Aggregator

Mozilla has released Firefox 136.0.4 to patch a critical security vulnerability that can let attackers escape the web browser's sandbox on Windows systems. [...]

The UK National Cyber Security Centre (NCSC) has released security guidance for domain registrars and operators of Domain Name System (DNS) services. “DNS registrars have an important role to help counter domain abuses throughout their lifecycle,” the NCSC says. They should work on minimizing the ability of actors to register misleading domains, speeding up the takedown of malicious domains, helping customers secure and retain their domain registrations, and reducing the number of vulnerable and compromised … More →

The post UK NCSC offers security guidance for domain and DNS registrars appeared first on Help Net Security.

In this Help Net Security interview, Kim Crawley, cybersecurity expert and Professor at the Open Institute of Technology, discusses her latest book, The Ultimate Cybersecurity Careers Guide. She shares insights on how aspiring professionals can break into the field and explores the importance of continuous learning. What makes this guide different from other available cybersecurity career resources? That’s an excellent question. The vast majority of books on cybersecurity certifications are guides to one particular certification … More →

The post A closer look at The Ultimate Cybersecurity Careers Guide appeared first on Help Net Security.

Cybercriminals are exploiting the popularity of DeepSeek by using fake sponsored Google ads to distribute malware. While DeepSeek is rising in popularity, threat actors are attempting to exploit it by using fake sponsored Google ads to distribute malware, Malwarebytes researchers warn. Crooks are using DeepSeek as a lure to trap unsuspecting Google searchers. “Unfortunately, we […]

Inspired by our newly released Threat Detection Report, here are five things defenders can do right now to strengthen their security posture.

Cybersecurity researchers have uncovered a sophisticated new malware strain targeting macOS systems, dubbed “CoffeeLoader,” which employs advanced techniques to bypass endpoint security solutions and deliver Rhadamanthys shellcode payloads. The malware represents a significant evolution in threats targeting Apple’s ecosystem, demonstrating increasing complexity in evasion tactics. Initial analysis indicates that CoffeeLoader exploits legitimate system processes to […]

The post New Sophisticated Malware CoffeeLoader Bypasses Endpoint Security to Deploy Rhadamanthys Shellcode appeared first on Cyber Security News.

University security operations centers that hire and train students are a boon to state and local governments while giving much-needed Tier 1 cybersecurity training to undergraduates.

You can't escape Meta AI in WhatsApp even if you are based in one of the 41 European countries, with the feature now rolling out to more devices. [...]

Alleged Sale of 100K U.S. Gemini Cryptocurrency User Leads

Positive Technologies представила новую версию сканера защищенности кода веб-приложений.

A large-scale cyberattack has compromised approximately 150,000 legitimate websites by injecting malicious JavaScript to redirect visitors to Chinese-language gambling platforms. The campaign, first detected in February 2025 with 35,000 infected sites, has since expanded significantly, leveraging obfuscated scripts and iframe injections to hijack browsers. Attackers use domains like zuizhongyj[.]com to host payloads, which display full-screen […]

The post Threat Actors Compromise 150,000 Websites to Promote Chinese Gambling Platforms appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Het 1 Duits-Nederlands legerkorps (1GNC) is een binnen 20 dagen volledig wereldwijd inzetbaar hoofdkwartier. Het is in staat in een crisisgebied een internationale troepenmacht aan te sturen van meer dan 50.000 militairen. 1GNC stond de afgelopen 3 jaar onder leiding van luitenant-generaal Nico Tak. Vandaag droeg hij het commando op de Domplatz in Münster over aan zijn ranggenoot Peter Mirow.

A new analysis has uncovered connections between affiliates of RansomHub and other ransomware groups like Medusa, BianLian, and Play. The connection stems from the use of a custom tool that's designed to disable endpoint detection and response (EDR) software on compromised hosts, according to ESET. The EDR killing tool, dubbed EDRKillShifter, was first documented as used by RansomHub actors in

A vulnerability has been found in ansibleguy webui up to 0.0.20 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-36110. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in sagemathinc cocalc and classified as problematic. This issue affects some unknown processing of the component Markdown Parser. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-36109. The attack may be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as problematic. Affected is the function save_category of the file /admin/index.php?page=categories. The manipulation of the argument Name leads to cross site scripting. This vulnerability is traded as CVE-2024-5437. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in SourceCodester Laboratory Management System 1.0. It has been classified as problematic. Affected is an unknown function. The manipulation of the argument Department leads to cross site scripting. This vulnerability is traded as CVE-2024-35582. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Umbraco Umbraco.Forms.Issues. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Forms. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-35239. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.