Cyber Security News

Threat researchers are warning of twin Chinese-nexus espionage operations—“Operation Chat” and “Operation PhantomPrayers”—that erupted in the weeks preceding the Dalai Lama’s 90th birthday, exploiting heightened traffic to Tibetan-themed websites to seed Windows hosts with sophisticated backdoors. By compromising a legitimate greeting page and quietly swapping its hyperlink, attackers funneled visitors to look-alike domains under niccenter[.]net, […]

The post Chinese Hackers Attacking Windows Systems in Targeted Campaign to Deploy Ghost RAT and PhantomNet Malwares appeared first on Cyber Security News.

GitLab has released critical security patches addressing multiple vulnerabilities across its Community Edition (CE) and Enterprise Edition (EE) platforms, with versions 18.2.1, 18.1.3, and 18.0.5 now available for immediate deployment.  The release includes fixes for six distinct security vulnerabilities, including two high-severity cross-site scripting (XSS) issues that pose significant risks to Kubernetes proxy functionality.  Key […]

The post GitLab Security Update – Patch for Multiple Vulnerabilities in Community and Enterprise Edition appeared first on Cyber Security News.

Cybercriminals have evolved their social engineering tactics with a sophisticated malware campaign that exploits users’ trust in financial institutions. The latest threat involves a malicious LNK file masquerading as a credit card security email authentication popup, specifically targeting unsuspecting users through deceptive filename conventions like card_detail_20250610.html.lnk. This attack represents a concerning shift in malware distribution […]

The post Weaponized LNK File Disguised as Credit Card Security Email Steals User Data appeared first on Cyber Security News.

The brief lull following May’s multinational takedown of the Lumma Stealer infrastructure proved deceptive. Within weeks, telemetry again lit up with fresh command-and-control (C2) beacons, revealing that the information-stealing malware had swapped overt marketplace promotion for quieter channels while expanding its victim base. In its new incarnation, Lumma is most often packaged inside counterfeit installers […]

The post Lumma Stealer Via Fake Cracked Software Steals Login Credentials and Private Files appeared first on Cyber Security News.

An investigation led by the French Police and Paris Prosecutor, in close cooperation with their Ukrainian counterparts and Europol, has resulted in the arrest of the suspected administrator of xss[.]is, one of the world’s most influential Russian-speaking cybercrime platforms. The forum, which had more than 50,000 registered users, served as a key marketplace for stolen […]

The post Key Administrator of World’s Most Popular XSS Dark Web Cybercrime Platform Arrested appeared first on Cyber Security News.

A fresh strain of the long-running macOS.ZuRu family has surfaced, hiding inside a doctored of the popular Termius SSH client and quietly turning developer workstations into remote footholds. First seen in late May 2025, the 248 MB rogue disk image looks and behaves like the genuine installer but stealthily inserts a 25 MB Mach-O binary […]

The post New ZuRu Malware Variant Weaponizes Termius SSH Client to Attack macOS Users appeared first on Cyber Security News.

Five Nevada men, including a German citizen, received prison sentences of up to 84 months for operating Jetflicks, one of the largest illegal television streaming services in United States history.  The defendants generated millions in criminal profits by distributing copyrighted content through sophisticated automated systems that bypassed legitimate licensing agreements, causing an estimated $37.5 million […]

The post Jetflicks Illegal Paid Streaming Service Operators Jailed for 7 Years appeared first on Cyber Security News.

Phishing attacks are evolving rapidly, allowing cybercriminals to bypass traditional security systems like email filters and static defenses. As a result, many businesses are left vulnerable to credential theft, often without realizing the threat until it’s too late. Early detection is key, and real-time analysis of suspicious emails, links, and files in a secure environment offers the solution. Let’s explore […]

The post How Businesses Prevent Credential Theft with Early Phishing Detection appeared first on Cyber Security News.

A dual U.S.-China citizen and former Silicon Valley engineer has pleaded guilty to stealing critical military technology secrets designed to protect American national security interests.  Chenguang Gong, 59, of San Jose, admitted to transferring over 3,600 classified files containing advanced missile detection and defense technologies to personal storage devices, with intentions to benefit the Chinese […]

The post Silicon Valley Engineer Pleads Guilty to Stealing Missile Detection Data for China appeared first on Cyber Security News.

A groundbreaking cybersecurity threat has emerged as researchers document the first confirmed case of malware exploiting Microsoft’s User Interface Automation (UIA) framework in active attacks. The Coyote banking trojan, initially discovered in February 2024, has evolved to incorporate this sophisticated technique, marking a significant escalation in malware capabilities and attack methodologies. The malware specifically targets […]

The post Coyote Malware Abuses Microsoft’s UI Automation in Wild to Exfiltrate Login Credentials appeared first on Cyber Security News.

Microsoft has unveiled a comprehensive suite of AI-powered enhancements for Windows 11, marking a significant leap forward in personal computing experiences.  With nearly 60% of users now employing generative AI for work purposes and 64% for personal projects, Windows 11 positions itself as the definitive platform for AI integration, particularly on Copilot+ PCs equipped with […]

The post Windows 11 Gets New AI-Powered Features – Discover What’s New appeared first on Cyber Security News.

A significant privacy protection measure with the Brave browser now blocks Microsoft’s controversial Recall feature by default starting in version 1.81 for Windows users.  The decision reflects growing concerns about user privacy and data security, as Microsoft’s Recall system automatically captures screenshots of user activity and stores them in a local database.  Key Takeaways1. Brave […]

The post Brave Browser Blocks Microsoft Recall by Default Due to Privacy Concerns appeared first on Cyber Security News.

Remote Monitoring and Management (RMM) software has long been the silent partner of help-desk engineers, automating patch cycles and troubleshooting sessions across sprawling enterprises. Over the past year, however, the same remote consoles have been quietly repurposed by ransomware gangs that crave the built-in trust, elevated privileges, and encrypted tunnels these tools provide. By masquerading […]

The post Ransomware Gangs Leveraging RMM Tools to Attack Organizations and Exfiltrate Data appeared first on Cyber Security News.

The Clorox Company, a leading household goods manufacturer, has filed a $380 million lawsuit against IT services provider Cognizant Technology Solutions. The lawsuit accuses Cognizant’s help-desk agents of inadvertently providing hackers with access to Clorox’s network during a security breach in August 2023. This intrusion severely disrupted operations and led to months of product shortages. […]

The post Clorox Sues IT Provider Cognizant For Simply Giving Employee Password to Hackers appeared first on Cyber Security News.

Mozilla has released Firefox 141 to address 17 security vulnerabilities, including several high-impact flaws that could potentially allow arbitrary code execution.  The Mozilla Foundation Security Advisory, announced on July 22, 2025, urges users to update immediately to protect against these critical security issues. Key Takeaways1. Firefox 141 patches critical vulnerabilities that could allow code execution.2. […]

The post Firefox 141 Released With Fix for Multiple Vulnerabilities – Update Now appeared first on Cyber Security News.

The National Nuclear Security Administration (NNSA) has fallen victim to a sophisticated cyber attack exploiting a previously unknown vulnerability in Microsoft SharePoint, marking one of the most significant security breaches targeting critical US defense infrastructure this year.  Chinese government-affiliated hacking groups leveraged a zero-day exploit affecting on-premises SharePoint installations to infiltrate over 50 organizations, including […]

The post US Nuclear Weapons Agency Breached by Hackers Using SharePoint 0-Day Vulnerability appeared first on Cyber Security News.

CISA has issued an urgent alert regarding active exploitation of critical Microsoft SharePoint vulnerabilities by suspected Chinese threat actors.  The attack campaign, dubbed “ToolShell,” leverages a vulnerability chain involving CVE-2025-49706 (network spoofing) and CVE-2025-49704 (remote code execution) to gain unauthorized access to on-premises SharePoint servers. The sophisticated attack enables malicious actors to achieve both unauthenticated […]

The post CISA Warns of Chinese Hackers Exploiting SharePoint 0-Day Flaws in Active Exploitation appeared first on Cyber Security News.

Security researchers discovered that threat actors had uploaded three corrupted browser packages, firefox-patch-bin, librewolf-fix-bin, and zen-browser-patched-bin, to the Arch User Repository (AUR).  These packages appeared to be benign forks of popular Firefox-based browsers but secretly installed a Remote Access Trojan (RAT) by pulling and executing a script from a malicious GitHub repository.  The Arch Linux […]

The post Hackers Injected Malicious Firefox Browser Packages to Arch Linux User Repository appeared first on Cyber Security News.

Microsoft has unveiled significant improvements to Windows 11’s system recovery capabilities, introducing a redesigned Black Screen of Death restart screen alongside an automated Quick Machine Recovery (QMR) tool.  These enhancements are part of the broader Windows Resiliency Initiative (WRI), designed to minimize downtime and streamline recovery processes when system failures occur. Key Takeaways1. Windows 11's […]

The post Windows 11 Gets New Black Screen of Death With Auto Recovery Tool appeared first on Cyber Security News.

CISA has issued an urgent warning regarding two critical Microsoft SharePoint vulnerabilities that threat actors are actively exploiting in the wild.  The vulnerabilities, designated as CVE-2025-49704 and CVE-2025-49706, pose significant risks to organizations running on-premises SharePoint servers and have been added to CISA’s Known Exploited Vulnerabilities (KEV) catalog with an immediate remediation deadline. Key Takeaways1. […]

The post CISA Warns of Microsoft SharePoint Code Injection and Authentication Vulnerability Exploited in Wild appeared first on Cyber Security News.