Aggregator

Cybersecurity researchers have uncovered a sophisticated new malware strain targeting macOS systems, dubbed “CoffeeLoader,” which employs advanced techniques to bypass endpoint security solutions and deliver Rhadamanthys shellcode payloads. The malware represents a significant evolution in threats targeting Apple’s ecosystem, demonstrating increasing complexity in evasion tactics. Initial analysis indicates that CoffeeLoader exploits legitimate system processes to […]

The post New Sophisticated Malware CoffeeLoader Bypasses Endpoint Security to Deploy Rhadamanthys Shellcode appeared first on Cyber Security News.

University security operations centers that hire and train students are a boon to state and local governments while giving much-needed Tier 1 cybersecurity training to undergraduates.

You can't escape Meta AI in WhatsApp even if you are based in one of the 41 European countries, with the feature now rolling out to more devices. [...]

Alleged Sale of 100K U.S. Gemini Cryptocurrency User Leads

Positive Technologies представила новую версию сканера защищенности кода веб-приложений.

A large-scale cyberattack has compromised approximately 150,000 legitimate websites by injecting malicious JavaScript to redirect visitors to Chinese-language gambling platforms. The campaign, first detected in February 2025 with 35,000 infected sites, has since expanded significantly, leveraging obfuscated scripts and iframe injections to hijack browsers. Attackers use domains like zuizhongyj[.]com to host payloads, which display full-screen […]

The post Threat Actors Compromise 150,000 Websites to Promote Chinese Gambling Platforms appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Het 1 Duits-Nederlands legerkorps (1GNC) is een binnen 20 dagen volledig wereldwijd inzetbaar hoofdkwartier. Het is in staat in een crisisgebied een internationale troepenmacht aan te sturen van meer dan 50.000 militairen. 1GNC stond de afgelopen 3 jaar onder leiding van luitenant-generaal Nico Tak. Vandaag droeg hij het commando op de Domplatz in Münster over aan zijn ranggenoot Peter Mirow.

A new analysis has uncovered connections between affiliates of RansomHub and other ransomware groups like Medusa, BianLian, and Play. The connection stems from the use of a custom tool that's designed to disable endpoint detection and response (EDR) software on compromised hosts, according to ESET. The EDR killing tool, dubbed EDRKillShifter, was first documented as used by RansomHub actors in

A vulnerability has been found in ansibleguy webui up to 0.0.20 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-36110. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in sagemathinc cocalc and classified as problematic. This issue affects some unknown processing of the component Markdown Parser. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-36109. The attack may be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as problematic. Affected is the function save_category of the file /admin/index.php?page=categories. The manipulation of the argument Name leads to cross site scripting. This vulnerability is traded as CVE-2024-5437. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in SourceCodester Laboratory Management System 1.0. It has been classified as problematic. Affected is an unknown function. The manipulation of the argument Department leads to cross site scripting. This vulnerability is traded as CVE-2024-35582. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability classified as problematic was found in Umbraco Umbraco.Commerce.Issues. This vulnerability affects unknown code of the component Print Handler. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-35240. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A sophisticated macOS malware loader platform known as “ReaderUpdate” has significantly evolved its capabilities, with researchers identifying new variants written in Nim and Rust programming languages. Despite being active since at least 2020, this threat has remained largely undetected by many security vendors. Initially distributed as a compiled Python binary, ReaderUpdate has expanded its arsenal […]

The post New macOS Malware ‘ReaderUpdate’ Upgraded Arsenal With Nim and Rust Variants appeared first on Cyber Security News.

​Microsoft says a known issue is causing Remote Desktop freezes on Windows Server 2025 systems after installing security updates released since the February 2025 Patch Tuesday. [...]

Google накопил штрафов на квинтиллионы, но каналы остаются заблокированными.

为了遵守欧盟的隐私法律，Meta 旗下社交网络 Facebook 和 Instagram 在欧盟、欧洲经济区和瑞士推出无广告的订阅服务。如果欧洲用户选择订阅，他们的个人数据将不会被用于广告。现在，Meta 准备将这一模式推广到英国。如果英国用户不想要被跟踪，他们将可以选择付费订阅。Meta 称定向广告让其社交平台能对用户免费。而根据 Meta 的财报，广告收入占到了该公司总收入的 96% 以上。Meta 正与英国的数据监管机构就订阅服务进行接触。

A vulnerability classified as critical was found in Mozilla Firefox up to 136.0.3 on Windows. Affected by this vulnerability is an unknown functionality. The manipulation leads to sandbox issue. This vulnerability is known as CVE-2025-2857. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

ESET researchers have uncovered new activity from the China-aligned APT group FamousSparrow, revealing two previously undocumented versions of their custom SparrowDoor backdoor. The group, thought to be inactive since 2022, compromised a US-based trade organization in the financial sector and a Mexican research institute in July 2024. The first variant closely resembles the CrowDoor malware […]

The post New FamousSparrow Malware Targets Hotels and Engineering Firms with Custom Backdoor appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability classified as problematic has been found in Alain-Aymerick Francois WP Cassify Plugin up to 2.3.5 on WordPress. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-30771. It is possible to launch the attack remotely. There is no exploit available.