Aggregator

CVE-2025-11186 | Cookie Notice & Compliance for GDPR CCPA Plugin up to 2.5.8 on WordPress Shortcode cookies_accepted cross site scripting (EUVD-2025-198531)

7 months ago

A vulnerability, which was classified as problematic, has been found in Cookie Notice & Compliance for GDPR CCPA Plugin up to 2.5.8 on WordPress. Affected by this issue is the function cookies_accepted of the component Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-11186. The attack is possible to be carried out remotely. No exploit exists.

vuldb.com

Operation DreamJob Attacking Manufacturing Industries Using Job-related WhatsApp Web Message

Cyber Security News

7 months ago

In August 2025, a sophisticated cyber attack targeted an Asian subsidiary of a large European manufacturing organization through a deceptive job offer scheme. The intrusion campaign, identified as Operation DreamJob, demonstrates how threat actors continue to refine social engineering techniques to compromise high-value targets within the manufacturing sector. This attack specifically exploited WhatsApp Web messaging […]

The post Operation DreamJob Attacking Manufacturing Industries Using Job-related WhatsApp Web Message appeared first on Cyber Security News.

Tushar Subhra Dutta

New Sturnus Android Malware Reads WhatsApp, Telegram, Signal Chats via Accessibility Abuse

Hack Read

7 months ago

Sturnus, an advanced Android banking trojan, has been discovered by ThreatFabric. Learn how this malware bypasses end-to-end encryption on Signal and WhatsApp, steals bank credentials using fake screens, and executes fraudulent transactions.

Deeba Ahmed

CrowdStrike catches insider feeding information to hackers

Bleeping Computer.

7 months ago

American cybersecurity firm CrowdStrike has confirmed that an insider shared screenshots taken on internal systems with hackers after they were leaked on Telegram by the Scattered Lapsus$ Hunters threat actors. [...]

Sergiu Gatlan