Cyber Security News

The OpenSSL Corporation and the OpenSSL Foundation are issuing a final call for speaker proposals for the inaugural OpenSSL Conference 2025, taking place October 7–9, 2025, at the Vienna House by Wyndham Diplomat Prague. With just 7 days remaining until the submission deadline of June 30, 2025, the organisers invite global contributors from academia, industry, and the open-source community to submit their proposals and help […]

The post Speaker Proposal Deadline Approaches for OpenSSL Conference 2025 in Prague appeared first on Cyber Security News.

This comprehensive guide provides SOC analysts and MSSP teams with practical threat hunting techniques using advanced threat intelligence platforms. Modern threat actors continuously develop sophisticated evasion techniques, making traditional detection methods insufficient for comprehensive security operations. The strategies outlined here leverage behavioral indicators, MITRE ATT&CK framework integration, and advanced query capabilities to identify emerging threats, […]

The post Hands-on Cybersecurity Threat Hunting Guide for SOC Analysts and MSSPs appeared first on Cyber Security News.

McLaren Health Care, a major healthcare organization based in Grand Blanc, Michigan, has disclosed a significant data breach that compromised the personal information of 743,131 individuals nationwide. The breach notification, filed with the Office of the Maine Attorney General, reveals that the healthcare provider experienced an external system breach through hacking activities that occurred on […]

The post McLaren Health Care Data Breach Exposes 743,000 People Personal Information appeared first on Cyber Security News.

A sophisticated new jailbreak technique that defeats the safety mechanisms of today’s most advanced Large Language Models (LLMs). Dubbed the “Echo Chamber Attack,” this method leverages context poisoning and multi-turn reasoning to guide models into generating harmful content without ever issuing an explicitly dangerous prompt. The breakthrough research, conducted by Ahmad Alobaid at the Barcelona-based […]

The post New Echo Chamber Attack Jailbreaks Most AI Models by Weaponizing Indirect References appeared first on Cyber Security News.

Ukrainian government agencies have fallen victim to a sophisticated cyberattack campaign orchestrated by the UAC-0001 group, also known as APT28, targeting industrial control systems (ICS) devices running Windows operating systems as servers. The attacks, which occurred between March and April 2024, represent a significant escalation in state-sponsored cyber warfare tactics, demonstrating advanced techniques for penetrating […]

The post UAC-0001 Hackers Attacking ICS Devices Running Windows Systems as a Server appeared first on Cyber Security News.

A critical vulnerability, designated as CVE-2025-49825 that enables attackers to remotely bypass authentication controls in Teleport, a popular secure access platform.  The vulnerability affects multiple versions of Teleport infrastructure, prompting immediate security updates across all deployment environments.  Cloud customers have received automatic updates to their control plane versions, while organizations managing their own agents must […]

The post Critical Teleport Vulnerability Let Attackers Remotely Bypass Authentication Controls appeared first on Cyber Security News.

A Pakistan-based cyber espionage group known as APT36 or Transparent Tribe has launched a highly sophisticated phishing campaign targeting Indian defense personnel, utilizing credential-stealing malware designed to establish long-term infiltration within sensitive military networks. The campaign represents a significant escalation in nation-state cyber threats, employing advanced social engineering techniques that exploit the trust inherent in […]

The post APT36 Hackers Attacking Indian Defense Personnel in Sophisticated Phishing Attack appeared first on Cyber Security News.

IPFire has released Core Update 195 for version 2.29, marking a significant milestone with the introduction of native WireGuard VPN protocol support.  This highly anticipated update transforms the open-source firewall distribution by integrating modern VPN capabilities alongside comprehensive security enhancements and system improvements. WireGuard VPN Integration The standout feature of IPFire 2.29 Core Update 195 […]

The post Linux Firewall IPFire 2.29 Core Update 195 Released With VPN Protocol Support appeared first on Cyber Security News.

Microsoft is set to revolutionize email security transparency with the introduction of AI-powered explanations for email submission results in Microsoft Defender for Office 365.  This groundbreaking feature, leveraging large language models (LLMs), will provide clear, human-readable rationales for why messages are classified as spam, phishing, or clean, marking a significant advancement in cybersecurity communication and […]

The post Microsoft Defender for Office 365 to Provide Detailed Results for Spam, Phishing or Clean Emails appeared first on Cyber Security News.

A notorious threat actor has allegedly listed a previously unknown—or “0day”—exploit for Intelbras routers on a prominent hacker forum. This exploit poses significant risks for many users and organizations that rely on Intelbras hardware for their networking needs.  The sale of such a zero-day exploit is prompting close monitoring from security researchers and professionals, given […]

The post Hackers Allegedly Selling Intelbras Router 0-Day Exploit on Hacker Forums appeared first on Cyber Security News.

Charlotte-based steel giant Nucor Corporation disclosed a significant cybersecurity incident where threat actors gained unauthorized access to the company’s information technology infrastructure.  The breach prompted temporary production shutdowns across multiple facilities as the company implemented emergency containment protocols and engaged federal law enforcement authorities to investigate the intrusion. According to the SEC filing report, Nucor’s […]

The post Steelmaker Nucor Hacked – Attackers Gained Unauthorized Access to IT Systems appeared first on Cyber Security News.

A sophisticated botnet campaign targeting digital video recorders (DVRs) has emerged as a significant threat to surveillance infrastructure worldwide, with cybercriminals exploiting vulnerable IoT devices to build massive botnets capable of large-scale distributed denial-of-service attacks. RapperBot, a variant of the notorious Mirai malware, has been systematically compromising DVR systems to gain unauthorized access to surveillance […]

The post RapperBot Attacking DVRs to Gain Access Over Surveillance Cameras to Record Video appeared first on Cyber Security News.

In our fast-paced, interconnected world, the dangers of cyberattacks are becoming more frequent and complex. That’s why it’s more important than ever to stay updated and aware of the risks. Every week, our newsletter offers a simple roundup of the most important news, expert opinions, and practical tips to help you protect your online information […]

The post Weekly Cybersecurity News Recap – Top Vulnerabilities, Threat and Data Breaches appeared first on Cyber Security News.

A threat actor has reportedly put up for sale a sophisticated FortiGate API exploit tool on a dark web marketplace, igniting significant concern within the cybersecurity community. The tool, which is being marketed for a price of $12,000 and comes with escrow services to facilitate transactions, is claimed to target Fortinet’s FortiOS systems by exploiting […]

The post Threat Actor Allegedly Selling FortiGate API Exploit Tool Targeting FortiOS appeared first on Cyber Security News.

A critical buffer overflow vulnerability in OpenVPN’s data channel offload driver for Windows has been discovered, allowing local attackers to crash Windows systems by sending maliciously crafted control messages. The vulnerability, identified as CVE-2025-50054, affects the ovpn-dco-win driver versions 1.3.0 and earlier, as well as version 2.5.8 and earlier, which has been the default virtual […]

The post Critical OpenVPN Driver Vulnerability Allows Attackers to Crash Windows Systems appeared first on Cyber Security News.

DuckDuckGo has significantly upgraded its Scam Blocker feature to protect users against a broader range of digital threats, including sham e-commerce platforms, fake cryptocurrency exchanges, and “scareware” tactics.  This enhancement comes as consumers reported $12.5 billion in fraud losses to the FTC in 2024 alone.  Unlike competitors relying on Google’s tools, DuckDuckGo’s proprietary system processes […]

The post DuckDuckGo Rolls Out New Scam Blocker to Protect Users from Online Threats appeared first on Cyber Security News.

As an employee have been managing projects in remote, hybrid, and traditional work environments, employees have always faced the same challenge: the inability to understand where time, actually is spent. Regular tasks are not completed on time as they are supposed to be, meetings are always over time, and progress reports are rarely in tandem […]

The post How Smart Timesheet Software Is Changing the Way of Work appeared first on Cyber Security News.

Microsoft has acknowledged a significant bug affecting OneDrive personal accounts that is causing search results to appear blank, preventing users from locating files they know exist within their cloud storage. The tech giant is actively investigating the issue, which appears to impact a subset of users, though the company has not provided an estimated timeline […]

The post Microsoft Warns of OneDrive Bug that Causes Searches to Appear Blank appeared first on Cyber Security News.

Microsoft unveiled significant security enhancements for Windows 365 Cloud PCs on June 18, 2025, introducing new default configurations that prioritize data protection and system integrity.  The updates include disabling clipboard, drive, USB, and printer redirections by default, while enabling advanced security features like virtualization-based security (VBS), Credential Guard, and hypervisor-protected code integrity (HVCI) for Windows […]

The post Microsoft Announces New Security Defaults for Windows 365 Cloud PCs appeared first on Cyber Security News.

Cybersecurity researchers have uncovered a significant resurgence of the Prometei botnet, a sophisticated malware operation targeting Linux servers for cryptocurrency mining and credential theft. This latest campaign, observed since March 2025, demonstrates the evolving nature of cryptomining malware and its persistent threat to enterprise infrastructure worldwide. The Prometei botnet represents a dual-threat malware family encompassing […]

The post Prometei Botnet Attacking Linux Servers to Mine Cryptocurrency appeared first on Cyber Security News.