Cyber Security News

Microsoft is set to revolutionize email security transparency with the introduction of AI-powered explanations for email submission results in Microsoft Defender for Office 365.  This groundbreaking feature, leveraging large language models (LLMs), will provide clear, human-readable rationales for why messages are classified as spam, phishing, or clean, marking a significant advancement in cybersecurity communication and […]

The post Microsoft Defender for Office 365 to Provide Detailed Results for Spam, Phishing or Clean Emails appeared first on Cyber Security News.

A notorious threat actor has allegedly listed a previously unknown—or “0day”—exploit for Intelbras routers on a prominent hacker forum. This exploit poses significant risks for many users and organizations that rely on Intelbras hardware for their networking needs.  The sale of such a zero-day exploit is prompting close monitoring from security researchers and professionals, given […]

The post Hackers Allegedly Selling Intelbras Router 0-Day Exploit on Hacker Forums appeared first on Cyber Security News.

Charlotte-based steel giant Nucor Corporation disclosed a significant cybersecurity incident where threat actors gained unauthorized access to the company’s information technology infrastructure.  The breach prompted temporary production shutdowns across multiple facilities as the company implemented emergency containment protocols and engaged federal law enforcement authorities to investigate the intrusion. According to the SEC filing report, Nucor’s […]

The post Steelmaker Nucor Hacked – Attackers Gained Unauthorized Access to IT Systems appeared first on Cyber Security News.

A sophisticated botnet campaign targeting digital video recorders (DVRs) has emerged as a significant threat to surveillance infrastructure worldwide, with cybercriminals exploiting vulnerable IoT devices to build massive botnets capable of large-scale distributed denial-of-service attacks. RapperBot, a variant of the notorious Mirai malware, has been systematically compromising DVR systems to gain unauthorized access to surveillance […]

The post RapperBot Attacking DVRs to Gain Access Over Surveillance Cameras to Record Video appeared first on Cyber Security News.

In our fast-paced, interconnected world, the dangers of cyberattacks are becoming more frequent and complex. That’s why it’s more important than ever to stay updated and aware of the risks. Every week, our newsletter offers a simple roundup of the most important news, expert opinions, and practical tips to help you protect your online information […]

The post Weekly Cybersecurity News Recap – Top Vulnerabilities, Threat and Data Breaches appeared first on Cyber Security News.

A threat actor has reportedly put up for sale a sophisticated FortiGate API exploit tool on a dark web marketplace, igniting significant concern within the cybersecurity community. The tool, which is being marketed for a price of $12,000 and comes with escrow services to facilitate transactions, is claimed to target Fortinet’s FortiOS systems by exploiting […]

The post Threat Actor Allegedly Selling FortiGate API Exploit Tool Targeting FortiOS appeared first on Cyber Security News.

A critical buffer overflow vulnerability in OpenVPN’s data channel offload driver for Windows has been discovered, allowing local attackers to crash Windows systems by sending maliciously crafted control messages. The vulnerability, identified as CVE-2025-50054, affects the ovpn-dco-win driver versions 1.3.0 and earlier, as well as version 2.5.8 and earlier, which has been the default virtual […]

The post Critical OpenVPN Driver Vulnerability Allows Attackers to Crash Windows Systems appeared first on Cyber Security News.

DuckDuckGo has significantly upgraded its Scam Blocker feature to protect users against a broader range of digital threats, including sham e-commerce platforms, fake cryptocurrency exchanges, and “scareware” tactics.  This enhancement comes as consumers reported $12.5 billion in fraud losses to the FTC in 2024 alone.  Unlike competitors relying on Google’s tools, DuckDuckGo’s proprietary system processes […]

The post DuckDuckGo Rolls Out New Scam Blocker to Protect Users from Online Threats appeared first on Cyber Security News.

As an employee have been managing projects in remote, hybrid, and traditional work environments, employees have always faced the same challenge: the inability to understand where time, actually is spent. Regular tasks are not completed on time as they are supposed to be, meetings are always over time, and progress reports are rarely in tandem […]

The post How Smart Timesheet Software Is Changing the Way of Work appeared first on Cyber Security News.

Microsoft has acknowledged a significant bug affecting OneDrive personal accounts that is causing search results to appear blank, preventing users from locating files they know exist within their cloud storage. The tech giant is actively investigating the issue, which appears to impact a subset of users, though the company has not provided an estimated timeline […]

The post Microsoft Warns of OneDrive Bug that Causes Searches to Appear Blank appeared first on Cyber Security News.

Microsoft unveiled significant security enhancements for Windows 365 Cloud PCs on June 18, 2025, introducing new default configurations that prioritize data protection and system integrity.  The updates include disabling clipboard, drive, USB, and printer redirections by default, while enabling advanced security features like virtualization-based security (VBS), Credential Guard, and hypervisor-protected code integrity (HVCI) for Windows […]

The post Microsoft Announces New Security Defaults for Windows 365 Cloud PCs appeared first on Cyber Security News.

Cybersecurity researchers have uncovered a significant resurgence of the Prometei botnet, a sophisticated malware operation targeting Linux servers for cryptocurrency mining and credential theft. This latest campaign, observed since March 2025, demonstrates the evolving nature of cryptomining malware and its persistent threat to enterprise infrastructure worldwide. The Prometei botnet represents a dual-threat malware family encompassing […]

The post Prometei Botnet Attacking Linux Servers to Mine Cryptocurrency appeared first on Cyber Security News.

Cybersecurity professionals across East and Southeast Asia are facing a sophisticated new threat as China-linked attackers deploy a weaponized MSI installer disguised as a legitimate WhatsApp setup package. This malicious campaign represents a significant escalation in social engineering tactics, leveraging the popularity and trust associated with the widely-used messaging platform to infiltrate corporate and personal […]

The post Beware of Weaponized MSI Installer Mimic as WhatsApp Delivers Modified XWorm RAT appeared first on Cyber Security News.

The largest distributed denial-of-service (DDoS) attack ever documented was successfully stopped by Cloudflare in mid-May 2025, with attackers unleashing a devastating 7.3 terabits per second (Tbps) attack that delivered 37.4 terabytes of malicious traffic in just 45 seconds.  This unprecedented cyberattack targeted a hosting provider customer using Cloudflare’s Magic Transit service and represents a 12% […]

The post Record Breaking 7.3 Tbps DDoS Attack Blasting 37.4 Terabytes in Just 45 Seconds appeared first on Cyber Security News.

In an era where cyber threats are becoming increasingly sophisticated and quantum computing looms on the horizon, traditional digital security measures must evolve. One of the most critical technologies in software trust and distribution—code signing—is undergoing a significant transformation. CodeSign Secure v3.02 is the next evolution in this domain, bringing post-quantum cryptography (PQC) to the […]

The post CodeSign Secure v3.02: Future of Code Signing with PQC appeared first on Cyber Security News.

A sophisticated new threat actor known as Mocha Manakin has emerged in the cybersecurity landscape, employing an increasingly popular social engineering technique called “paste and run” to deceive users into executing malicious scripts on their systems. This deceptive method has gained significant traction among cybercriminals due to its effectiveness in bypassing traditional security measures and […]

The post Mocha Manakin Using Paste and Run Technique to Trick Users Into Downloading Malicious Payloads appeared first on Cyber Security News.

In a concerning development for internet users, cybercriminals have devised a sophisticated new technique to manipulate Google search results, effectively poisoning them to display fraudulent contact information. Unlike traditional phishing schemes that rely on fake websites, this novel approach leverages legitimate corporate websites while subtly altering displayed phone numbers, creating a nearly undetectable scam vector […]

The post Threat Actors Poisoning Google Search Results to Display The Scammer’s Phone Number Instead of Real Number appeared first on Cyber Security News.

A sophisticated malware campaign targeting ComfyUI, a popular AI image generation framework, has successfully compromised at least 695 servers worldwide, security researchers have discovered. The attack represents a significant escalation in threats against AI infrastructure, exploiting vulnerabilities in ComfyUI to deploy a lightweight but highly persistent backdoor dubbed “Pickai.” The campaign first emerged in February […]

The post Hackers Exploit ComfyUI 700+ AI Image Generation Servers to Deploy Malware appeared first on Cyber Security News.

A severe security vulnerability has been discovered in the widely-used Insomnia API Client that allows attackers to execute arbitrary code through malicious template injection. The vulnerability, tracked as CVE-2025-1087 and assigned a critical CVSS score of 9.3, affects the popular API testing tool developed by Kong and remains exploitable in the latest version 11.2.0 despite […]

The post Insomnia API Client Vulnerability Arbitrary Code Execution via Template Injection appeared first on Cyber Security News.

Cybercriminals have discovered a sophisticated new method to distribute malicious remote access tools by exploiting Vercel, a legitimate frontend hosting platform, to host convincing phishing pages that deliver weaponized versions of LogMeIn software. This emerging threat demonstrates how attackers increasingly abuse trusted infrastructure to bypass security measures and gain unauthorized access to victims’ systems. The […]

The post Threat Actors Leverage Hosting Platform Vercel to Deliver Remote Access Malware appeared first on Cyber Security News.