î ‚Oct 02, 2025î „Ravie LakshmananPython / Malware Cybersecurity experts have identified a harmful package on the Python Package Index (PyPI) repository that purports to provide a SOCKS5 proxy service but also includes a covert backdoor-like feature to deploy extra payloads on …
Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown Read More »
Date: Oct 01, 2025 Author: Ravie Lakshmanan Tags: Vulnerability / API Security A critical security vulnerability has been uncovered in the One Identity OneLogin Identity and Access Management (IAM) solution. This flaw, if exploited, could potentially expose sensitive OpenID Connect …
OneLogin Bug Let Attackers Use API Keys to Steal OIDC Secrets and Impersonate Apps Read More »
On September 30, 2025, cybersecurity researchers revealed three security vulnerabilities in Google’s Gemini artificial intelligence (AI) assistant that have since been patched. These vulnerabilities posed serious privacy risks and potential data theft for users. The vulnerabilities, collectively known as the …
A critical security flaw has been identified in MyCourts, a widely used platform for tennis court bookings and league management in the UK. The vulnerability, known as CVE-2025-57424, could have allowed malicious actors to hijack user sessions and gain unauthorized …
î ‚Sep 27, 2025î „Ravie LakshmananMalware / Network Security Telecommunications and manufacturing sectors in Central and South Asian countries have become the focus of an ongoing campaign distributing a new variant of the known malware PlugX (also known as Korplug or SOGU). …
China-Linked PlugX and Bookworm Malware Attacks Target Asian Telecom and ASEAN Networks Read More »
74 Austin / TX, United States, September 25th, 2025, CyberNewsWire Living Security, a global leader in Human Risk Management (HRM), today announced the full speaker lineup for the Human Risk Management Conference (HRMCon 2025), taking place October 20, 2025, at …
The latest ClickFix-style attacks have been linked to the Russian advanced persistent threat (APT) group COLDRIVER, who are behind the distribution of two new malware families known as BAITSWITCH and SIMPLEFIX. Zscaler ThreatLabz, the cybersecurity firm that first discovered this …
523 A critical zero-day vulnerability in WhatsApp has been identified that posed a serious security threat to Apple users. This vulnerability, known as CVE-2025-55177, allowed unauthorized content processing on Apple devices running WhatsApp. While the severity of this vulnerability is …
WhatsApp Addressed An Actively Exploited Zero-Day Vulnerability Read More »
Research shows that approximately 50% of small businesses fail within the first five years. However, KNP Logistics Group, formerly known as Knights of Old, defied the odds by thriving for over 158 years in the transport business. Unfortunately, in June …
How One Bad Password Ended a 158-Year-Old Business Read More »
0 Austin, Texas, USA, September 23rd, 2025, CyberNewsWire New SpyCloud 2025 Identity Threat Report reveals dangerous disconnect between perceived security readiness and operational reality. SpyCloud, the leader in identity threat protection, today released the 2025 SpyCloud Identity Threat Report, revealing …
