Aggregator

Chinese national arrested in Milan after US issues arrest warrant for Hafnium attacks

The Record
1 day 23 hours ago
The Justice Department confirmed the arrest in a statement, unsealing a nine-count indictment on Tuesday accusing Xu and co-defendant Zhang Yu of being involved in “computer intrusions between February 2020 and June 2021, including the indiscriminate HAFNIUM computer intrusion campaign that compromised thousands of computers worldwide, including in the United States.”

Hackers Manipulate Search Results to Target IT Pros with Trojanized PuTTY and WinSCP

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
1 day 23 hours ago

Arctic Wolf has uncovered a cunning cybersecurity threat that exploits search engine optimization (SEO) poisoning and malvertising tactics to distribute Trojanized versions of widely used IT tools such as PuTTY and WinSCP. This campaign cunningly targets IT professionals and system administrators, individuals who frequently rely on these tools for secure file transfers and remote system […]

The post Hackers Manipulate Search Results to Target IT Pros with Trojanized PuTTY and WinSCP appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

Researchers Reveal Scatter Spider’s Tools, Tactics, and Key Indicators

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
1 day 23 hours ago

Check Point Research has revealed important details about the phishing domain patterns and advanced attack techniques of the infamous Scattered Spider organization, which has brought a new wave of cyberthreats under close investigation. Known for their aggressive social engineering tactics, this financially motivated group active since at least 2022 and comprising young individuals aged 19–22 […]

The post Researchers Reveal Scatter Spider’s Tools, Tactics, and Key Indicators appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

KB5062554 – Microsoft Releases Cumulative Update for Windows 10 With July 2025 Patch Tuesday

Cyber Security News
2 days ago

Microsoft rolled out its latest cumulative update for Windows 10, version 21H2 and 22H2, as well as Windows 10 Enterprise LTSC 2021 and Windows 10 IoT Enterprise LTSC 2021. The update, identified as KB5062554 (OS Builds 19044.6093 and 19045.6093), includes critical security fixes and quality improvements to enhance system stability and performance. Additionally, Microsoft issued […]

The post KB5062554 – Microsoft Releases Cumulative Update for Windows 10 With July 2025 Patch Tuesday appeared first on Cyber Security News.

Balaji N

CVE-2025-49756 | Microsoft 365 Apps for Enterprise Office Developer Platform risky encryption

Vuldb Updates
2 days ago
A vulnerability has been found in Microsoft 365 Apps for Enterprise and classified as problematic. This vulnerability affects unknown code of the component Office Developer Platform. The manipulation leads to risky cryptographic algorithm. This vulnerability was named CVE-2025-49756. Local access is required to approach this attack. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2025-49753 | Microsoft Windows Server 2008 R2 SP1 up to Server 2022 23H2 Routing/Remote Access Service heap-based overflow

Vuldb Updates
2 days ago
A vulnerability, which was classified as critical, was found in Microsoft Windows. This affects an unknown part of the component Routing/Remote Access Service. The manipulation leads to heap-based buffer overflow. This vulnerability is uniquely identified as CVE-2025-49753. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2025-49744 | Microsoft Windows up to Server 2025 Graphics Component heap-based overflow

Vuldb Updates
2 days ago
A vulnerability, which was classified as critical, has been found in Microsoft Windows. Affected by this issue is some unknown functionality of the component Graphics Component. The manipulation leads to heap-based buffer overflow. This vulnerability is handled as CVE-2025-49744. The attack needs to be approached locally. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2025-49742 | Microsoft Windows up to Server 2025 Graphics Component integer overflow

Vuldb Updates
2 days ago
A vulnerability classified as critical was found in Microsoft Windows. Affected by this vulnerability is an unknown functionality of the component Graphics Component. The manipulation leads to integer overflow. This vulnerability is known as CVE-2025-49742. The attack can be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2025-49740 | Microsoft Windows up to Server 2025 SmartScreen Security protection mechanism

Vuldb Updates
2 days ago
A vulnerability classified as critical has been found in Microsoft Windows. Affected is an unknown function of the component SmartScreen Security. The manipulation leads to protection mechanism failure. This vulnerability is traded as CVE-2025-49740. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

Managed ad