Cyber Security News

Arkana Security Group claims to have successfully gained access to Ticketmaster’s database infrastructure and exfiltrated massive volumes of sensitive customer data. The threat actors have reportedly announced their intentions to sell comprehensive datasets containing ticket sales records, payment methodologies, customer demographic profiles, and internal fraud resolution documentation on dark web marketplaces.  This incident potentially affects […]

The post Arkana Ransomware Group Allegedly Claims Breach of Ticketmaster Databases appeared first on Cyber Security News.

A sophisticated new malware attack vector that manipulates users through fake browser verification prompts designed to mimic legitimate CAPTCHA systems.  This attack leverages social engineering techniques combined with clipboard manipulation and obfuscated PowerShell commands to trick victims into voluntarily executing malicious code on their systems.  The campaign represents a significant evolution in malware distribution methods, […]

The post New Malware Attack Via “I’m not a Robot Check” to Trick Users into Running Malware appeared first on Cyber Security News.

A new proof-of-concept (PoC) exploit for a critical zero-day vulnerability affecting multiple Fortinet products raises urgent concerns about the security of enterprise network infrastructure. The vulnerability, tracked as CVE-2025-32756, carries a maximum CVSS score of 9.8 and enables unauthenticated remote code execution through a stack-based buffer overflow flaw. The vulnerability exists in the processing of […]

The post PoC Exploit Released for Fortinet 0-Day Vulnerability that Allows Remote Code Execution appeared first on Cyber Security News.

Kali GPT, a specialized AI model built on GPT-4 architecture, has been specifically developed to integrate seamlessly with Kali Linux, offering unprecedented support for offensive security professionals and students alike. Kali GPT represents a significant breakthrough in the integration of artificial intelligence with penetration testing, offering an intelligent co-pilot that fundamentally changes the cybersecurity workflow. […]

The post Kali GPT- AI Assistant That Transforms Penetration Testing on Kali Linux appeared first on Cyber Security News.

A sophisticated new information-stealing malware written in the Rust programming language has emerged, demonstrating advanced capabilities to extract sensitive data from both Chromium-based and Gecko-based web browsers. The malware, known as Myth Stealer, represents a significant evolution in cybercriminal tactics, combining modern programming techniques with traditional social engineering methods to compromise user credentials and financial […]

The post New Rust Based InfoStealer Extracts Sensitive Data from Chromium-based Browsers appeared first on Cyber Security News.

Cybersecurity researchers have identified a sophisticated new social engineering campaign that exploits fundamental human trust in everyday computer interactions. The ClickFix technique, which has been actively deployed since March 2024, represents a dangerous evolution in cybercriminal tactics that bypasses traditional security measures by targeting the most vulnerable component of any network: the end user. This […]

The post Hackers Using New ClickFix Technique To Exploits Human Error Via Fake Prompts appeared first on Cyber Security News.

A sophisticated malware distribution campaign has weaponized over 140 GitHub repositories to target inexperienced cybercriminals and gaming cheat users, representing one of the largest documented cases of supply chain attacks on the platform. The repositories, masquerading as legitimate malware tools and game cheats, contain elaborate backdoors designed to infect users who compile the seemingly authentic […]

The post Hundreds of GitHub Malware Repos Targeting Novice Cybercriminals Linked to Single User appeared first on Cyber Security News.

A sophisticated new social engineering attack campaign has emerged that exploits users’ familiarity with routine security checks to deliver malware through deceptive Cloudflare verification pages. The ClickFix attack technique represents a concerning evolution in phishing methodology, abandoning traditional file downloads in favor of manipulating users into executing malicious commands directly on their own systems. The […]

The post New ClickFix Attack Exploits Fake Cloudflare Human Check to Install Malware Silently appeared first on Cyber Security News.

DragonForce, a sophisticated ransomware operation that emerged in fall 2023, has established itself as a formidable threat in the cybercriminal landscape by claiming over 120 victims across the past year. Unlike traditional ransomware-as-a-service models, this threat actor has evolved into what security experts term a “ransomware cartel,” fundamentally changing how cybercriminal operations are structured and […]

The post DragonForce Ransomware Claimed To Compromise Over 120 Victims in The Past Year appeared first on Cyber Security News.

Cybercriminals are exploiting the growing demand for artificial intelligence solutions by disguising ransomware within legitimate-looking AI business tools, according to recent security research. This emerging threat specifically targets small businesses and entrepreneurs seeking to integrate AI capabilities into their operations, creating a dangerous intersection between innovation adoption and cyber threats. The sophisticated campaigns discovered by […]

The post Beware of Fake AI Business Tools That Hides Ransomware appeared first on Cyber Security News.

A sophisticated cyber attack campaign has emerged targeting Ukraine’s critical infrastructure, utilizing a previously unknown destructive malware variant that researchers have designated “PathWiper.” This latest threat represents a significant escalation in the ongoing cyber warfare landscape, demonstrating advanced capabilities designed to cause maximum disruption to essential services and systems across the embattled nation. The malware […]

The post New PathWiper Malware Attacking Critical Infrastructure To Deploy Administrative Tools appeared first on Cyber Security News.

Korean cybersecurity researchers have uncovered a sophisticated malware campaign targeting cryptocurrency users worldwide, with ViperSoftX emerging as a persistent threat that continues to evolve its attack methodologies. First identified by Fortinet in 2020, this malware has demonstrated remarkable longevity and adaptability, consistently updating its techniques to bypass security measures while maintaining its core objective of […]

The post Threat Actors Using ViperSoftX Malware to Exfiltrate Sensitive Details appeared first on Cyber Security News.

To combat malicious actors across Europe, Microsoft has introduced a comprehensive European Security Program designed to tackle sophisticated cybercriminal networks targeting European infrastructure. Announced in Berlin on June 4, 2025, the initiative specifically targets ransomware groups and state-sponsored threat actors from Russia, China, Iran, and North Korea, who continue to evolve in scope and sophistication. […]

The post Microsoft Unveils European Security Program to Target Cybercriminal Networks appeared first on Cyber Security News.

A significant security vulnerability affecting millions of Chrome extension users has been discovered, revealing widespread exposure of sensitive API keys, secrets, and authentication tokens directly embedded in extension code. This critical flaw stems from developers hardcoding credentials into their JavaScript files, making these secrets accessible to anyone who inspects the extension packages. The vulnerability affects […]

The post Chrome Extensions Vulnerability Exposes API Keys, Secrets, and Tokens appeared first on Cyber Security News.

The United States Department of State’s Rewards for Justice program has announced a substantial bounty of up to $10 million for information leading to the identification or location of individuals involved in malicious cyber activities against U.S. critical infrastructure. The reward specifically targets those acting under foreign government direction who violate the Computer Fraud and […]

The post US to Offer $10 Million Reward for Details About RedLine Malware Developer appeared first on Cyber Security News.

Multiple severe security vulnerabilities in HPE Insight Remote Support (IRS) platform that could allow attackers to execute remote code, traverse directories, and access sensitive information.  The vulnerabilities affect versions prior to 7.15.0.646 and pose significant risks to enterprise infrastructure management systems. Critical HPE IRS Remote Execution Vulnerability  This critical vulnerability CVE-2025-37099 scored 9.8 on the […]

The post HPE Insight Remote Support Vulnerability Let Attackers Execute Remote Code appeared first on Cyber Security News.

A sophisticated new variant of the BADBOX malware has successfully compromised over one million Android devices across multiple continents, representing one of the most significant mobile security breaches of 2025. This advanced persistent threat demonstrates enhanced evasion capabilities and has managed to infiltrate devices through compromised firmware installations, legitimate app stores, and sophisticated social engineering […]

The post BADBOX 2.0 Infected Over 1 Million Android Devices Worldwide appeared first on Cyber Security News.

A proof-of-concept exploit targeting a critical denial-of-service vulnerability in Apache Tomcat has been publicly released, exposing servers running versions 10.1.10 through 10.1.39 to potential attacks.  The exploit, designated as CVE-2025-31650, leverages malformed HTTP/2 priority headers to cause memory exhaustion on vulnerable Tomcat instances.  Security researcher Abdualhadi Khalifa developed and published the exploit code on June […]

The post PoC Exploit Released for Apache Tomcat DoS Vulnerability appeared first on Cyber Security News.

Security researchers have uncovered a sophisticated malware campaign leveraging the legitimate Paste.ee platform to distribute XWorm and AsyncRAT payloads across global command-and-control (C2) infrastructure. First identified in May 2025, the operation uses heavily obfuscated JavaScript downloaders to retrieve secondary payloads from Paste.ee links, exploiting the service’s credibility to bypass initial detection layers. Hunt.io analysts confirmed […]

The post Threat Actors Abuse Paste.ee Platform to Deploy XWorm and AsyncRAT appeared first on Cyber Security News.

Two significant security vulnerabilities affecting the Dell PowerScale OneFS storage operating system, with the most severe flaw potentially allowing unauthenticated attackers to gain complete unauthorized access to enterprise filesystem data.  The critical vulnerability, tracked as CVE-2024-53298, affects PowerScale OneFS versions 9.5.0.0 through 9.10.0.1 and carries a maximum CVSS score of 9.8, indicating an extremely high […]

The post Dell PowerScale Vulnerability Let Attackers Gain Unauthorized Filesystem Access appeared first on Cyber Security News.