Cyber Security News

Let’s Encrypt, the world’s largest certificate authority, has achieved a significant milestone by issuing its first SSL/TLS certificate for an IP address on July 1, 2025. This development marks a substantial shift in the certificate ecosystem, as IP address certificates have historically been available from only a handful of certificate authorities on a limited scale. […]

The post Let’s Encrypt Started to Issue SSL/TLS Certificate for IP Address appeared first on Cyber Security News.

Two high-severity vulnerabilities in Anthropic’s Model Context Protocol (MCP) Filesystem Server enable attackers to escape sandbox restrictions and execute arbitrary code on host systems.  The vulnerabilities, designated CVE-2025-53109 and CVE-2025-53110, affect all versions prior to 0.6.3 and represent a significant security risk as MCP adoption accelerates across enterprise environments where AI applications often run with […]

The post Anthropic’s MCP Server Vulnerability Allowed Attackers to Escape Sandbox and Execute Code appeared first on Cyber Security News.

Microsoft Corporation has confirmed a significant workforce reduction affecting approximately 9,000 employees, representing nearly 4% of its global workforce.  This strategic restructuring comes as the technology giant continues to navigate the complex landscape of artificial intelligence infrastructure investments while maintaining operational efficiency and shareholder value. Key Takeaways1. Microsoft confirms 9,000 job cuts, 4% workforce reduction across […]

The post Microsoft Confirms Laying Off 9,000 Employees, Impacting 4% of its Workforce appeared first on Cyber Security News.

The cybersecurity landscape has witnessed a dramatic escalation in pro-Russian hacktivist activities since the onset of 2025, with emerging alliances between established and newly formed groups launching increasingly sophisticated attacks against Western infrastructure. These cyber operations, driven by geopolitical tensions surrounding the Russia-Ukraine conflict, have evolved from simple website defacements to coordinated campaigns targeting critical […]

The post Pro-Russian Hackers Making New Alliances to Launch High-Profile Attacks appeared first on Cyber Security News.

The deluge of bargain-priced ads that flooded social networks during Latin America’s “Hot Sale 2025” has now been traced to a sprawling Chinese-built malware operation that weaponizes thousands of convincingly branded storefronts to harvest payment credentials. First noticed by Mexican journalist Ignacio Gómez Villaseñor while monitoring suspicious domains hosted on a single IP, the campaign […]

The post Beware of Chinese Fake e-Commerce Websites Mimic Apple, Wrangler Jeans and Abuses Payment Services Like MasterCard and PayPal appeared first on Cyber Security News.

Absolutely! Here’s a comprehensive, SEO-optimized, and human-readable review article, Top 10 Best Google Alternatives in 2025, with extended introductions (5-6 lines each) for every tool and all requested formatting. The article is structured for maximum user value, features a comparison table, and covers all major SEO factors. Each tool includes an in-depth introduction, specifications, features, […]

The post Top 10 Best Google Alternatives In 2025 appeared first on Cyber Security News.

The first quarter of 2025 has witnessed an unprecedented surge in ransomware attacks, with 2,314 victims listed across 74 unique data leak sites, representing a staggering 213% increase compared to the 1,086 victims recorded in the same period last year. This dramatic escalation marks a significant departure from the relatively stable ransomware landscape observed throughout […]

The post 213% Increase in Ransomware Attacks Targeting Organizations With First Quarter of 2025 appeared first on Cyber Security News.

A significant security vulnerability discovered in the widely used Sudo utility has remained hidden for over 12 years, potentially exposing millions of Linux and Unix systems to privilege escalation attacks.  The vulnerability identified as CVE-2025-32462 allows unauthorized users to gain root access on affected systems by exploiting the Sudo host option functionality. Key Takeaways1. 12-Year-Old […]

The post 12-Year-Old Sudo Linux Vulnerability Enables Privilege Escalation to Root User appeared first on Cyber Security News.

A hacktivist collective known as Keymous+ has emerged as a significant threat actor in the global cybersecurity landscape, claiming responsibility for over 700 distributed denial-of-service (DDoS) attacks throughout 2025. The group, which identifies itself as “North African hackers,” has been actively targeting organizations across Europe, North Africa, the Middle East, and parts of Asia since […]

The post Keymous+ Hacker Group Claims 700+ DDoS Attacks Around The Globe appeared first on Cyber Security News.

A newly disclosed critical vulnerability in Wing FTP Server has been assigned CVE-2025-47812 with a maximum CVSSv4 score of 10.0, allowing unauthenticated attackers to achieve complete server control.  The vulnerability, discovered by security researcher Julien Ahrens from RCE Security, affects all versions of Wing FTP Server up to and including version 7.4.3.  Key Takeaways1. CVE-2025-47812, […]

The post Wing FTP Server Max Severe Vulnerability Let Attackers Take Full Server Control appeared first on Cyber Security News.

Windows Shortcut (LNK) files, traditionally used for creating quick access links to applications and files, have emerged as a prominent attack vector in the cybersecurity landscape. These seemingly innocuous files, identifiable by their small arrow icon overlay, are increasingly being weaponized by threat actors to execute malicious payloads while maintaining a facade of legitimacy. The […]

The post Weaponization of LNK Files Surge by 50% and Primarily Used in Four Different Malware Categories appeared first on Cyber Security News.

Penetration testing, also known as ethical hacking, is a critical process in cybersecurity aimed at identifying and addressing vulnerabilities within systems, networks, and applications. By simulating real-world attacks, penetration testing helps organizations uncover weaknesses before malicious actors can exploit them. To execute these tests effectively, cybersecurity professionals rely on specialized tools designed to assess and […]

The post Top 30 Best Penetration Testing Tools – 2025 appeared first on Cyber Security News.

Cybersecurity has transformed from a niche technical field into a critical business priority that shapes organizational strategies worldwide. As we navigate through 2025, the cybersecurity industry continues to expand in response to increasingly sophisticated threats, digital transformation initiatives, and regulatory requirements. The global cybersecurity market is thriving, with projections showing growth to $345.4 billion by 2026, according to historical data.  This comprehensive report […]

The post 50 World’s Best Cyber Security Companies – 2025 appeared first on Cyber Security News.

A severe vulnerability in Cisco Unified Communications Manager (Unified CM) systems could allow remote attackers to gain root-level access to affected devices.  The vulnerability, designated CVE-2025-20309 with a maximum CVSS score of 10.0, affects Engineering Special releases and stems from hardcoded SSH credentials that cannot be modified or removed by administrators. Key Takeaways1. CVE-2025-20309 critical […]

The post Cisco Unified CM Vulnerability Allows Remote Attacker to Login As Root User appeared first on Cyber Security News.

A sophisticated smishing operation targeting tens of thousands of potential victims across Greater London has resulted in the sentencing of Ruichen Xiong, a Chinese student, to over a year in prison at Inner London Crown Court. The case represents a significant escalation in mobile-based fraud tactics, utilizing advanced SMS blasting technology to conduct large-scale credential […]

The post Chinese Student Charged for Running a Mass Smishing Campaign to Harvest Victims Personal Details appeared first on Cyber Security News.

Microsoft is strengthening its cybersecurity arsenal with the introduction of Mail Bombing Detection in Microsoft Defender for Office 365, a sophisticated feature designed to combat the growing threat of email bombing attacks. We have already notified the implementation of Microsoft Defender for Office 365, which will introduce advanced measures to mitigate email bombing attacks. This […]

The post New Email Bombing Detection in Office 365 to Detect Email Bombing Attacks appeared first on Cyber Security News.

The International Criminal Court (ICC) has successfully detected and contained a sophisticated cybersecurity incident that targeted the judicial institution late last week.  This marks the second major cyber attack of this type against the ICC in recent years, highlighting the persistent digital threats facing international judicial bodies.  Key Takeaways1. ICC suffered its second sophisticated cyber […]

The post International Criminal Court Hit by New Sophisticated Cyber Attack appeared first on Cyber Security News.

CISA has issued an urgent warning regarding two critical vulnerabilities in TeleMessage TM SGNL that threat actors are currently exploiting in active attack campaigns. The vulnerabilities, tracked as CVE-2025-48927 and CVE-2025-48928, pose significant security risks to organizations utilizing this communication platform, with CISA adding both flaws to its Known Exploited Vulnerabilities (KEV) catalog on July […]

The post CISA Warns of TeleMessage TM SGNL Vulnerabilities Exploited in Attacks appeared first on Cyber Security News.

Microsoft has announced significant modifications to its popular Authenticator application, with critical features being discontinued in the coming months.  Starting July 2025, the autofill functionality within Microsoft Authenticator will cease operations, followed by the complete removal of password accessibility features in August 2025.  Key Takeaways1. Automatic credential filling feature will stop working starting July 2025.2. […]

The post Microsoft Authenticator to Discontinue Password Support and Cease Operations by August 2025 appeared first on Cyber Security News.

A sophisticated Remote Access Trojan (RAT) campaign targeting Colombian organizations has emerged, employing advanced evasion techniques to establish persistent remote control over Windows systems. The malware, identified as DCRAT, represents a significant escalation in cyber threats against Latin American entities, utilizing government impersonation tactics to deceive victims into executing malicious payloads. The attack campaign leverages […]

The post DCRAT Attack Windows to Remotely Control, Keylogging, Screen Capture and Steal Personal Files appeared first on Cyber Security News.