Cyber Security News

A severe global buffer overflow vulnerability has been discovered in the zlib untgz utility version 1.3.1.2. Allowing attackers to corrupt memory and potentially execute malicious code through specially crafted command-line input.​ The security flaw resides in the TGZfname() function of the untgz utility, where an unbounded strcpy() call processes user-supplied archive names without any length […]

The post Critical Zlib Vulnerability Let Attackers Trigger Buffer Overflow by Invoking untgz appeared first on Cyber Security News.

X has suspended the iconic @twitter handle on its platform, replacing its profile with a standard notice stating the account violates rules. Screenshots of the suspension screen began circulating widely late last week, igniting discussions about the platform’s rebranding efforts. The @twitter account had remained inactive since before Elon Musk’s 2022 acquisition of the platform, […]

The post X Suspended Twitter Account for Violation of Rules appeared first on Cyber Security News.

A recent investigation has exposed the technical foundation of underground carding operations, revealing 28 unique IP addresses and 85 domains actively hosting illegal marketplaces where stolen credit card data is bought and sold. These platforms operate as sophisticated e-commerce sites for financial fraud, enabling criminals to trade stolen payment information ranging from $5 to $150 […]

The post New Research Uncovers 28 Unique IP Addresses and 85 Domains Hosting Carding Markets appeared first on Cyber Security News.

The world of cybercrime has taken a dangerous turn as pig butchering scams now operate as turnkey services, lowering entry barriers for bad actors worldwide. The “Penguin” operation represents a growing marketplace that provides everything scammers need to launch large-scale fraud campaigns, from stolen personal data to ready-made fraud templates. This service-based model mirrors other […]

The post New ‘Penguin’ Pig Butchering as a Service Selling PII, Stolen Accounts and Fraud Kits appeared first on Cyber Security News.

Security researcher TwoSevenOneT, known for EDR evasion tools like EDR-Freeze and EDR-Redir, unveiled EDRStartupHinder this week. The tool blocks antivirus and EDR services at startup by redirecting critical System32 DLLs via Windows Bindlink, demonstrated on Windows Defender in Windows 11 25H2.​ Antivirus and EDR services operate like standard Windows services but with enhanced protection from […]

The post New EDRStartupHinder Tool blocks antivirus and EDR services at startup on Windows 11 25H2 Defender appeared first on Cyber Security News.

Instagram has stated that its systems were not breached and that recent password reset emails some users received were triggered by an external party abusing a now-fixed issue. The company says user accounts remain secure and that the unexpected reset emails can be safely ignored. The clarification follows reports of a large-scale Instagram data leak […]

The post Instagram Confirms no System Breach and Fixed External Party Password Reset Issue appeared first on Cyber Security News.

Network security is paramount in today’s digital landscape, where organizations face increasingly sophisticated threats. This guide presents a detailed Network Security checklist with examples to help you establish robust protection and minimize vulnerabilities. Network Security Musts: The 7-Point Checklist – Download Free – E-Book Network Security and Risks 2024 Network security is essential for digital […]

The post Network Security Checklist – Complete Guide To Protect Enterprise Networks (2026) appeared first on Cyber Security News.

Open Source Intelligence (OSINT) has become a cornerstone of cybersecurity threat intelligence. In today’s digital landscape, organizations face a constant barrage of cyber threats, ranging from data breaches and phishing attacks to sophisticated nation-state operations. To stay ahead of these threats, cybersecurity teams must leverage every available resource, and OSINT provides a wealth of information […]

The post Leveraging OSINT Tools for Enhanced Cybersecurity Threat Intelligence appeared first on Cyber Security News.

A cybersecurity incident at Gulshan Management Services, Inc., a gas station operator based in Sugar Land, Texas, has compromised the personal information of over 377,000 customers. The breach, discovered on September 27, 2025, exposed sensitive data over 10 days from September 17 to September 27, 2025. Breach Details The incident involved a hacking breach of […]

The post Data Breach at Texas Gas Station Operator Exposes Info of 377,000+ Customers appeared first on Cyber Security News.

Cybersecurity researchers have discovered a new variant of the MacSync malware targeting macOS users. Unlike previous versions that relied on complex ClickFix techniques, this iteration masquerades as a legitimately signed, notarised Apple application, thereby bypassing macOS Gatekeeper security and stealing sensitive data. Code-Signed Malware Bypasses Security Jamf Threat Labs recently identified this evolved MacSync stealer, […]

The post New MacSync Stealer Uses Signed macOS App to Evade Gatekeeper and Steal Data appeared first on Cyber Security News.

A significant security breach has compromised approximately 17.5 million Instagram user accounts, exposing sensitive personal information that is now circulating on the dark web. The incident reported earlier this week by cybersecurity firm Malwarebytes raised urgent concerns about user privacy and account security. What Data Was Exposed The breach encompasses a wide range of personal […]

The post Instagram Data Leak Exposes Sensitive Info of 17.5M Accounts [Updated] appeared first on Cyber Security News.

The Spanish National Police, working alongside the Bavarian State Criminal Police Office and Europol, has conducted a major operation targeting the international Black Axe criminal organisation. The coordinated action resulted in 34 arrests and dealt a significant blow to the network’s operations across Spain. Law enforcement arrested 34 suspects across multiple Spanish cities: 28 in […]

The post Europol‑Backed Operation Leads to 34 Arrests in Black Axe Crime Network Bust appeared first on Cyber Security News.

Cybercriminals are leveraging the recent arrest of Venezuelan President Nicolás Maduro to distribute sophisticated backdoor malware. The threat actors exploited news surrounding Maduro’s arrest on January 3, 2025, demonstrating how geopolitical events continue to serve as effective lures for malicious campaigns. The attack likely begins with a spear-phishing email containing a zip archive named “US […]

The post Phishing Campaign Uses Maduro Arrest Story to Deliver Backdoor Malware appeared first on Cyber Security News.

In a dramatic turn for the cybercrime underworld, a mysterious hacker known as “James” has leaked the complete user database of BreachForums, a notorious Dark Web forum serving as a hub for stolen data trading and hacking discussions. The breach, announced on January 9, 2026, via the site shinyhunte.rs, exposes metadata for over 323,986 users, […]

The post BreachForums Hack: Hackers Expose All User Records from Popular Dark Web Forum appeared first on Cyber Security News.

A dangerous malware threat has emerged targeting Windows users across Korea through webhard file-sharing services. The Ahnlab Security Intelligence Center recently identified xRAT, also known as QuasarRAT, being distributed as fake adult games to unsuspecting users. This remote access trojan represents a significant security concern for Windows systems, combining sophisticated evasion techniques with social engineering […]

The post xRAT Malware Attacking Windows Users Disguised as Adult Game appeared first on Cyber Security News.

A new ransomware variant called Fog has emerged as a significant threat to educational and recreation organizations across the United States. Starting in early May 2024, Arctic Wolf Labs began monitoring its deployment across multiple incident response cases, with 80 percent of affected organizations operating in the education sector while 20 percent were in recreation. […]

The post Fog Ransomware Attacking US Organizations Leveraging Compromised VPN Credentials appeared first on Cyber Security News.

Between December 25–28, a single threat actor conducted a large-scale scanning campaign, testing over 240 different exploits against internet-facing systems and collecting data on every vulnerable target found. This reconnaissance operation, operating from two IP addresses linked to CTG Server Limited (AS152194), represents a new level of sophistication in how initial access is secured for […]

The post Threat Actors Attacking Systems with 240+ Exploits Before Ransomware Deployment appeared first on Cyber Security News.

The cyber threat environment across Australia and New Zealand has entered a critical phase throughout 2025, with threat actors orchestrating increasingly sophisticated attacks centered on the sale of compromised network access. The Cyble Research and Intelligence Labs documented 92 instances of compromised access sales affecting organizations across both regions during the year, revealing a mature […]

The post Cyber Threats Targeting Australia and New Zealand Fueled by Initial Access Sales, and Ransomware Campaigns appeared first on Cyber Security News.

A new and sophisticated phishing campaign is targeting remote workers and IT administrators by impersonating the official Fortinet VPN download portal. This attack is particularly dangerous because it leverages search engine optimization (SEO) and, alarmingly, AI-generated search summaries to lure victims into a trap. The campaign utilizes a multi-stage redirect mechanism starting with trusted domains […]

The post Fake Fortinet Sites Steal VPN Credentials in Sophisticated Phishing Attack appeared first on Cyber Security News.

The Iran-linked MuddyWater Advanced Persistent Threat group has launched a sophisticated spear-phishing campaign targeting diplomatic, maritime, financial, and telecom sectors across the Middle East. The threat actors are using weaponized Word documents to deliver a new Rust-based malware called RustyWater, which represents a major change from their traditional PowerShell and VBS tooling. This upgraded implant […]

The post MuddyWater APT Weaponizing Word Documents to Deliver ‘RustyWater’ Toolkit Evading AV and EDR Tools appeared first on Cyber Security News.