Cyber Security News

Microsoft Threat Intelligence has identified an ongoing phishing campaign impersonating Booking.com to deliver credential-stealing malware. The campaign, which began in December 2024, targets hospitality organizations in North America, Oceania, Asia, and Europe. This sophisticated attack specifically aims at individuals in these organizations who are most likely to work with the popular travel platform. The attackers […]

The post Microsoft Warns of Cyber Attack Mimic Booking .com To Deliver Password Stealing Malware appeared first on Cyber Security News.

Rostislav Panev, a 51-year-old dual Russian and Israeli national, has been extradited to the United States on charges related to his alleged role as a developer for the notorious LockBit ransomware group.  The extradition, which took place on March 13, 2025, follows Panev’s arrest in Israel in August pursuant to a U.S. provisional arrest request.  […]

The post United States Charges Developer of LockBit Ransomware Group appeared first on Cyber Security News.

The Cybersecurity and Infrastructure Security Agency (CISA) has recently issued multiple Industrial Control Systems (ICS) advisories highlighting significant security vulnerabilities across various critical infrastructure sectors.  These advisories reveal several high-severity and critical vulnerabilities that demand immediate attention from organizations operating industrial control systems.  This report analyzes the most critical vulnerabilities identified in recent ICS advisories, […]

The post CISA Releases Thirteen Industrial Control Systems Focusing Vulnerabilities & Exploits appeared first on Cyber Security News.

Two sophisticated phishing campaigns were observed targeting Microsoft 365 users by exploiting OAuth redirection vulnerabilities combined with brand impersonation techniques.  Threat researchers are warning organizations about these highly targeted attacks designed to bypass traditional security controls and achieve account takeover (ATO). The malicious campaigns leverage familiar brands including Adobe and DocuSign to trick users into […]

The post Microsoft365 Themed Attack Leveraging OAuth Redirection for Account Takeover  appeared first on Cyber Security News.

Security researchers have uncovered a sophisticated malware campaign targeting users of the Python Package Index (PyPI), Python’s official third-party software repository.  This latest attack vector involves several malicious packages disguised as time-related utilities, which are actually designed to steal sensitive information including cloud access tokens, API keys, and other credentials. According to Reversing Labs post […]

The post New Campaign Attacking PyPI Users to Steal Sensitive Data Including Cloud Tokens appeared first on Cyber Security News.

A cybersecurity researcher has successfully broken the encryption used by the Linux/ESXI variant of the Akira ransomware, enabling data recovery without paying the ransom demand.  The breakthrough exploits a critical weakness in the ransomware’s encryption methodology. According to the researcher, the malware uses the current time in nanoseconds as a seed for its encryption process, […]

The post Decrypting Linux/ESXi Akira Ransomware Files Without Paying Ransomware appeared first on Cyber Security News.

Between late January and early March 2025, cybersecurity researchers at Forescout’s Vedere Labs uncovered a series of sophisticated intrusions leveraging critical Fortinet vulnerabilities. The attacks, attributed to a newly identified threat actor tracked as “Mora_001,” culminated in the deployment of a custom ransomware strain dubbed “SuperBlack.” Mora_001 has demonstrated a systematic approach to compromising networks, […]

The post SuperBlack Actors Exploiting Two Fortinet Vulnerabilities to Deploy Ransomware appeared first on Cyber Security News.

Cyber attack simulation tools help organizations identify vulnerabilities, test security defenses, and improve their cybersecurity posture by simulating real-world attacks. These tools range from breach and attack simulation (BAS) platforms to adversary emulation frameworks. Here are some of the top cyber attack simulation tools: Cyberattack is not at all a distant threat. Any organization can […]

The post Top 10 Best Cyber Attack Simulation Tools – 2025 appeared first on Cyber Security News.

QR code Phishing, or “Quishing,” is a cyber threat that exploits the widespread use of QR (Quick Response) codes in phishing attacks.  Quishing takes advantage of the recent high-use volume and increasing popularity of QR codes. These codes, which can be easily scanned using smartphones, are commonly seen as innocent and have become a widely […]

The post What is QR Code Phishing? (Quishing) – Attack & Prevention Guide in 2025 appeared first on Cyber Security News.

CISA has issued a warning regarding a newly discovered vulnerability affecting Juniper Networks’ Junos OS. The vulnerability, identified as CVE-2025-21590, involves an improper isolation or compartmentalization issue within the operating system’s kernel. This flaw could allow a local attacker with high-level privileges to inject arbitrary code, potentially compromising the integrity of affected devices. The vulnerability […]

The post CISA Warns of Juniper Junos OS Improper Isolation Vulnerability Exploited in Wild appeared first on Cyber Security News.

The Cybersecurity and Infrastructure Security Agency (CISA) has warned about an actively exploited zero-day vulnerability in Apple’s WebKit browser engine, tracked as CVE-2025-24201. This vulnerability, an out-of-bounds write issue, could allow attackers to execute unauthorized code on vulnerable devices. The vulnerability lies within WebKit, a cross-platform web browser engine used by Safari and other applications […]

The post CISA Warns of Apple WebKit Out-of-Bounds Write Vulnerability Exploited in Wild appeared first on Cyber Security News.

A significant data breach involving sensitive healthcare worker information has been discovered, exposing over 86,000 records belonging to ESHYFT, a New Jersey-based HealthTech company.  Cybersecurity researcher Jeremiah Fowler identified an unprotected AWS S3 storage bucket containing approximately 108.8 GB of data that lacked password protection or encryption, leaving private healthcare worker information publicly accessible.  The […]

The post 86,000+ Healthcare Staff Records Exposed from Misconfigured AWS S3 Bucket appeared first on Cyber Security News.

As organizations increasingly integrate Microsoft Copilot into their daily workflows, cybercriminals have developed sophisticated phishing campaigns specifically targeting users of this AI-powered assistant.  Microsoft Copilot, which launched in 2023, has rapidly become an essential productivity tool for many organizations, integrating deeply with Microsoft 365 apps to provide AI-powered assistance.  However, this widespread adoption has created […]

The post Hackers Abuse Microsoft Copilot for Sophisticated Phishing Attack appeared first on Cyber Security News.

Siemens has disclosed a critical security vulnerability affecting specific SINAMICS S200 drive systems that could allow attackers to compromise devices by exploiting an unlocked bootloader.  The vulnerability, tracked as CVE-2024-56336 and has received the highest severity ratings with a CVSS v3.1 score of 9.8 and CVSS v4.0 score of 9.5. The security advisory SSA-787280 identifies […]

The post Siemens SINAMICS S200 Bootloader Vulnerability Let Attackers Compromise the Device appeared first on Cyber Security News.

Security researchers at Unit 42 have successfully prompted DeepSeek, a relatively new large language model (LLM), to generate detailed instructions for creating keyloggers, data exfiltration tools, and other harmful content. The researchers employed three advanced jailbreaking techniques to bypass the model’s safety guardrails, raising significant concerns about the potential misuse of emerging AI technologies. Unit […]

The post DeepSeek Generating Fully Working Keyloggers & Data Exfiltration Tools appeared first on Cyber Security News.

A significant security vulnerability has been identified in Apache NiFi, allowing potential attackers with specific access privileges to expose MongoDB authentication credentials.  The vulnerability, tracked as CVE-2025-27017 (NIFI-14272), affects multiple versions of the Apache NiFi data processing system and could potentially lead to unauthorized database access in affected deployments.  The vulnerability stems from Apache NiFi’s […]

The post Apache NiFi Vulnerability Let Attackers Access MongoDB Username & Passwords appeared first on Cyber Security News.

Microsoft has patched a critical Windows Kernel vulnerability that has been actively exploited for nearly two years.  The vulnerability, tracked as CVE-2025-24983, was included in the company’s March 2025 Patch Tuesday release in March. According to cybersecurity firm ESET, which discovered and reported the vulnerability, attackers have been exploiting this flaw in the wild since […]

The post 2-year-old Windows Kernel 0-day Vulnerability Exploited in the Wild appeared first on Cyber Security News.

Mozilla has issued an urgent warning to Firefox users worldwide, emphasizing the critical need to update their browsers before March 14, 2025, when a vital root certificate will expire.  This expiration threatens to disable extensions, break DRM-protected content playback, and expose users to significant security risks.  The warning affects millions of Firefox users across multiple […]

The post Mozilla Urging Users to Update Firefox, Else Add-ons Will Stop Working appeared first on Cyber Security News.

Bitdefender has disclosed two critical vulnerabilities affecting its BOX v1 device that could allow network-adjacent attackers to execute Man-in-the-Middle (MITM) attacks, potentially leading to remote code execution.  The vulnerabilities, assigned CVE-2024-13872 and CVE-2024-13871, both received a CVSS score of 9.4, indicating severe security risks for affected devices.  These security flaws impact a product that Bitdefender […]

The post Bitdefender Warns of Multiple Vulnerabilities That Let Attackers Execute MITM Attack appeared first on Cyber Security News.

As Artificial Intelligence (AI)-powered cyber threats surge, INE Security, a global leader in cybersecurity training and certification, is launching a new initiative to help organizations rethink cybersecurity training and workforce development. The company warns that AI is reshaping both the threat landscape and the skills required for cybersecurity professionals. While AI offers significant advantages in […]

The post INE Security Alert: Using AI-Driven Cybersecurity Training to Counter Emerging Threats appeared first on Cyber Security News.