Cyber Security News

A comprehensive new cybersecurity assessment has revealed that internet connectivity poses the most significant threat to industrial control systems (ICS) worldwide, with malicious activities targeting critical infrastructure through web-based attack vectors reaching unprecedented levels. The latest quarterly threat landscape report covering the first quarter of 2025 demonstrates that internet-based threats have consistently outpaced all other […]

The post New Report Warns of Internet is The Top Threat Source for Industrial Automation Systems appeared first on Cyber Security News.

Modern cybersecurity threats have evolved beyond traditional perimeter defenses, necessitating the adoption of proactive hunting methodologies that anticipate breach scenarios. This comprehensive guide explores advanced threat hunting strategies, technical frameworks, and practical implementation approaches that enable security professionals to identify sophisticated threats before they cause significant damage. By leveraging hypothesis-driven methodologies, advanced analytics platforms, and […]

The post Threat Hunting 101 – Proactive Cybersecurity Strategies for Experts appeared first on Cyber Security News.

A critical security vulnerability in Google’s account recovery system allowed malicious actors to obtain the phone numbers of any Google user through a sophisticated brute-force attack, according to a disclosure by a BruteCat security researcher published this week. The vulnerability, which has since been patched, exploited Google’s No-JavaScript username recovery form to bypass security protections […]

The post Google Vulnerability Let Attackers Access Any Google User Phone Number appeared first on Cyber Security News.

Ransomware operators have increasingly turned to a sophisticated new malware tool called Skitnet, also known as “Bossnet,” to enhance their post-exploitation capabilities and evade traditional security measures. First emerging on underground cybercrime forums in April 2024, this multi-stage malware has rapidly gained traction among prominent ransomware groups seeking to streamline their operations while maintaining stealth […]

The post Sophisticated Skitnet Malware Actively Adopted by Ransomware Gangs to Streamline Operations appeared first on Cyber Security News.

Chinese state-sponsored hackers launched sophisticated reconnaissance operations against cybersecurity giant SentinelOne’s infrastructure in October 2024, representing part of a broader campaign targeting over 70 organizations worldwide. The previously undisclosed attacks, detailed in a comprehensive report released by SentinelLabs on June 9, 2025, demonstrate the persistent threat that China-nexus actors pose to the very companies tasked […]

The post Chinese Hackers Attempted To Compromise SentinelOne’s Own Servers & Other High-profile Targets appeared first on Cyber Security News.

A comprehensive analysis of the Bitter espionage group has revealed eight years of sustained cyber operations employing increasingly sophisticated custom-developed malware tools designed to evade detection while conducting intelligence gathering activities. The threat actor, also known as TA397, has demonstrated remarkable persistence and evolution in their attack methodologies, progressing from basic downloaders in 2016 to […]

The post Bitter Malware Using Custom-Developed Tools To Evade Detection In Sophisticated Attacks appeared first on Cyber Security News.

Google’s latest comprehensive survey reveals a concerning surge in cybercriminal activities targeting American users, with over 60% of U.S. consumers reporting a noticeable increase in scam attempts over the past year. The technology giant’s collaboration with Morning Consult has unveiled alarming statistics showing that one-third of Americans have personally experienced data breaches, while malicious actors […]

The post Google Warns of Cybercriminals Increasingly Attacking US Users to Steal Login Credentials appeared first on Cyber Security News.

A recent campaign by Chinese state-sponsored threat actor APT41 has unveiled a novel exploitation of Google Calendar for malware command-and-control (C2) operations, marking a significant escalation in cyberespionage tactics. The group, tracked under aliases including BARIUM and Brass Typhoon, targeted Taiwanese government entities through a multi-stage attack chain combining spearphishing, image-based payload delivery, and covert […]

The post APT41 Hackers Using Google Calendar for Malware Command-and-Control To Attack Government Entities appeared first on Cyber Security News.

A sophisticated new malware campaign has emerged targeting Windows systems through an elaborate social engineering scheme involving backdoored gaming software. The Blitz malware, first identified in late 2024 and evolving through 2025, represents a concerning trend of cybercriminals exploiting gaming communities to deploy cryptocurrency mining operations. While initially designed to target general Windows systems rather […]

The post New Blitz Malware Attacking Windows Servers to Deploy Monero Miner appeared first on Cyber Security News.

Cybersecurity researchers have identified a sophisticated new remote access trojan called DuplexSpy RAT that enables attackers to establish comprehensive surveillance and control over Windows systems. This multifunctional malware represents a growing trend in modular, GUI-driven threats that significantly lower the technical barrier for cybercriminals seeking to compromise target machines. The malware, developed in C# with […]

The post New DuplexSpy RAT Let Attackers Gain Complete Control of Windows Machine appeared first on Cyber Security News.

A sophisticated supply chain attack has compromised 16 popular React Native packages with over one million combined weekly downloads, marking a significant escalation in ongoing NPM ecosystem threats. The attack, which began on June 6th, 2025, systematically backdoored packages within the React Native Aria ecosystem and GlueStack framework, deploying advanced remote access trojans (RATs) capable […]

The post Developers Beware! 16 React Native Packages With Million of Download Compromised Overnight appeared first on Cyber Security News.

If you’re shopping around for cybersecurity solutions in 2025, you’re probably feeling a little overwhelmed and not sure where to turn. Not only are there more attacks than ever before (and more sophisticated), but there are a wide range of potential security vendors that all promise to do the same thing; protect your business, its […]

The post Top 5 Best Cybersecurity Companies Leading The Industry Right Now in 2025 appeared first on Cyber Security News.

Security researchers have uncovered a disturbing new threat in the npm ecosystem where malicious packages masquerade as legitimate utilities while harboring destructive backdoors capable of wiping entire production environments. These packages represent a significant escalation from traditional credential theft or cryptocurrency mining attacks, focusing instead on complete system destruction that could cripple business operations. The […]

The post Malicious npm Packages as Utilities Let Attackers Destroy Production Systems appeared first on Cyber Security News.

A critical zero-day vulnerability discovered in Salesforce‘s default controller has exposed millions of user records across thousands of deployments worldwide.  The security flaw, found in the built-in aura://CsvDataImportResourceFamilyController/ACTION$getCsvAutoMap controller, allowed attackers to extract sensitive user information and document details through SOQL injection techniques. SOQL Injection 0-Day Vulnerability The vulnerability was discovered while conducting automated fuzzing […]

The post Critical SOQL Injection 0-Day Vulnerability in Salesforce Affects Millions Worldwide appeared first on Cyber Security News.

Arkana Security Group claims to have successfully gained access to Ticketmaster’s database infrastructure and exfiltrated massive volumes of sensitive customer data. The threat actors have reportedly announced their intentions to sell comprehensive datasets containing ticket sales records, payment methodologies, customer demographic profiles, and internal fraud resolution documentation on dark web marketplaces.  This incident potentially affects […]

The post Arkana Ransomware Group Allegedly Claims Breach of Ticketmaster Databases appeared first on Cyber Security News.

A sophisticated new malware attack vector that manipulates users through fake browser verification prompts designed to mimic legitimate CAPTCHA systems.  This attack leverages social engineering techniques combined with clipboard manipulation and obfuscated PowerShell commands to trick victims into voluntarily executing malicious code on their systems.  The campaign represents a significant evolution in malware distribution methods, […]

The post New Malware Attack Via “I’m not a Robot Check” to Trick Users into Running Malware appeared first on Cyber Security News.

A new proof-of-concept (PoC) exploit for a critical zero-day vulnerability affecting multiple Fortinet products raises urgent concerns about the security of enterprise network infrastructure. The vulnerability, tracked as CVE-2025-32756, carries a maximum CVSS score of 9.8 and enables unauthenticated remote code execution through a stack-based buffer overflow flaw. The vulnerability exists in the processing of […]

The post PoC Exploit Released for Fortinet 0-Day Vulnerability that Allows Remote Code Execution appeared first on Cyber Security News.

Kali GPT, a specialized AI model built on GPT-4 architecture, has been specifically developed to integrate seamlessly with Kali Linux, offering unprecedented support for offensive security professionals and students alike. Kali GPT represents a significant breakthrough in the integration of artificial intelligence with penetration testing, offering an intelligent co-pilot that fundamentally changes the cybersecurity workflow. […]

The post Kali GPT- AI Assistant That Transforms Penetration Testing on Kali Linux appeared first on Cyber Security News.

A sophisticated new information-stealing malware written in the Rust programming language has emerged, demonstrating advanced capabilities to extract sensitive data from both Chromium-based and Gecko-based web browsers. The malware, known as Myth Stealer, represents a significant evolution in cybercriminal tactics, combining modern programming techniques with traditional social engineering methods to compromise user credentials and financial […]

The post New Rust Based InfoStealer Extracts Sensitive Data from Chromium-based Browsers appeared first on Cyber Security News.

Cybersecurity researchers have identified a sophisticated new social engineering campaign that exploits fundamental human trust in everyday computer interactions. The ClickFix technique, which has been actively deployed since March 2024, represents a dangerous evolution in cybercriminal tactics that bypasses traditional security measures by targeting the most vulnerable component of any network: the end user. This […]

The post Hackers Using New ClickFix Technique To Exploits Human Error Via Fake Prompts appeared first on Cyber Security News.