC Released  appeared first on Cyber Security News.

On April 16, 2025, millions of users worldwide found themselves unable to access Zoom, the widely used video conferencing platform, due to a critical outage that lasted nearly two hours. The disruption, which began at 11:25 AM PDT and was resolved by 1:12 PM PDT, was traced not to a cyberattack or internal technical failure, […]

The post Global Zoom Outage Caused by Server Block Imposed from GoDaddy Registry appeared first on Cyber Security News.

Apple has released iOS 18.4.1 and iPadOS 18.4.1 to address two critical zero-day vulnerabilities that were actively exploited in highly targeted, sophisticated attacks against specific individuals iPhone. The vulnerabilities, identified in the CoreAudio and RPAC components, could allow attackers to execute arbitrary code or bypass security protections on affected devices. 2 Zero Vulnerabilities Under Active […]

The post 2 Apple Iphone Zero-Day Vulnerabilities Actively Exploited in Extremely Sophisticated Attacks appeared first on Cyber Security News.

Cybercriminals have launched a sophisticated malware campaign leveraging fake PDF-to-DOCX converter websites that mimic the popular legitimate service PDFCandy. The malicious websites, including domains such as candyxpdf[.]com and candyconverterpdf[.]com, deploy an elaborate social engineering tactic designed to harvest sensitive information from unsuspecting users seeking to convert document formats. When users attempt to convert documents on […]

The post Beware of Online PDF Converters That Tricks Users to Install Password Stealing Malware appeared first on Cyber Security News.

Researchers have uncovered the true identity of servers hosting one of the most notorious ransomware operations active today. The Medusa Ransomware Group, which has operated with relative anonymity through Tor hidden services, has had its cover blown through a sophisticated exploitation of vulnerabilities in their own infrastructure. This exposure represents a rare instance where cybercriminal […]

The post Researchers Deanonymized Medusa Ransomware Group’s Onion Site appeared first on Cyber Security News.

Atlassian, the company behind Jira, a leading project management and issue-tracking platform, is grappling with a significant service disruption that has left users unable to load certain Dashboard widgets. The outage, affecting Jira Work Management, Jira Service Management, and Jira Product Discovery, began on April 16, 2025, and has caused widespread frustration among teams relying […]

The post Jira Down – Atlassian Jira Outage Disrupts Dashboard Access for Users Globally appeared first on Cyber Security News.

Cybersecurity experts have identified a sophisticated ransomware threat known as Interlock, which has been quietly expanding its operations since its first appearance in September 2024. This malware employs an elaborate multi-stage attack chain, beginning with the compromise of legitimate websites that deliver fake browser updates to unsuspecting users. Companies impacted by Interlock span various sectors […]

The post Interlock Ransomware Employs Multi-Stage Attack Via Legitimate Websites to Deliver Malicious Browser Updates appeared first on Cyber Security News.

Critical Windows Task Scheduler involving schtasks.exe binary, which could enable malicious actors to execute commands with SYSTEM-level privileges, bypassing User Account Control (UAC) prompts and erasing audit logs. These flaws significantly elevate the threat landscape for Windows environments, posing risks of privilege escalation, stealthy system manipulation, and data exfiltration. At the heart of the issue […]

The post New Windows Task Scheduler Vulnerabilities Allows Command Execution as Admin User appeared first on Cyber Security News.

Some threats don’t kick down the door; they slip in, stay quiet, and wait.  These days, attackers are playing the long game, using evasion techniques to hide in plain sight, delay detection, and make it harder for security teams to figure out what actually happened.  Let’s break down three of the most common tactics we’re […]

The post 3 Malware Tactics Used To Evade Detection By Corporate Security: See Examples  appeared first on Cyber Security News.

The Chief Information Security Officer (CISO) role has fundamentally transformed today’s digital-first world. Once viewed primarily as technical guardians of the organizational perimeter, CISOs are now expected to be strategic partners who drive business value. As cyber threats become more sophisticated and regulations more demanding, organizations can no longer afford to treat cybersecurity as a […]

The post Why Modern CISOs Must Be Business Translators, Not Just Technologists appeared first on Cyber Security News.

In the digital age, the security of digital identities has become a defining challenge for organizations worldwide. As businesses embrace cloud computing, remote work, and interconnected ecosystems, digital identities representing users, devices, and applications have become prime targets for cybercriminals. In 2024, identity-based attacks such as phishing, credential stuffing, and privilege escalation are among the […]

The post Securing Digital Identities – Best Practices for CISOs appeared first on Cyber Security News.

Social engineering remains one of the most persistent threats to organizational security because it targets human psychology rather than technological vulnerabilities. Unlike conventional cyber threats that exploit technical weaknesses, social engineering manipulates the fundamental psychological traits that make us human. Understanding these psychological dimensions is critical for security leaders to implement better technical controls and […]

The post The Psychology of Social Engineering – What Security Leaders Should Know appeared first on Cyber Security News.

Google has issued an urgent security update for its Chrome browser after two critical vulnerabilities were discovered. These vulnerabilities could allow attackers to steal sensitive data and gain unauthorized access to users’ systems. The flaws, identified as CVE-2025-3619 and CVE-2025-3620, affect Chrome versions prior to 135.0.7049.95/.96 for Windows and Mac and 135.0.7049.95 for Linux. The […]

The post Critical Chrome Vulnerability Let Attackers Steal Data & Gain Unauthorized Access appeared first on Cyber Security News.

A letter from MITRE, dated April 15, 2025, has leaked online claimed to be revealed from a reliable source that the organization’s contract to support the Common Vulnerabilities and Exposures (CVE) program is due to expire today, April 16, 2025, potentially threatening the stability of a critical cybersecurity resource. The letter, addressed to CVE Board […]

The post MITRE’s Support for CVE Program Set to Expire! – Internal Letter Leaked Online, “MITRE Confirmed” appeared first on Cyber Security News.

Microsoft 365 administrators faced significant challenges today as an ongoing outage prevented access to the Microsoft 365 Admin Center and the Exchange Admin Center (EAC). The issue, reported by the official Microsoft 365 Status account on X (@MSFT365Status) and is actively investigating the cause. The outage has left admins unable to perform critical tasks such […]

The post Microsoft 365 Outage – Admins are Unable to Access the Microsoft 365 Admin Center appeared first on Cyber Security News.

In the rapidly evolving digital landscape of 2025, cybersecurity has reached an inflection point that has prompted an unprecedented reassessment among security professionals. According to recent industry analysis, 78% of security leaders are completely rethinking their cyber strategies a striking statistic that reflects the profound changes in both the threat landscape and defense capabilities. This […]

The post Why 78% of Security Leaders Are Rethinking Their Entire Cyber Strategy in 2025 appeared first on Cyber Security News.