Aggregator

The cybersecurity landscape has witnessed a significant surge in information-stealing malware, with Lumma emerging as one of the most prevalent and sophisticated threats targeting Windows systems globally. This C++-based information stealer has rapidly gained traction in underground markets, establishing itself as a formidable malware-as-a-service (MaaS) operation that has infected hundreds of thousands of computers worldwide. […]

The post Lumma Password Stealer Attack Infection Chain and Its Escalation Tactics Uncovered appeared first on Cyber Security News.

A significant security vulnerability has been discovered in BeyondTrust’s Privilege Management for Windows solution, allowing local authenticated attackers to escalate their privileges to the administrator level.  The flaw, designated as CVE-2025-2297 with a CVSSv4 score of 7.2, affects all versions before 25.4.270.0 and has been classified as high severity.  The vulnerability stems from improper handling […]

The post BeyondTrust Privilege Management for Windows Vulnerability Let Attackers Escalate Privileges appeared first on Cyber Security News.

BeyondTrust has disclosed a critical privilege escalation vulnerability in its Privilege Management for Windows solution that could allow local authenticated attackers to gain administrator-level access to compromised systems. The security flaw, tracked as CVE-2025-2297, affects versions before 25.4.270.0 and carries a CVSSv4 score of 7.2, classified as high severity. Vulnerability Details and Impact The vulnerability stems […]

The post BeyondTrust Privilege Management Flaw Lets Hackers Escalate System Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

You must login to view this content

The agency has two months to publish its final rule. It will not meet that mark, but a new CISA director has the tools to move the program forward.

The post CISA is facing a tight CIRCIA deadline. Here’s how Sean Plankey can attempt to meet it appeared first on CyberScoop.

Joint international advisory warns of evolving social engineering tactics and new DragonForce ransomware deployment targeting commercial facilities A collaboration of international cybersecurity agencies issued an urgent updated advisory on July 29, 2025, highlighting the escalating threat posed by the Scattered Spider cybercriminal group, which has intensified attacks against critical infrastructure and commercial facilities sectors with […]

The post Global Authorities Shared IoCs and TTPs of Scattered Spider Behind Major VMware ESXi Ransomware Attacks appeared first on Cyber Security News.