Cyber Security News

Phishing kits are evolving fast. Threat actors behind toolkits like Tycoon2FA, EvilProxy, and Sneaky2FA are getting smarter, setting up infrastructure that bypasses 2FA and mimics trusted platforms like Microsoft 365 and Cloudflare to steal user credentials without raising red flags.  But if you’re part of a SOC or threat intel team, you don’t have to […]

The post Tycoon2FA, EvilProxy, Sneaky2FA: How To Defend Against These Phishing Kit Attacks  appeared first on Cyber Security News.

A critical vulnerability in DNN (formerly DotNetNuke) that allows attackers to steal NTLM credentials through a sophisticated Unicode normalization bypass technique.  The vulnerability, tracked as CVE-2025-52488, affects one of the oldest open-source content management systems and demonstrates how defensive coding measures can be circumvented through clever exploitation of Windows and .NET quirks. Key Takeaways1. CVE-2025-52488 […]

The post DNN Vulnerability Let Attackers Steal NTLM Credentials via Unicode Normalization Bypass appeared first on Cyber Security News.

ThreatFabric researchers have identified a sophisticated new campaign by the Anatsa banking trojan specifically targeting mobile banking customers across the United States and Canada, marking the malware’s third major offensive against North American financial institutions. The latest campaign represents a significant escalation in the threat landscape, with cybercriminals successfully infiltrating the official Google Play Store […]

The post Anatsa Android Banking Malware from Google Play Targeting Users in the U.S. and Canada appeared first on Cyber Security News.

CISA has issued a critical warning regarding a path traversal vulnerability in the Ruby on Rails framework that poses significant risks to web applications worldwide.  The vulnerability, cataloged as CVE-2019-5418, affects the Action View component of Rails and enables attackers to exploit specially crafted accept headers in combination with render file: calls to access arbitrary […]

The post CISA Warns of Rails Ruby on Rails Path Traversal Vulnerability Exploited in Attacks appeared first on Cyber Security News.

Managed Security Service Providers (MSSPs) are specialized companies that deliver outsourced cybersecurity services to protect businesses from evolving cyber threats. These providers offer a range of services, including 24/7 threat monitoring, incident response, vulnerability management, and compliance support. MSSPs help organizations enhance their security posture by leveraging advanced tools like AI-driven analytics, endpoint protection, and […]

The post 25 Best Managed Security Service Providers (MSSP) In 2025 appeared first on Cyber Security News.

Multiple vulnerabilities in macOS SMBClient that could allow attackers to execute arbitrary code remotely and crash systems.  The vulnerabilities affecting the SMB filesystem client used for mounting remote file shares represent a significant security risk, as SMB has been the preferred file sharing protocol since macOS Big Sur.  Two of the flaws have been assigned […]

The post macOS SMBClient Vulnerability Allows Remote Code Execution and Kernel Crash appeared first on Cyber Security News.

CISA has issued an urgent warning regarding a critical vulnerability in Synacor’s Zimbra Collaboration Suite (ZCS) that is being actively exploited in cyberattacks.  The vulnerability, tracked as CVE-2019-9621, poses significant risks to organizations using the popular email and collaboration platform. Key Takeaways1. CISA alerts on an SSRF flaw (CVE-2019-9621) in Zimbra ZCS, actively exploited by […]

The post CISA Warns of Zimbra Collaboration Suite (ZCS) Vulnerability Exploited in Attacks appeared first on Cyber Security News.

In the digital-first landscape of 2025, network security has become a boardroom priority for every Chief Information Security Officer (CISO). With cyber threats evolving in complexity and frequency, organizations need robust, agile, and future-proof solutions to safeguard their digital assets. The right network security company not only protects sensitive data but also ensures regulatory compliance, […]

The post 10 Best Network Security Companies For CISO – 2025 appeared first on Cyber Security News.

Zero Trust Network Access (ZTNA) has become a cornerstone of modern cybersecurity strategies, especially as organizations embrace remote work, cloud adoption, and hybrid infrastructures. In 2025, ZTNA solutions are not just a trend they are a necessity for securing sensitive data, ensuring compliance, and enabling seamless access for distributed workforces. ZTNA platforms enforce the principle […]

The post 10 Best ZTNA Solutions (Zero Trust Network Access) In 2025 appeared first on Cyber Security News.

Scattered Spider’s phishing domain patterns provide actionable insights to proactively counter threats from the notorious cyber group responsible for recent airline attacks. Scattered Spider, a sophisticated cyber threat group known for aggressive social engineering and targeted phishing, is broadening its scope, notably targeting aviation alongside enterprise environments. Check Point Research has uncovered specific phishing domain […]

The post Researchers Expose Scattered Spider’s Tools, Techniques and Key Indicators appeared first on Cyber Security News.

New ransomware group employs advanced virtualization attack tactics to maximize damage and hinder organizational recovery efforts. A newly emerged ransomware group known as BERT has introduced a particularly disruptive capability that sets it apart from traditional ransomware operations: the ability to forcibly terminate ESXi virtual machines before encryption, significantly complicating recovery efforts for targeted organizations. […]

The post BERT Ransomware Forcibly Shut Down ESXi Virtual Machines to Disrupt Recovery appeared first on Cyber Security News.

A sophisticated SEO poisoning campaign targeting system administrators with malicious backdoor malware. Arctic Wolf security researchers have uncovered a dangerous search engine optimization (SEO) poisoning and malvertising campaign that has been targeting IT professionals since early June 2025. The campaign uses fake websites hosting Trojanized versions of popular IT tools, specifically PuTTY and WinSCP, to […]

The post Weaponized Versions of PuTTY and WinSCP Attacking IT Admins Via Search Results appeared first on Cyber Security News.

Call of Duty: WWII has been pulled offline after reports of a serious remote code execution vulnerability that allowed malicious players to take complete control of other gamers’ computers during live multiplayer matches. On Saturday, the Call of Duty development team announced that the PC version of Call of Duty: WWII had been taken offline […]

The post Gamers Playing Call of Duty Hacked – RCE Exploited Let Players Hack Other Players’ PCs appeared first on Cyber Security News.

Debian-based penetration testing distribution delivers enhanced tools and prepares for next-generation release. Parrot Security has announced the release of Parrot OS 6.4, marking a significant milestone for the Debian-based penetration testing and cybersecurity distribution. This latest version brings substantial updates to core security tools, including Metasploit Framework 6.4.71, Sliver C2 framework, Caido web security toolkit, […]

The post Parrot OS 6.4 Released With Update For Popular Penetration Testing Tools appeared first on Cyber Security News.

Microsoft has rolled out a significant enhancement to Windows Update functionality, introducing an intelligent notification system designed to keep users informed about critical security vulnerabilities and system compatibility issues.  This latest update transforms how Windows communicates potential security risks by implementing proactive alerts that respect user preferences while maintaining essential security awareness.  Key Takeaways1. Windows […]

The post Windows Update Gets Smarter: New Interface Puts Users in Control of Security Notifications appeared first on Cyber Security News.

A sophisticated new Linux evasion tool called RingReaper has emerged, leveraging the legitimate io_uring kernel feature to bypass modern Endpoint Detection and Response (EDR) systems.  This advanced red team tool demonstrates how attackers can exploit high-performance asynchronous I/O operations to conduct stealthy operations while remaining undetected by traditional security monitoring mechanisms. We recently discussed a […]

The post RingReaper – New Linux EDR Evasion Tool Using io_uring Kernel Feature appeared first on Cyber Security News.

As Amazon Prime Day 2025 approaches on July 8-11, millions of eager shoppers are preparing their wish lists and hunting for the best deals. However, cybercriminals are equally prepared, having registered over 1,000 new fake domains resembling Amazon in June alone. Alarmingly, 87% of these domains have already been flagged as malicious or suspicious, with […]

The post 1000+ New Fake Domains Mimic Amazon Prime Day Registered to Hunt Online Shoppers appeared first on Cyber Security News.

In 2025, Security Service Edge (SSE) solutions have become essential for organizations aiming to secure their rapidly evolving networks. As businesses embrace hybrid work, cloud-first strategies, and global digital operations, the demand for robust, cloud-delivered security has surged. SSE platforms integrate critical security functions such as Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), […]

The post Top 10 Security Service Edge (SSE) Solutions For Network Security – 2025 appeared first on Cyber Security News.

A significant vulnerability affecting modern Linux distributions that allows attackers with brief physical access to bypass Secure Boot protections through initramfs manipulation.  The attack exploits debug shells accessible during boot failures, enabling persistent malware injection that survives system reboots and maintains access even after users enter correct passwords for encrypted partitions. key Takeaways1. Attackers with […]

The post Linux Boot Vulnerability Allows Bypass of Secure Boot Protections on Modern Linux Systems appeared first on Cyber Security News.

In 2025, Managed Service Providers (MSPs) face unprecedented demands for secure, scalable, and flexible network solutions. As businesses accelerate digital transformation, the need for Network as a Service (NaaS) cloud-based, on-demand networking has surged. MSPs must deliver robust, secure connectivity to distributed workforces, hybrid cloud environments, and IoT deployments, all while minimizing capital expenses and […]

The post 10 Best Secure Network As A Service For MSP Providers – 2025 appeared first on Cyber Security News.