Cyber Security News

Microsoft has issued an alert regarding sophisticated ransomware attacks targeting hybrid cloud environments in Q1 2025. These attacks exploit vulnerabilities at the intersection of on-premises infrastructure and cloud services, challenging organizations with hybrid configurations. In a significant shift, North Korean state actor Moonstone Sleet has deployed Qilin ransomware in targeted attacks. This marks their first […]

The post Microsoft Warns of Ransomware Exploiting Cloud Environments with New Techniques appeared first on Cyber Security News.

Microsoft has warned organizations worldwide that threat actors are ramping up their exploitation of critical vulnerabilities in on-premises Exchange Server and SharePoint Server. These attacks, observed in recent months, have enabled cybercriminals to gain persistent and privileged access to targeted environments, leading to remote code execution, lateral movement, and the exfiltration of sensitive data. While […]

The post Hackers Actively Exploiting Critical Exchange & SharePoint Server Vulnerabilities appeared first on Cyber Security News.

In the modern digital landscape, organizations are constantly challenged by an ever-increasing volume of security alerts, sophisticated cyber threats, and the ongoing shortage of skilled cybersecurity professionals. Security Orchestration, Automation, and Response (SOAR) platforms have emerged as a transformative solution to these challenges, enabling security teams to unify tools, automate repetitive processes, and respond to […]

The post How to Implementing SOAR To Reduce Incident Response Time Effectively appeared first on Cyber Security News.

In today’s rapidly evolving cyber threat landscape, Security Operations Centers (SOCs) face an unprecedented challenge: efficiently managing and prioritizing the overwhelming volume of security alerts they receive daily. SOC analysts often can’t read and respond to a significant portion of the alerts they see every day. This article explores practical strategies and frameworks for prioritizing […]

The post How To Prioritize Threat Intelligence Alerts In A High-Volume SOC appeared first on Cyber Security News.

Nation-state cyber threats have evolved dramatically over the past decade, with attackers employing increasingly sophisticated persistence techniques to maintain long-term access within targeted environments. These advanced persistent threats (APTs) are often orchestrated by government-backed groups with significant resources, making them particularly dangerous for critical infrastructure, government agencies, and large enterprises. This article explores the changing […]

The post Detecting And Responding To New Nation-State Persistence Techniques appeared first on Cyber Security News.

A server briefly linked to the notorious KeyPlug malware has inadvertently exposed a comprehensive arsenal of exploitation tools specifically designed to target Fortinet firewall and VPN appliances. The infrastructure, which security researchers have attributed to the RedGolf threat group (overlapping with APT41), was accessible for less than 24 hours before being secured, providing a rare […]

The post Leaked KeyPlug Malware Infrastructure Contains Exploit Scripts to Hack Fortinet Firewall and VPN appeared first on Cyber Security News.

The rapid evolution of generative AI has fundamentally transformed the landscape of cybersecurity, especially in the context of red teaming. Traditionally, red teams have focused on simulating adversarial attacks to uncover vulnerabilities in networks, software, and infrastructure. However, the unpredictable and dynamic nature of generative AI models has introduced new challenges and opportunities for red […]

The post How Generative AI is Changing Red Team Tactics appeared first on Cyber Security News.

Digital transformation is no longer a buzzword it is a strategic imperative for organizations seeking to stay competitive in an ever-evolving landscape. As businesses embrace cloud computing, artificial intelligence, IoT, and remote work, the attack surface expands exponentially. This evolution brings unprecedented opportunities for innovation, efficiency, and customer engagement, but it also introduces complex security […]

The post Securing the Digital Transformation Journey – What CISOs Must Consider appeared first on Cyber Security News.

In today’s hyper-connected world, cybersecurity is no longer the sole responsibility of a dedicated security team. As organizations scale and technology becomes increasingly integrated into every aspect of business, the risks and attack surfaces multiply. Yet, security teams are often outnumbered by developers, engineers, and business units, making it nearly impossible for them to monitor […]

The post How to Build a Security Champions Program Within Your Organization appeared first on Cyber Security News.

Fortinet has announced the complete removal of SSL VPN tunnel mode functionality in the upcoming FortiOS 7.6.3 release.  This change, affecting all FortiGate models regardless of size, marks the culmination of Fortinet’s gradual phase-out of SSL VPN that began with smaller devices in previous releases.  Organizations must now prepare to migrate to IPsec VPN solutions […]

The post Fortinet Ends SSL-VPN Support From 7.6.3 Onwards!  appeared first on Cyber Security News.

A newly discovered vulnerability, CVE-2024-53141, in the Linux kernel’s IP sets framework has exposed a critical security flaw that allows local attackers to escalate privileges and potentially gain root access.  The vulnerability, assigned a CVSS score of 7.8, uncovered by researchers st424204 and d4em0n, specifically affects the bitmap:ip set type within the netfilter subsystem.  Linux […]

The post Linux Kernel Vulnerability Let Attackers Escalate Privilege – PoC Released  appeared first on Cyber Security News.

On April 16, 2025, millions of users worldwide found themselves unable to access Zoom, the widely used video conferencing platform, due to a critical outage that lasted nearly two hours. The disruption, which began at 11:25 AM PDT and was resolved by 1:12 PM PDT, was traced not to a cyberattack or internal technical failure, […]

The post Global Zoom Outage Caused by Server Block Imposed from GoDaddy Registry appeared first on Cyber Security News.

Apple has released iOS 18.4.1 and iPadOS 18.4.1 to address two critical zero-day vulnerabilities that were actively exploited in highly targeted, sophisticated attacks against specific individuals iPhone. The vulnerabilities, identified in the CoreAudio and RPAC components, could allow attackers to execute arbitrary code or bypass security protections on affected devices. 2 Zero Vulnerabilities Under Active […]

The post 2 Apple Iphone Zero-Day Vulnerabilities Actively Exploited in Extremely Sophisticated Attacks appeared first on Cyber Security News.

Cybercriminals have launched a sophisticated malware campaign leveraging fake PDF-to-DOCX converter websites that mimic the popular legitimate service PDFCandy. The malicious websites, including domains such as candyxpdf[.]com and candyconverterpdf[.]com, deploy an elaborate social engineering tactic designed to harvest sensitive information from unsuspecting users seeking to convert document formats. When users attempt to convert documents on […]

The post Beware of Online PDF Converters That Tricks Users to Install Password Stealing Malware appeared first on Cyber Security News.

Researchers have uncovered the true identity of servers hosting one of the most notorious ransomware operations active today. The Medusa Ransomware Group, which has operated with relative anonymity through Tor hidden services, has had its cover blown through a sophisticated exploitation of vulnerabilities in their own infrastructure. This exposure represents a rare instance where cybercriminal […]

The post Researchers Deanonymized Medusa Ransomware Group’s Onion Site appeared first on Cyber Security News.

Atlassian, the company behind Jira, a leading project management and issue-tracking platform, is grappling with a significant service disruption that has left users unable to load certain Dashboard widgets. The outage, affecting Jira Work Management, Jira Service Management, and Jira Product Discovery, began on April 16, 2025, and has caused widespread frustration among teams relying […]

The post Jira Down – Atlassian Jira Outage Disrupts Dashboard Access for Users Globally appeared first on Cyber Security News.

Cybersecurity experts have identified a sophisticated ransomware threat known as Interlock, which has been quietly expanding its operations since its first appearance in September 2024. This malware employs an elaborate multi-stage attack chain, beginning with the compromise of legitimate websites that deliver fake browser updates to unsuspecting users. Companies impacted by Interlock span various sectors […]

The post Interlock Ransomware Employs Multi-Stage Attack Via Legitimate Websites to Deliver Malicious Browser Updates appeared first on Cyber Security News.

Critical Windows Task Scheduler involving schtasks.exe binary, which could enable malicious actors to execute commands with SYSTEM-level privileges, bypassing User Account Control (UAC) prompts and erasing audit logs. These flaws significantly elevate the threat landscape for Windows environments, posing risks of privilege escalation, stealthy system manipulation, and data exfiltration. At the heart of the issue […]

The post New Windows Task Scheduler Vulnerabilities Allows Command Execution as Admin User appeared first on Cyber Security News.

Some threats don’t kick down the door; they slip in, stay quiet, and wait.  These days, attackers are playing the long game, using evasion techniques to hide in plain sight, delay detection, and make it harder for security teams to figure out what actually happened.  Let’s break down three of the most common tactics we’re […]

The post 3 Malware Tactics Used To Evade Detection By Corporate Security: See Examples  appeared first on Cyber Security News.

The Chief Information Security Officer (CISO) role has fundamentally transformed today’s digital-first world. Once viewed primarily as technical guardians of the organizational perimeter, CISOs are now expected to be strategic partners who drive business value. As cyber threats become more sophisticated and regulations more demanding, organizations can no longer afford to treat cybersecurity as a […]

The post Why Modern CISOs Must Be Business Translators, Not Just Technologists appeared first on Cyber Security News.