A new ransomware strain called HybridPetya has been discovered by cybersecurity researchers. This malware is similar to the well-known Petya/NotPetya ransomware and has the ability to bypass the Secure Boot mechanism in UEFI systems. The samples of HybridPetya were first …
New HybridPetya Ransomware Bypasses UEFI Secure Boot With CVE-2024-7344 Exploit Read More »
Reports indicate that threat actors associated with the Akira ransomware group have been targeting SonicWall devices for initial access. Cybersecurity firm Rapid7 has observed an increase in intrusions involving SonicWall appliances, especially following reports of renewed Akira ransomware activity since …
Microsoft recently released updates to address a total of 80 security vulnerabilities in its software, with one flaw already known to the public at the time of release. Of these vulnerabilities, eight are classified as Critical and 72 as Important. …
Microsoft Fixes 80 Flaws — Including SMB PrivEsc and Azure CVSS 10.0 Bugs Read More »
0 Frankfurt am Main, Germany, September 9th, 2025, CyberNewsWire The threat landscape surrounding distributed denial-of-service (DDoS) attacks intensified significantly in the first half of 2025, according to the latest Link11 European Cyber Report. Documented attacks targeting the Link11 network increased …
Cybersecurity is an ever-evolving field, with new threats and vulnerabilities emerging every week. For security and IT teams, the challenge lies in staying informed and prioritizing the most critical risks. This digest aims to provide a clear, concise briefing to …
Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & More Read More »
A series of cyber attacks have been detected targeting the energy sector in Kazakhstan, with a suspected Russian threat actor behind the malicious activities. Dubbed Operation BarrelFire, the attacks are linked to a new threat group known as Noisy Bear …
Noisy Bear Targets Kazakhstan Energy Sector With BarrelFire Phishing Campaign Read More »
î ‚ Sep 06, 2025 î „ Ravie Lakshmanan Software Security / Cryptocurrency A recent discovery in the npm package registry has unveiled four malicious packages designed to steal cryptocurrency wallet credentials from Ethereum developers. The packages, uploaded under the username “flashbotts,” …
Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys Read More »
î ‚Sep 05, 2025î „Ravie LakshmananVulnerability / Enterprise Security A critical security vulnerability impacting SAP S/4HANA, an Enterprise Resource Planning (ERP) software, has come under active exploitation in the wild. The command injection vulnerability, tracked as CVE-2025-42957 (CVSS score: 9.9), was fixed …
SAP S/4HANA Critical Vulnerability CVE-2025-42957 Exploited in the Wild Read More »
î ‚Sep 04, 2025î „Ravie LakshmananArtificial Intelligence / Malware Cybersecurity experts have identified a new method that cybercriminals are using to evade the malvertising safeguards of a popular social media platform and disseminate harmful links through its AI assistant Grok. The discovery …
î ‚Sep 03, 2025î „Ravie LakshmananArtificial Intelligence / Vulnerability Threat actors are making use of a newly launched artificial intelligence (AI) offensive security tool named HexStrike AI to exploit recently uncovered security vulnerabilities. HexStrike AI, as per its official website, is designed …
