Cyber Security News

During the 12-day conflict between Israel and Iran in June 2025, a sophisticated network of Iranian-linked cyber threat actors launched coordinated digital operations against critical infrastructure sectors worldwide. The campaign demonstrated unprecedented coordination between military operations and state-sponsored cyberattacks, targeting financial institutions, government agencies, and media organizations across multiple countries. The cyber offensive involved a […]

The post IRGC Hacker Groups Attacking Targeted Financial, Government, and Media Organizations appeared first on Cyber Security News.

In a sophisticated campaign first observed in October 2024, attackers have begun leveraging a legitimate driver to disable antivirus software across compromised networks. By abusing the ThrottleStop.sys driver—originally designed by TechPowerUp to manage CPU throttling—the malware gains kernel‐level memory access to terminate security processes at will. Initial access is most often achieved through stolen RDP […]

The post Hackers Use Legitimate Drivers to Kill Antivirus Processes and Lower The System’s Defenses appeared first on Cyber Security News.

Sophisticated attack vectors unveiled that exploit hybrid Active Directory and Microsoft Entra ID environments, demonstrating how attackers can achieve complete tenant compromise through previously unknown lateral movement techniques. These methods, presented at Black Hat USA 2025, expose critical vulnerabilities in Microsoft’s authentication infrastructure that allow unauthorized access to Exchange Online, SharePoint, and Entra ID without […]

The post New Active Directory Lateral Movement Techniques that Bypasses Authentication and Exfiltrate Data appeared first on Cyber Security News.

Data Loss Prevention (DLP) software is a critical cybersecurity solution designed to protect sensitive data from leaving an organization’s network. In an era where data is a company’s most valuable asset, and regulatory penalties for data breaches are severe, DLP is no longer just a luxury but a necessity. It provides a comprehensive defense by […]

The post 10 Best Data Loss Prevention Software in 2025 appeared first on Cyber Security News.

Cybersecurity teams have confronted a rising threat from a novel “EDR killer” payload in recent months, commonly referred to as AVKiller, which has been observed disabling endpoint defenses to facilitate the deployment of ransomware. First detected in mid-2024, this tool leverages the HeartCrypt packer-as-a-service to obscure its true functionality and slip past traditional static signature […]

The post HeartCrypt-Packed EDR Killer Tools ‘AVKiller’ Actively Used in Ransomware Attacks appeared first on Cyber Security News.

Nvidia Corporation has issued a strong statement asserting that its graphics processing units (GPUs) contain no backdoors, kill switches, or spyware, directly addressing growing concerns from policymakers about potential hardware-based control mechanisms.  The semiconductor giant’s declaration comes as some industry observers and government officials propose requiring mandatory remote disable capabilities in critical computing infrastructure, a […]

The post Nvidia Says No Backdoors, No Kill Switches, and No Spyware in its Chips appeared first on Cyber Security News.

Two sophisticated ransomware operations have emerged as significant threats to managed service providers (MSPs) and small businesses, with the Akira and Lynx groups deploying advanced attack techniques that combine stolen credentials with vulnerability exploitation. These ransomware-as-a-service (RaaS) operations have collectively compromised over 365 organizations, demonstrating their effectiveness in targeting high-value infrastructure providers that serve multiple […]

The post Akira and Lynx Ransomware Attacking Managed Service Providers With Stolen Login Credential and Vulnerabilities appeared first on Cyber Security News.

Cybersecurity researchers have observed a new social engineering campaign attributed to North Korea’s Lazarus Group in recent weeks that leverages fake camera and microphone errors to force targets into running malicious scripts. Victims, primarily in the finance and technology sectors, report receiving invitations to remote job interviews or technical assessments that abruptly stall, displaying messages […]

The post Lazarus Hackers Trick Users To Believe Their Camera or Microphone is Blocked to Deliver PyLangGhost RAT appeared first on Cyber Security News.

In a sophisticated campaign uncovered in early 2024, cybercriminals have begun distributing malicious Ethereum smart contracts masquerading as lucrative trading bots. These weaponized contracts leverage Web3 development platforms such as Remix to entice victims into deploying code that appears to execute arbitrage strategies, only to siphon deposited funds into attacker-controlled wallets. Instead of conducting legitimate […]

The post Threat Actors Weaponize Smart Contracts to Drain User Crypto Wallets of More Than $900k appeared first on Cyber Security News.

A sophisticated new cyber campaign has emerged targeting Windows users through a deceptive malware variant known as ToneShell, which masquerades as the legitimate Google Chrome browser. The advanced persistent threat (APT) group Mustang Panda, known for its strategic targeting of government and technology sectors, has deployed this latest tool as part of an ongoing espionage […]

The post Mustang Panda Attacking Windows Users With ToneShell Malware Mimic as Google Chrome appeared first on Cyber Security News.

The Ukrainian threat intelligence group UAC-0099 has significantly evolved its cyber warfare capabilities, deploying a sophisticated new malware toolkit targeting Ukrainian state authorities, Defense Forces, and defense industrial enterprises. The National Cyber Incident Response Team CERT-UA has documented a series of coordinated attacks employing HTA (HTML Application) files as the primary delivery mechanism for the […]

The post UAC-0099 Hackers Weaponizing HTA Files to Deliver MATCHBOIL Loader Malware appeared first on Cyber Security News.

Google has confirmed that one of its corporate Salesforce instances was compromised in June by the threat group tracked as UNC6040. This incident is part of a Salesforce attack campaign involving voice phishing attacks aimed at stealing sensitive data from organizations’ Salesforce environments, followed by extortion demands. The breach highlights the growing risks of social […]

The post Google’s Salesforce Instances Hacked in Ongoing Attack – Hackers Exfiltrate User Data appeared first on Cyber Security News.

Cybercriminals have escalated their phishing operations by incorporating generative artificial intelligence tools to create sophisticated replicas of government websites, marking a significant evolution in social engineering tactics. A recent campaign targeting Brazilian citizens demonstrates how threat actors are exploiting AI-powered platforms like DeepSite AI and BlackBox AI to construct convincing duplicates of official government portals, […]

The post Threat Actors Leveraging GenAI for Phishing Attacks Impersonating Government Websites appeared first on Cyber Security News.

Danish jewellery giant Pandora has disclosed a significant data breach that compromised customer information through a third-party vendor platform.  The company has begun notifying affected customers, starting with Italian markets, about the cybersecurity incident that resulted in unauthorized access to personal data. Key Takeaways1. Supply-chain breach via third-party vendor exposed customer names, phone numbers, and […]

The post Global Jewellery Brand Pandora Suffers Hacked – Customer Data Exposed appeared first on Cyber Security News.

Rockwell Automation has disclosed three critical memory corruption vulnerabilities in its Arena® Simulation software that could allow threat actors to execute arbitrary code remotely on affected systems.  The security flaws, identified as CVE-2025-7025, CVE-2025-7032, and CVE-2025-7033, carry a high CVSS 4.0 base score of 8.4 and affect all versions 16.20.09 and prior.  The vulnerabilities were […]

The post Rockwell Arena Simulation Vulnerabilities Let Attackers Execute Malicious Code Remotely appeared first on Cyber Security News.

The emergence of DevilsTongue marks a significant escalation in mercenary spyware capabilities, leveraging advanced Windows-based techniques to infiltrate high-value targets worldwide. First observed in campaigns dating back to 2019, this modular malware aggressively exploits zero-day browser vulnerabilities and weaponized documents to gain initial access. Once deployed, it establishes a stealthy presence, exfiltrating sensitive data from […]

The post Sophisticated DevilsTongue Windows Spyware Tracking Users Globally appeared first on Cyber Security News.

Austin, TX, USA, August 6th, 2025, CyberNewsWire SpyCloud Investigations, now with AI Insights, empowers security teams to act decisively with finished intelligence built from billions of breach, malware, and phishing records. SpyCloud, the leader in identity threat protection, today announced a significant enhancement to its SaaS Investigations solution: the integration of advanced AI-powered insights that […]

The post SpyCloud Enhances Investigations Solution With AI-Powered Insights –Revolutionizing Insider Threat and Cybercrime Analysis appeared first on Cyber Security News.

WhatsApp has unveiled a comprehensive security enhancement that implements a “pause, question, and verify” protocol to protect users from sophisticated messaging scams.  The platform has simultaneously disrupted over 6.8 million accounts linked to criminal scam centers in the first half of 2025, while introducing automated detection algorithms and contextual safety overlays to help users identify […]

The post WhatsApp’s New Security Feature Allows Users to Pause, Question, and Verify Malicious Messages appeared first on Cyber Security News.

A sophisticated new malware campaign has emerged that weaponizes fake CAPTCHA verification pages to trick users into executing malicious PowerShell commands, marking a significant evolution in browser-based attack methodologies. The campaign, dubbed “ClickFix,” represents what cybersecurity experts are calling a next-generation mutation of traditional fake browser update scams that dominated the threat landscape throughout 2024. […]

The post CAPTCHAgeddon – New ClickFix Attack Leverages Fake Captcha to Deliver Malware Payload appeared first on Cyber Security News.

A sophisticated evasion technique employed by Akira ransomware affiliates, exploiting legitimate Windows drivers to bypass antivirus and endpoint detection and response (EDR) systems during recent SonicWall VPN attack campaigns.  The attacks, which have escalated from late July through early August 2025, demonstrate the threat actors’ evolving tactics to maintain persistence and avoid detection in compromised […]

The post Akira Ransomware Uses Windows Drivers to Bypass AV/EDR in SonicWall Attacks appeared first on Cyber Security News.