Cyber Security News

In today’s rapidly evolving digital landscape, the frequency and complexity of cyberattacks are increasing, making it crucial to stay informed about emerging threats. Our weekly newsletter serves as a vital resource, offering an overview of pertinent cybersecurity developments, expert analysis, and actionable recommendations. This issue covers recent cyber incidents, newly identified vulnerabilities, and key legislative […]

The post Weekly Cybersecurity Roundup: Key Vulnerabilities, Threats, and Data Breaches appeared first on Cyber Security News.

Trendyol’s application security team uncovered a series of bypasses that render Meta’s Llama Firewall protections unreliable against sophisticated prompt injection attacks. The findings raise fresh concerns about the readiness of existing LLM security measures and underscore the urgent need for more robust defenses as enterprises increasingly embed large language models into their workflows. During the […]

The post Meta’s Llama Firewall Bypassed Using Prompt Injection Vulnerability appeared first on Cyber Security News.

OpenAI is reportedly preparing to release an artificial intelligence-enhanced web browser within the coming weeks, marking the company’s latest expansion beyond its popular ChatGPT platform. The new browser will feature integrated AI agent capabilities designed to autonomously handle various online tasks, positioning OpenAI as a direct competitor to traditional browser giants like Google Chrome while […]

The post OpenAI is to Launch a AI Web Browser in Coming Weeks appeared first on Cyber Security News.

A sophisticated supply chain attack has compromised the official GravityForms WordPress plugin, allowing attackers to inject malicious code that enables remote code execution on affected websites. The attack, discovered on July 11, 2025, represents a significant security breach affecting one of WordPress’s most popular form-building plugins, with the malware being distributed directly through the official […]

The post WordPress GravityForms Plugin Hacked to Include Malicious Code appeared first on Cyber Security News.

Cybersecurity researchers at the University of Toronto have achieved a breakthrough in hardware-level attacks by successfully demonstrating GPUHammer, the first Rowhammer attack specifically targeting discrete NVIDIA GPUs. The research, which focuses on the popular NVIDIA A6000 GPU with GDDR6 memory, represents a significant expansion of the decade-old Rowhammer vulnerability beyond traditional CPU memories. The research […]

The post GPUHammer – First Rowhammer Attack Targeting NVIDIA GPUs appeared first on Cyber Security News.

The ransomware landscape witnessed a dramatic shift in June 2025 as the Qilin ransomware group surged to become the most active threat actor, recording 81 victims and representing a staggering 47.3% increase in activity compared to previous months. This Ransomware-as-a-Service operation, which has accumulated over 310 victims since its emergence, has distinguished itself through sophisticated […]

The post Qilin Emerged as The Most Active Group, Exploiting Unpatched Fortinet Vulnerabilities appeared first on Cyber Security News.

A critical security vulnerability in AWS Organizations has been discovered that could allow attackers to achieve complete control over entire multi-account AWS environments through a mis-scoped managed policy. The flaw, identified in the AmazonGuardDutyFullAccess managed policy version 1, enables privilege escalation from a compromised member account to full organizational takeover, including potential control of the […]

The post AWS Organizations Mis-scoped Managed Policy Let Hackers To Take Full AWS Organization Control appeared first on Cyber Security News.

The cybersecurity landscape is witnessing an alarming surge in macOS-targeted information-stealing malware, marking a significant shift from the traditional Windows-centric threat model. These sophisticated infostealers are rapidly evolving to exploit macOS environments with unprecedented precision, targeting valuable data including browser credentials, cookies, and autofill information that serve as gateways for ransomware groups and initial access […]

The post Infostealers Actively Attacking macOS Users in The Wild to Steal Sensitive Data appeared first on Cyber Security News.

Microsoft has successfully eliminated high-privilege access vulnerabilities across its Microsoft 365 ecosystem as part of its comprehensive Secure Future Initiative, marking a significant milestone in enterprise security architecture. The technology giant’s Deputy Chief Information Security Officer for Experiences and Devices, Naresh Kannan, announced that the company has mitigated over 1,000 high-privilege application scenarios through a […]

The post Microsoft Eliminated High-Privilege Access to Enhance Microsoft 365 Security appeared first on Cyber Security News.

The Federal Bureau of Investigation’s Atlanta Field Office announced today the seizure of several major online criminal marketplaces that provided pirated versions of popular video games, dismantling a multi-million dollar piracy operation that caused an estimated $170 million in losses to the gaming industry. The coordinated law enforcement action targeted websites that had been operating […]

The post FBI Atlanta Seizes Major Video Game Piracy Websites in International Operation appeared first on Cyber Security News.

CISA has issued an urgent warning regarding a critical vulnerability in Citrix NetScaler ADC and Gateway products that is being actively exploited in cyberattacks.  The vulnerability, tracked as CVE-2025-5777, has been added to CISA’s Known Exploited Vulnerabilities (KEV) catalog with an immediate remediation deadline of July 11, 2025. Key Takeaways1. CISA warns of actively exploited […]

The post CISA Warns of CitrixBleed 2 Vulnerability Exploited in Attacks appeared first on Cyber Security News.

Iranian state-sponsored threat actors have intensified their cyberattacks against critical infrastructure in the United States, with a dramatic 133% increase in malicious activity recorded during May and June 2025. The escalation coincides with heightened geopolitical tensions surrounding the recent Iranian conflict, as cybersecurity researchers track a coordinated campaign targeting primarily Transportation and Manufacturing sectors across […]

The post Iranian APTs Hackers Actively Attacking Transportation and Manufacturing Sectors appeared first on Cyber Security News.

The Cybersecurity and Infrastructure Security Agency (CISA) has released thirteen critical Industrial Control Systems (ICS) advisories on July 10, 2025, highlighting significant vulnerabilities affecting major industrial automation vendors. This comprehensive security alert encompasses multiple attack vectors targeting essential infrastructure components, ranging from network management systems to process control equipment used across manufacturing, energy, and transportation […]

The post CISA Releases 13 New Industrial Control Systems Surrounding Vulnerabilities and Exploits appeared first on Cyber Security News.

The cybersecurity landscape witnessed a significant breach in early 2025 when Arkana Ransomware emerged as a formidable threat actor, making its debut with a devastating attack on WideOpenWest (WOW!), a major U.S. internet service provider. The attack, which occurred in late March 2025, demonstrated the group’s sophisticated capabilities as they claimed to have successfully exfiltrated […]

The post Arkana Ransomware Claimed to Have Stolen 2.2 Million Customer Records appeared first on Cyber Security News.

In a significant cybersecurity incident that underscored the persistent threat of ransomware attacks on global IT infrastructure, Ingram Micro Holding Corporation successfully restored its business operations after a four-day battle against malicious actors who infiltrated its internal systems. The attack, first identified on July 5, 2025, represents one of the most notable ransomware incidents affecting […]

The post IT Giant Ingram Micro Restores Operations Following Ransomware Attack appeared first on Cyber Security News.

A critical security vulnerability in Fortinet’s FortiWeb Fabric Connector has been discovered and exploited, allowing attackers to execute remote code on affected systems without authentication. The vulnerability, designated CVE-2025-25257, represents a significant threat to organizations using Fortinet’s web application firewall solutions. Key Takeaways1. Fortinet FortiWeb Fabric Connector has an unauthenticated SQL injection (CVE-2025-25257) enabling remote […]

The post Fortinet FortiWeb Fabric Connector Vulnerability Exploited to Execute Remote Code appeared first on Cyber Security News.

A critical vulnerability in eSIM technology enables attackers to clone mobile subscriber profiles and hijack phone identities.  AG Security Research revealed they broke the security of Kigen eUICC cards with GSMA consumer certificates, marking what they claim is the first successful public hack against consumer GSMA eUICC and EAL-certified GSMA security chips. The research team […]

The post New eSIM Hack Lets Attackers Clone Profiles and Hijack Phone Identities appeared first on Cyber Security News.

A critical stack-based buffer overflow in the D-Link DIR-825 Rev.B 2.10 router firmware allows unauthenticated, zero-click remote attackers to crash the device’s HTTP server.  Tracked as CVE-2025-7206, the flaw resides in the router’s httpd binary and stems from improper handling of the language parameter in the switch_language.cgi endpoint.  Exploitation requires no valid credentials or user […]

The post Critical D-Link 0-click Vulnerability Allows Remote Attackers to Crash the Server appeared first on Cyber Security News.

A Russian professional basketball player has been arrested in France on charges of orchestrating one of the most extensive ransomware campaigns in recent history, targeting nearly 900 companies and federal institutions between 2020 and 2022.  The case highlights the growing intersection between cybercrime and unexpected perpetrators from diverse professional backgrounds. Key Takeaways1. Russian basketball player […]

The post Russian Basketball Player Arrested over Alleged Ransomware Attack Claims appeared first on Cyber Security News.

Advanced Micro Devices has disclosed a series of critical security vulnerabilities affecting multiple generations of its processor architectures, stemming from transient scheduler attacks that exploit speculative execution mechanisms. The vulnerabilities, identified through four distinct Common Vulnerabilities and Exposures (CVE) entries, pose significant risks to data confidentiality across enterprise and consumer computing environments. The security flaws […]

The post AMD Warns of Transient Scheduler Attacks Affecting Wide Range of Chipsets appeared first on Cyber Security News.