malicious

October 30, 2025

Sweet Security Brings Runtime-CNAPP Power to Windows

Tel Aviv, Israel, October 29th, 2025, CyberNewsWire Sweet Security Brings Runtime-CNAPP Power to Windows Sweet Security, a leader in Runtime…
Read More »
October 29, 2025

New Android Malware Mimics Human Behavior to Bypass Biometric Security

A sophisticated new Android banking Trojan named Herodotus has emerged as a significant threat to mobile users, introducing a novel…
Read More »
October 28, 2025

New GhostGrab Android Malware Silently Steals Banking Login Details and Intercept SMS for OTPs

A sophisticated new Android malware family called GhostGrab is actively targeting mobile users with a dual-monetization strategy that combines covert…
Read More »
October 27, 2025

10 Best Cloud Access Security Brokers (CASB) in 2025

The year 2025 marks a new era in enterprise cloud adoption, characterized by a complex tapestry of Software-as-a-Service (SaaS) applications,…
Read More »
October 26, 2025

CISA Beware! Hackers Are Actively Exploiting Windows Server Update Services RCE Flaw in the Wild

Cybersecurity researchers are sounding the alarm after discovering that hackers are actively exploiting a critical remote code execution (RCE) vulnerability…
Read More »
October 26, 2025

Hackers Use ClickFix Technique to Deploy NetSupport RAT Loaders

Cybercriminals are increasingly using a technique known as “ClickFix” to deploy the NetSupport remote administration tool (RAT) for malicious purposes.…
Read More »
October 25, 2025

Hackers Exploit WordPress Arbitrary Installation Vulnerabilities in the Wild

Cybersecurity firm Wordfence has uncovered a renewed wave of mass exploitation targeting critical vulnerabilities in two popular WordPress plugins, allowing…
Read More »
October 24, 2025

Phishing Campaign Uses Unique UUIDs to Evade Secure Email Gateways

A sophisticated new phishing attack discovered in early February 2025 is successfully bypassing Secure Email Gateways (SEGs) and evading perimeter…
Read More »
October 24, 2025

Vulnerability in Perplexity’s Comet Browser Screenshot Feature Allows Malicious Prompt Injection

Researchers have discovered a critical security vulnerability in Perplexity’s Comet AI browser that allows attackers to inject malicious commands through…
Read More »
October 23, 2025

Caminho Malware Loader Conceals .NET Payloads inside Images via LSB Steganography

Cybersecurity researchers at Arctic Wolf Labs have uncovered a cunning new threat dubbed Caminho, a Brazilian Loader-as-a-Service (LaaS) that’s turning…
Read More »
October 23, 2025

Injecting Malicious Code into RMClient to Evade EDR

CyberProof researchers detected a significant surge in Remcos (Remote Control & Surveillance Software) campaigns throughout September and October 2025, exploiting…
Read More »
October 22, 2025

Threat Actors Advancing Email Phishing Attacks to Bypass Security Filters

Cybercriminals continue to evolve their email phishing arsenals, reviving legacy tactics while layering on advanced evasions to slip past automated…
Read More »
October 22, 2025

Direct Memory Attacks Used to Capture Browser Credentials

On October 6, 2025, the cybercriminal developer known as “Loadbaks” announced the release of Vidar Stealer v2.0 on underground forums,…
Read More »
October 22, 2025

PassiveNeuron Targets High-Profile Servers to Deploy Malware

A sophisticated cyberespionage campaign dubbed PassiveNeuron has emerged from the shadows after months of dormancy, with security researchers uncovering fresh…
Read More »
October 21, 2025

Microsoft 365 Copilot Flaw Lets Hackers Steal Sensitive Data via Indirect Prompt Injection

A vulnerability in Microsoft 365 Copilot allowed attackers to trick the AI assistant into fetching and exfiltrating sensitive tenant data…
Read More »
October 21, 2025

Cavalry Werewolf APT Targets Multiple Sectors Using FoalShell and StallionRAT

From May to August 2025, an advanced persistent threat group known as Cavalry Werewolf—also tracked as YoroTrooper and Silent Lynx—executed…
Read More »
October 20, 2025

Winos 4.0 Malware Uses Weaponized PDFs Posing as Government Departments to Infect Windows Machines

Security researchers are tracking a high-severity malware campaign that uses weaponized PDF files to distribute the Winos 4.0 malware. The…
Read More »
October 19, 2025

ClickFake Interview Campaign Used by Threat Actors to Deliver OtterCandy Malware

A North Korean-linked group, WaterPlum’s Cluster B, has evolved its tactics by introducing OtterCandy—a Node.js–based RAT and information stealer—through the…
Read More »
October 19, 2025

TikTok Videos Weaponized to Deliver Self-Compiling PowerShell Malware

Attackers are exploiting TikTok’s massive reach to trick users into executing malware through seemingly innocuous videos. In one popular TikTok…
Read More »
October 19, 2025

Critical Zimbra SSRF Flaw Exposes Sensitive Data

Zimbra has released an emergency security patch to address a critical Server-Side Request Forgery (SSRF) vulnerability that could allow attackers…
Read More »

Previous page Next page