î ‚Jun 08, 2025î „Ravie LakshmananMalware / Browser Security Cybersecurity researchers have uncovered a new campaign targeting Brazilian users in 2025 with a malicious browser extension for Chromium-based browsers to steal user authentication data. According to Positive Technologies, the attackers used a …
Malicious Browser Extensions Infect 722 Users Across Latin America Since Early 2025 Read More »
Cybersecurity experts have issued a warning about a new malware campaign using the ClickFix social engineering technique to deceive users into downloading a malicious software called Atomic macOS Stealer (AMOS) on Apple macOS devices. The campaign, as reported by CloudSEK, …
New Atomic macOS Stealer Campaign Exploits ClickFix to Target Apple Users Read More »
A new data-wiping malware called PathWiper has been discovered by Cisco Talos targeting a critical infrastructure entity in Ukraine. The attack was carried out using a legitimate endpoint administration framework, indicating that the attackers had access to the administrative console. …
î ‚Jun 05, 2025î „Ravie LakshmananNetwork Security / Vulnerability Cisco recently issued security patches to rectify a critical vulnerability in the Identity Services Engine (ISE). This flaw could potentially be exploited by unauthorized individuals to carry out malicious activities on vulnerable systems. …
Critical Cisco ISE Auth Bypass Flaw Impacts Cloud Deployments on AWS, Azure, and OCI Read More »
î ‚Jun 04, 2025î „The Hacker NewsVulnerability / DevOps Hewlett Packard Enterprise (HPE) has recently released security updates to fix a total of eight vulnerabilities in its StoreOnce data backup and deduplication solution. These vulnerabilities could allow for an authentication bypass and …
HPE Issues Security Patch for StoreOnce Bug Allowing Remote Authentication Bypass Read More »
25 Cary, North Carolina, June 2nd, 2025, CyberNewsWire New FBI Data Reveals Organizations Need Deeper Technical Expertise to Detect, Contain, and Remediate Advanced Attacks INE Security, a global leader in cybersecurity training and certification, is emphasizing the urgent need for …
Cybersecurity experts have issued a warning about a new spear-phishing campaign targeting CFOs and financial executives in various industries across Europe, Africa, Canada, the Middle East, and South Asia. The attackers are using a legitimate remote access tool called Netbird …
Fake Recruiter Emails Target CFOs Using Legit NetBird Tool Across 6 Global Regions Read More »
î ‚May 31, 2025 î „Ravie Lakshmanan Vulnerability / Linux Qualys Threat Research Unit (TRU) has identified two information disclosure vulnerabilities in the core dump handlers of Ubuntu, Red Hat Enterprise Linux, and Fedora – apport and systemd-coredump. Known as CVE-2025-5054 and …
New Linux Flaws Allow Password Hash Theft via Core Dumps in Ubuntu, RHEL, Fedora Read More »
î ‚May 31, 2025î „Ravie LakshmananMalware / Cyber Crime A multinational law enforcement operation has resulted in the takedown of an online cybercrime syndicate that offered services to threat actors to ensure that their malicious software stayed undetected from security software. To …
U.S. DoJ Seizes 4 Domains Supporting Cybercrime Crypting Services in Global Operation Read More »
î ‚May 30, 2025î „Ravie LakshmananCryptocurrency / Cybercrime The U.S. Department of Treasury’s Office of Foreign Assets Control (OFAC) has imposed sanctions on a Philippines-based company called Funnull Technology Inc. and its administrator Liu Lizhi for providing infrastructure for conducting romance baiting …
U.S. Sanctions Funnull for $200M Romance Baiting Scams Tied to Crypto Fraud Read More »
