Cyber Security News

The LightSpy advanced persistent threat (APT) group has significantly upgraded its surveillance capabilities with a 100+ command framework targeting Android, iOS, Windows, macOS, and Linux systems, according to new infrastructure analysis.  This modular malware now employs refined data exfiltration techniques against social media platforms and expanded device control mechanisms, marking a strategic shift toward omnidirectional […]

The post LightSpy Expanded With 100+ Commands to Attack Android, iOS, Windows, macOS & Linux Users appeared first on Cyber Security News.

A critical server-side request forgery (SSRF) vulnerability (CVE-2025-27090) has been identified in the Sliver C2 framework’s teamserver implementation, enabling attackers to establish unauthorized TCP connections through vulnerable servers. Affecting versions 1.5.26 through 1.5.42 and pre-release builds below commit Of340a2, this vulnerability exposes red team infrastructure to potential IP leakage, lateral movement, and traffic interception. The […]

The post Sliver C2 Server Vulnerability Let Attackers Open a TCP connection to Read Traffic appeared first on Cyber Security News.

Security researchers from MASSGRAVE have unveiled TSforge, a groundbreaking tool exploiting vulnerabilities in Microsoft’s Software Protection Platform (SPP) to activate every version of Windows from Windows 7 onward, including Office suites and add-ons. This exploit marks the first successful direct attack against SPP’s core cryptographic defenses since its introduction in Windows Vista. At its core, […]

The post TSforge – A New Tool Exploits Every Version of Windows Activation appeared first on Cyber Security News.

The Wireshark Foundation has released version 4.4.4 of its widely used network protocol analyzer, addressing a high-severity vulnerability that could allow attackers to trigger denial-of-service (DoS) conditions by injecting malicious packets. The update resolves CVE-2025-1492, a flaw in the Bundle Protocol and CBOR dissectors that caused crashes, infinite loops, and memory leaks when processing specially […]

The post Wireshark 4.4.4 Released With Fix for Vulnerability That Triggers DoS Attack appeared first on Cyber Security News.

A sophisticated ransomware attack leveraging a critical Atlassian Confluence vulnerability (CVE-2023-22527, CVSS 10.0) has been uncovered, culminating in the deployment of LockBit Black ransomware across enterprise networks within two hours of initial compromise. The attackers orchestrated a multi-stage intrusion involving credential theft, lateral movement via RDP, and automated ransomware distribution using legitimate tools like PDQ […]

The post Hackers Exploited Confluence Server Vulnerability To Deploy LockBit Ransomware appeared first on Cyber Security News.

A critical 0-day vulnerability in Parallels Desktop virtualization software has been publicly disclosed, enabling local attackers to escalate privileges to root-level access on macOS systems.  All versions of Parallels Desktop, including the most recent 20.2.1 (55876), are vulnerable to the flaw identified as CVE-2024-34331, which results from insufficient security controls in the application’s macOS installer […]

The post Parallels Desktop 0-Day Vulnerability Gain Root Privileges – PoC Released appeared first on Cyber Security News.

DeepSeek has launched FlashMLA, a groundbreaking Multi-head Latent Attention (MLA) decoding kernel optimized for NVIDIA’s Hopper GPU architecture, marking the first major release of its Open Source Week initiative. This innovative tool achieves unprecedented performance metrics of 3000 GB/s memory bandwidth and 580 TFLOPS computational throughput on H800 GPUs, setting new benchmarks for AI inference […]

The post DeepSeek Unveils FlashMLA, A Decoding Kernel That’s Make Things Blazingly Fast appeared first on Cyber Security News.

Security researchers have uncovered a critical SQL injection vulnerability (CVE-2025-26794) in Exim, the widely-used mail transfer agent (MTA) that powers over 60% of internet mail servers.  The flaw enables authenticated attackers to execute arbitrary SQL commands through specially crafted ETRN SMTP transactions when specific configuration conditions exist. The vulnerability was reported through responsible disclosure channels […]

The post Exim Mail Transfer Vulnerability Let Attackers Inject Malicious SQL Queries appeared first on Cyber Security News.

Security researchers have released proof-of-concept (PoC) exploit code for CVE-2025-20029, a high-severity command injection vulnerability affecting F5’s BIG-IP application delivery controllers.  The flaw, which carries a CVSS v3.1 score of 8.8, enables authenticated attackers to execute arbitrary system commands through improper neutralization of special elements in the iControl REST API and TMOS Shell (tmsh).  Successful […]

The post PoC Exploit Released for F5 BIG-IP Command Injection Vulnerability appeared first on Cyber Security News.

The rapid evolution of quantum computing has increased global efforts to future-proof cryptographic systems, with Google taking a crucial step by integrating quantum-safe digital signatures into its Cloud Key Management Service (Cloud KMS).  The update introduces support for NIST-standardized post-quantum cryptography (PQC) algorithms FIPS 204 and FIPS 205 in preview, enabling organizations to safeguard digital […]

The post Google Unveils Quantum-Safe Digital Signatures in Cloud KMS appeared first on Cyber Security News.

A significant security vulnerability (CVE-2024-54961) has been identified in Nagios XI 2024R1.2.2, enabling unauthenticated attackers to retrieve sensitive user information, including usernames and email addresses.  This flaw, classified as an information disclosure vulnerability (CWE-200), exposes organizational user directories to potential misuse in phishing campaigns or credential-stuffing attacks. Nagios XI Vulnerability The vulnerability resides in improper […]

The post Nagios XI Vulnerability Allows Unauthenticated Users to View Other User Details & Email  appeared first on Cyber Security News.

Researchers uncovered critical zero-day vulnerabilities in Fluent Bit, a ubiquitous logging utility embedded in cloud infrastructure across major providers like AWS, Google Cloud, and Microsoft Azure.  The flaws tracked as CVE-2024-50608 and CVE-2024-50609 (CVSS 8.9), exploit null pointer dereference weaknesses in Fluent Bit’s Prometheus Remote Write and OpenTelemetry plugins.  With over 15 billion downloads and […]

The post Fluent Bit 0-day Vulnerabilities Exposes Billions of Production Environments to Cyber Attacks appeared first on Cyber Security News.

Ubiquiti Networks has issued an urgent security advisory addressing five critical vulnerabilities in its UniFi Protect camera ecosystem, including two flaws enabling unauthenticated remote code execution (RCE) attacks.  The vulnerabilities, discovered during the 2025 Pwn2Own Toronto hacking competition and disclosed through Trend Micro’s Zero Day Initiative (ZDI), affect both camera firmware and the management application, […]

The post UniFi Protect Camera Vulnerability Allows Remote Code Execution Attacks appeared first on Cyber Security News.

Attackers infiltrated Bybit Exchange’s Ethereum cold wallet infrastructure to steal $1.46 billion in digital assets through sophisticated interface manipulation and social engineering tactics. The incident represents the largest theft from a centralized crypto exchange since Mt. Gox’s 2014 collapse, exposing critical vulnerabilities in institutional-grade multisignature (multisig) systems previously considered impenetrable. Security firm TRM Labs attributes […]

The post Record Breaking Crypto Hack – Attackers Stolen $1.46 Billion From Bybit Exchange appeared first on Cyber Security News.

Ransomware is essential to stay vigilant and protect your devices and systems by keeping software up to date, using anti-virus software, avoiding opening attachments or links from unknown sources, and regularly backing up important data. Ransomware is malware that encrypts a victim’s files and demands a ransom payment in exchange for the decryption key.  The […]

The post Top 10 Best Ransomware Protection Tools – 2025 appeared first on Cyber Security News.

Email is one of the most widely used forms of online communication. It is sent and received through a client program, such as Microsoft Outlook, Gmail, or a web-based interface.  Email is a popular communication technique, but it may not always be secure. Interception, reading, and modification are possible during transmission, especially since many email […]

The post 10 Best Email Security Gateways In 2025 appeared first on Cyber Security News.

Penetration testing, or “pentesting,” is a cybersecurity practice where ethical hackers simulate cyberattacks to identify vulnerabilities in systems, networks, or applications. It helps organizations uncover weaknesses before malicious actors exploit them, enhancing their security posture. Penetration testing includes various types such as network, web application, wireless, social engineering, and cloud testing. Depending on the tester’s […]

The post 50 World’s Best Penetration Testing Companies – 2025 appeared first on Cyber Security News.

A new AI-powered chatbot, BlackBastaGPT, trained on over 1 million leaked internal messages from the Black Basta ransomware gang. Hudson Rock released the tool just days after the unprecedented data breach. It enables researchers to dissect the group’s operations, financial strategies, and evolving attack methodologies through natural language queries. This innovation follows the February 11, […]

The post BlackBastaGPT – A ChatGPT Powered Tool to Uncover Ransomware Group Tactics appeared first on Cyber Security News.

Cisco Talos has uncovered a sophisticated cyberespionage campaign by the state-aligned “Salt Typhoon” group targeting U.S. telecommunications infrastructure since late 2024. While credential theft remains their primary entry method, researchers confirmed exploitation of Cisco’s CVE-2018-0171 Smart Install Remote Code Execution vulnerability in at least one breach. The attackers maintained persistent access for over three years […]

The post Salt Typhoon Hackers Exploit Cisco Vulnerability To Gain Access To U.S. Telecom Networks appeared first on Cyber Security News.

A critical security flaw in Sitevision CMS versions 10.3.1 and older has exposed SAML authentication signing keys, enabling potential authentication bypass and session hijacking. The vulnerability, tracked as CVE-2022-35202, stems from weak auto-generated passwords protecting Java keystores, which could be extracted and brute-forced to compromise private keys. Sitevision, a widely adopted content management system in […]

The post Auto-Generated Password Vulnerability In Sitevision Leaks Signing Key appeared first on Cyber Security News.