Aggregator
FlexibleFerret Malware Attacking macOS Users, Evading XProtect Detections
A new variant of malware, known as FlexibleFerret, has been identified targeting macOS users while evading detection by Apple’s XProtect tool. This malware is part of a broader campaign attributed to North Korean threat actors, who have been using sophisticated tactics to lure victims into installing malicious software. The Ferret family of malware, including variants […]
The post FlexibleFerret Malware Attacking macOS Users, Evading XProtect Detections appeared first on Cyber Security News.
Hackers Exploiting 7-Zip Zero-Day Vulnerability to Deploy SmokeLoader Malware
A newly identified zero-day vulnerability in the widely used 7-Zip archiving software, designated as CVE-2025-0411. This critical flaw, which was exploited in the wild, is enabling threat actors to bypass vital Windows security protections and deploy SmokeLoader malware. The campaign has predominantly targeted Ukrainian organizations, with experts suspecting links to Russian cybercrime groups amid the […]
The post Hackers Exploiting 7-Zip Zero-Day Vulnerability to Deploy SmokeLoader Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
Неудавшийся пират: 22-летний хакер превратил криптобиржи в личный банк
10 - CVE-2024-6790
9 - CVE-2024-56529
5 - CVE-2025-24883
4 - CVE-2025-24118
Hackers Exploiting 7-Zip Zero-Day Vulnerability to Deploy SmokeLoader Malware
Hackers have exploited a zero-day vulnerability in the popular file archiver 7-Zip to deploy SmokeLoader malware. The vulnerability, tracked as CVE-2025-0411, was identified in September 2024 and has since been actively used in cyberattacks targeting Ukrainian entities. CVE-2025-0411 is a high-severity vulnerability (CVSS score: 7.0) that allows attackers to bypass Windows’ Mark-of-the-Web (MoTW) security mechanism. […]
The post Hackers Exploiting 7-Zip Zero-Day Vulnerability to Deploy SmokeLoader Malware appeared first on Cyber Security News.
Man charged with stealing $65 million by exploting DeFI protocols vulnerabilities
A Canadian man has been indicted in federal court in New York for exploiting vulnerabilities in two decentralized finance (DeFi) protocols to fraudulently obtain about $65 million from the protocols’ investors. The fraudulent scheme According to court documents, from 2021 to 2023, Andean Medjedovic, 22, allegedly exploited vulnerabilities in the automated smart contracts used by the KyberSwap and Indexed Finance decentralized finance protocols. Medjedovic borrowed hundreds of millions of dollars in digital tokens, which he … More →
The post Man charged with stealing $65 million by exploting DeFI protocols vulnerabilities appeared first on Help Net Security.