Cyber Security News

Spanish authorities, in collaboration with international agencies, have arrested a suspected hacker accused of orchestrating over 40 cyberattacks targeting critical public and private entities.  The arrest, made in Calpe, Alicante, is the result of a combined operation between Spain’s National Police and the Civil Guard.  The suspect is believed to have infiltrated the computer systems […]

The post Authorities Arrested Hacker Who Compromised 40+ Organizations appeared first on Cyber Security News.

Threat actors have been leveraging the legitimate Remote Monitoring and Management (RMM) tool, ScreenConnect, to establish persistence in their cyberattacks. This trend shows the evolving tactics of hackers who exploit trusted software to gain unauthorized access to systems. ScreenConnect, now known as ConnectWise Control, is a widely used RMM tool that allows IT teams to […]

The post Hackers Exploiting ScreenConnect RMM Tool to Establish Persistence appeared first on Cyber Security News.

Israeli spyware company Paragon Solutions has terminated its contract with Italy following allegations that its military-grade surveillance software, Graphite, was misused to target journalists and civil society members. The decision comes less than a week after WhatsApp revealed that the spyware had been deployed in a zero-click attack campaign targeting 90 individuals across two dozen […]

The post WhatsApp Zero-Click Paragon Spyware Terminates Contract with Italy appeared first on Cyber Security News.

A recent cybersecurity threat has emerged in the form of the Nova Stealer malware, a fork of the popular SnakeLogger stealer. This malware is being marketed on hacking forums under a Malware-as-a-Service (MaaS) model, making it accessible to a wide range of attackers for as little as $50 for a 30-day license. The Nova Stealer […]

The post Beware of Nova Stealer Malware Sold for $50 on Hacking Forums appeared first on Cyber Security News.

In a shocking revelation, researchers have uncovered a widespread malware campaign targeting both Android and iOS users. Dubbed “SparkCat,” this malicious operation involves apps embedded with a malicious SDK designed to steal recovery phrases for cryptocurrency wallets. The infected apps, some of which were available on Google Play and the App Store, have been downloaded […]

The post 242,000 Times Downloaded Malicious Apps from Android and iOS Stealing Crypto Recovery Keys appeared first on Cyber Security News.

A newly discovered botnet named BADBOX has been found to have infected over 190,000 Android devices, including high-end models like Yandex 4K QLED TVs. This botnet is particularly concerning due to its ability to infect devices potentially through pre-installed malware from the factory or further down the supply chain. The scale and stealth of BADBOX […]

The post BADBOX Botnet Infected Over 190,000 Android Devices Including LED TVs appeared first on Cyber Security News.

The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Linux kernel vulnerability, CVE-2024-53104, to its Known Exploited Vulnerabilities (KEV) Catalog, emphasizing its potential impact on systems worldwide. This vulnerability, classified as an out-of-bounds write issue, affects the USB Video Class (UVC) driver in the Linux kernel and could lead to privilege escalation, arbitrary […]

The post CISA Adds Actively Exploited Linux Kernel Vulnerability to Known Exploited Vuln Catalog appeared first on Cyber Security News.

Hackers have begun leveraging AI agents to validate stolen credit cards, marking a new era in the sophistication of financial fraud. This trend highlights the evolving threat landscape where technology, once seen as a tool for security, is being repurposed by malicious actors to facilitate illegal activities. The process involves using AI-powered tools to simulate […]

The post Hackers Using AI Agents To Validate Stolen Credit Cards appeared first on Cyber Security News.

The AI startup DeepSeek has gained significant attention in recent weeks for its advanced AI models, particularly the R1 reasoning model. However, this rapid rise to fame has also attracted the unwanted attention of cybercriminals, who are exploiting DeepSeek’s popularity to launch sophisticated cyber attacks. These threats include fake websites, malware distribution, and scams involving […]

The post Threat Actors Exploiting DeepSeek’s Rise To Fuel Cyber Attacks appeared first on Cyber Security News.

A new report from FortiGuard Labs reveals that Chinese hackers are actively targeting Linux devices with a sophisticated SSH backdoor dubbed ELF/Sshdinjector.A!tr. This malware, attributed to the DaggerFly espionage group, has been used in the Lunar Peek campaign since mid-November 2024, primarily targeting network appliances and IoT devices. The attack involves several malicious components working […]

The post Chinese Hackers Attacking Linux Devices With New SSH Backdoor appeared first on Cyber Security News.

IBM has released critical security updates addressing multiple vulnerabilities in its Cloud Pak for Business Automation software.  These vulnerabilities, if exploited, could allow attackers to access sensitive data, disrupt operations, or compromise system integrity. The fixes are part of the latest interim fixes (iFixes) for versions 21.0.3 and 24.0.0. The vulnerabilities affect several components within […]

The post Multiple IBM Cloud Pak Vulnerabilities Let Attackers Execute Remote Code appeared first on Cyber Security News.

Aembit, the non-human identity and access management (IAM) company, today announced that Michael Trites has joined the company as senior vice president of global sales. In this role, Trites will lead Aembit’s global sales strategy, driving adoption of its industry-first Workload IAM Platform. Trites brings over two decades of experience scaling sales organizations at high-growth […]

The post Michael Trites Joins Aembit as Senior Vice President of Global Sales appeared first on Cyber Security News.

A critical vulnerability in Apple’s macOS kernel (XNU), tracked as CVE-2025-24118, has been disclosed, potentially allowing attackers to escalate privileges, corrupt memory, and even execute kernel-level code.  The flaw, affecting macOS Sonoma versions earlier than 14.7.3, macOS Sequoia versions earlier than 15.3, and iPadOS versions earlier than 17.7.4, was discovered by Joseph Ravichandran (@0xjprx), a […]

The post Apple’s macOS Kernel Vulnerability Let Attackers Escalate Privileges – PoC Released appeared first on Cyber Security News.

Sophos, a global leader in cybersecurity solutions, has finalized its acquisition of SecureWorks, a prominent managed security services provider, in an all-cash transaction valued at $859 million.  Sophos is now the top pure-play provider of Managed Detection and Response (MDR) services, serving more than 28,000 businesses worldwide due to this strategic approach. The acquisition brings […]

The post Sophos Acquires Secureworks for $859 Million appeared first on Cyber Security News.

In an impressive demonstration of cost-effective AI research, a group of researchers has successfully replicated DeepSeek’s R1-Zero model for just $30. Dubbed TinyZero, this project focuses on countdown and multiplication tasks, leveraging reinforcement learning (RL) to enable a 3-billion-parameter (3B) base language model (LM) to develop self-verification and search abilities autonomously. Built on the veRL […]

The post TinyZero – Researchers Replicated DeepSeek’s R1-Zero Model for Just $30 appeared first on Cyber Security News.

The eSentire Threat Response Unit (TRU) revealed that threat actors are actively exploiting a six-year-old IIS vulnerability in Progress Telerik UI for ASP.NET AJAX to gain remote access to systems. This vulnerability, identified as CVE-2019-18935, allows attackers to execute arbitrary code on vulnerable servers, posing a significant risk to organizations that have not updated their […]

The post Hackers Exploiting A Six-Year-Old IIS Vulnerability To Gain Remote Access appeared first on Cyber Security News.

A critical security vulnerability has been identified in nearly all Microsoft Sysinternals tools, presenting a significant risk to IT administrators and developers who rely on these utilities for system analysis and troubleshooting. This vulnerability, outlining how attackers can exploit DLL injection techniques to execute malicious code, has been meticulously researched, verified, and demonstrated in a […]

The post 0-Day Vulnerabilities in Microsoft Sysinternals Tools Allow Attackers To Launch DLL Injection Attacks on Windows appeared first on Cyber Security News.

A critical vulnerability, identified as CVE-2025-23114, has been discovered in the Veeam Updater component, a key element of multiple Veeam backup solutions.  This flaw enables attackers to execute arbitrary code on affected servers through a Man-in-the-Middle (MitM) attack, potentially granting root-level permissions.  The vulnerability has been assigned a severity score of 9.0, underscoring its significant […]

The post Critical Veeam Backup Vulnerability Let Attackers Execute Arbitrary Code to Gain Root Access appeared first on Cyber Security News.

The Cybersecurity and Infrastructure Security Agency (CISA), in collaboration with international cybersecurity authorities, has issued comprehensive guidance aimed at securing network edge devices.  These devices, which include firewalls, routers, VPN gateways, Internet of Things (IoT) devices, internet-facing servers, and operational technology (OT) systems, are critical to maintaining the security and integrity of enterprise networks. The […]

The post CISA Releases Guidance to Protect Firewalls, Routers, & Internet-Facing Servers appeared first on Cyber Security News.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) Catalog, adding several newly identified vulnerabilities to its authoritative list of security flaws exploited in the wild. This catalog Developed to assist cybersecurity professionals in prioritizing vulnerability management, the KEV catalog serves as a critical resource for organizations aiming to […]

The post CISA Adds Apache, Microsoft Vulnerabilities to Its Database that Are Actively Exploited in the Wild appeared first on Cyber Security News.