Tag: cyber
-
Hackers Abuse OneDrive.exe via DLL Sideloading to Run Malicious Code
Security researchers have discovered a sophisticated attack technique that exploits Microsoft’s OneDrive application to execute malicious code without detection. The method, known as DLL sideloading, leverages the way Windows loads library files to trick legitimate applications into running attacker-controlled software. This technique represents a significant threat to enterprise environments where OneDrive is widely deployed across…
-
Silent Lynx APT New Attack Targeting Governmental Employees Posing as Officials
Seqrite Labs’ APT Team has documented fresh campaigns from Silent Lynx, a sophisticated threat actor group known for orchestrating spear-phishing operations that impersonate government officials to target diplomatic and governmental employees across Central Asia. The group, also tracked under aliases including YoroTrooper, Sturgeon Phisher, and Cavalry Werewolf, continues its espionage-focused activities with minimal operational security…
-
Hackers Abuse OneDrive.exe via DLL Sideloading to Run Malicious Code
Security researchers have discovered a sophisticated attack technique that exploits Microsoft’s OneDrive application to execute malicious code without detection. The method, known as DLL sideloading, leverages the way Windows loads library files to trick legitimate applications into running attacker-controlled software. This technique represents a significant threat to enterprise environments where OneDrive is widely deployed across…
-
DragonForce Cartel Surfaces from Leaked Conti v3 Ransomware Source Code
Tags: cyber, data-breach, encryption, flaw, group, malware, ransomware, software, threat, vulnerabilityAcronis Threat Research Unit has analyzed recent activity linked to the DragonForce ransomware group and identified a new malware variant in the wild. The latest sample uses vulnerable drivers such as truesight.sys and rentdrv2.sys to disable security software, terminate protected processes and correct encryption flaws previously associated with Akira ransomware. The updated encryption scheme addresses…
-
Critical RCE Bug in Leading React Native NPM Module Could Allow Full System Compromise
A severe security vulnerability has been discovered in a widely used React Native development package, potentially exposing millions of developers to remote attacks. Security researchers from JFrog recently uncovered CVE-2025-11953, a critical remote code execution flaw affecting the @react-native-community/cli NPM package, which receives approximately two million weekly downloads. The vulnerability carries a maximum CVSS score…
-
‘It’s Been a Mess’: Shutdown Slows Federal F5 Hack Response
Officials Say Major Staffing Cuts and Furloughs Undercut Response to F5 Cyberattack. Current and former federal officials tell Information Security Media Group furloughs and leadership gaps across the federal cyber ecosystem have hindered the U.S. government’s ability to coordinate response efforts after a nation-state actor exploited flaws in F5’s BIG-IP systems amid the shutdown. First…
-
Cyber Physical Systems Face Rising Geopolitical Risks
Global Conflicts and Tariff Wars Are Driving New OT Threats and Supply Chain Risks. Global conflicts and tariff wars provide new opportunities for cyber adversaries, especially those targeting operational technology systems. Now attackers are focusing on fragile supply chains. Claroty researchers predict attackers will breach at least one major cyber-physical system in the next year.…
-
The Security Interviews: Colin Mahony, CEO, Recorded Future
Recorded Future’s CEO talks threat intelligence, AI in cyber security and the ever-changing cyber threat landscape First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366633992/The-Security-Interviews-Colin-Mahony-CEO-Recorded-Future
-
Bugcrowd acquires Mayhem Security to advance AI-powered security testing
Mayhem, which won the 2016 DARPA Cyber Grand Challenge, will have all its employees join Bugcrowd. First seen on cyberscoop.com Jump to article: cyberscoop.com/bugcrowd-mayhem-security-acquistion-ai-security-testing/
-
Cyber Defenders Gone Rogue: Experts Charged in Ransomware Scheme
Cybersecurity experts allegedly turned rogue, using BlackCat ransomware to attack companies. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/cyber-defenders-gone-rogue-experts-charged-in-ransomware-scheme/
-
On the Road Again: Hackers Hijack Physical Cargo Freight
In a new cyber threat campaign, attackers are using remote monitoring and management tools to actually steal physical cargo out of the trucking and freight supply chain. First seen on darkreading.com Jump to article: www.darkreading.com/identity-access-management-security/hackers-weaponize-remote-tools-hijack-cargo-freight
-
Cyber Defenders Gone Rogue: Experts Charged in Ransomware Scheme
Cybersecurity experts allegedly turned rogue, using BlackCat ransomware to attack companies. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/cyber-defenders-gone-rogue-experts-charged-in-ransomware-scheme/
-
Hackers Steal Your Coffee: Cyber Gangs Hijack Real-World Cargo
Hackers hijack real-world cargo, stealing shipments like coffee through cyberattacks. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/hackers-steal-your-coffee-cyber-gangs-hijack-real-world-cargo/
-
Ex-L3Harris Exec Sold U.S. Cyber Secrets to Russia, Pleads Guilty
Former L3Harris executive Peter Williams admitted selling U.S. cyber tools to a Russian broker, endangering national security. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/ex-l3harris-exec-sold-u-s-cyber-secrets-to-russia-pleads-guilty/
-
Bob Flores, Former CTO of the CIA, Joins Brinker
Delaware, United States, November 4th, 2025, CyberNewsWire Brinker, the narrative intelligence company dedicated to combating disinformation and influence campaigns, announced today that Bob Flores, former Chief Technology Officer of the U.S. Central Intelligence Agency, has joined its advisory board. His appointment strengthens Brinker’s mission to transform the fight against disinformation, moving from detection to real-time,…
-
2025 Insider Risk Report Finds Most Organizations Struggle to Detect and Predict Insider Risks
Baltimore, USA, November 4th, 2025, CyberNewsWire The new 2025 Insider Risk Report, produced by Cybersecurity Insiders in collaboration with Cogility, highlights that nearly all security leaders (93%) say insider threats are as difficult or harder to detect than external cyberattacks. Yet only 23% express strong confidence in stopping them before serious damage occurs. The report…
-
Bob Flores, Former CTO of the CIA, Joins Brinker
Delaware, United States, November 4th, 2025, CyberNewsWire Brinker, the narrative intelligence company dedicated to combating disinformation and influence campaigns, announced today that Bob Flores, former Chief Technology Officer of the U.S. Central Intelligence Agency, has joined its advisory board. His appointment strengthens Brinker’s mission to transform the fight against disinformation, moving from detection to real-time,…
-
Critical WordPress Post SMTP Plugin Vulnerability Puts 400,000 Sites at Risk of Account Takeover
A critical vulnerability has been discovered in the Post SMTP WordPress plugin, affecting over 400,000 active installations across the web. The vulnerability, identified as CVE-2025-11833 with a CVSS score of 9.8, allows unauthenticated attackers to access sensitive email logs and execute account takeover attacks on vulnerable WordPress sites. Researchers have already documented over 4,500 exploitation…
-
Zscaler Acquires SPLX to Strengthen AI-Powered Zero Trust Security
Zscaler, a leading cloud security company, has acquired SPLX, an innovative AI security pioneer, to enhance its Zero Trust Exchange platform with advanced AI protection capabilities. The acquisition will integrate shift-left AI asset discovery, automated red teaming, and governance features that enable organizations to secure their AI investments throughout the entire lifecycle from development to…
-
XLoader Malware Analyzed Using ChatGPT’s AI, Breaks RC4 Encryption Layers in Hours
Cybersecurity researchers have successfully demonstrated how artificial intelligence can dramatically accelerate malware analysis, decrypting complex XLoader samples in a fraction of the time previously required. XLoader, a sophisticated malware loader with information-stealing capabilities dating back to 2020, has long been considered one of the most challenging malware families to analyze. The malware combines multiple layers…
-
Android Hit by 0-Click RCE Vulnerability in Core System Component
Google has released an urgent security alert addressing a critical remote code execution vulnerability affecting Android devices worldwide. The vulnerability, tracked as CVE-2025-48593, exists in Android’s System component and requires no user interaction for exploitation, making it an exceptionally dangerous threat. The flaw affects Android versions 13 through 16 and demands immediate attention from device…