Cyber Security News

Evan Frederick Light, a 22-year-old from Lebanon, Indiana, has been sentenced to 20 years in federal prison for orchestrating a sophisticated cyber intrusion that led to the theft of over $37 million in cryptocurrency.  The sentencing took place on February 6, 2025, and was announced by the U.S. Attorney Alison J. Ramsdell for the District […]

The post High School Dropout Sentenced to 20 Years for $38M Retirement Fund Hack appeared first on Cyber Security News.

Researchers have shed light recently on the sophisticated tactics, techniques, and procedures (TTPs) employed by North Korean hackers. This comprehensive analysis, spanning nearly three years, focuses on targeted digital threats against civil society organizations (CSOs) in South Korea. The research highlights the critical role of CSOs in identifying and mitigating these threats, leveraging direct engagement […]

The post Researchers Unveiled Tactics, Techniques, and Procedures Used by North Korean Hackers appeared first on Cyber Security News.

A recently discovered vulnerability in Ubuntu 22.04’s printing subsystem, specifically within the “ippusbxd” package, could have allowed attackers to execute arbitrary code on locked laptops. However, modern compiler features stepped in to mitigate the risk, preventing exploitation beyond a system crash. The vulnerability was identified during a code audit of the macOS printing subsystem, which […]

The post Ubuntu Printing Vulnerability Let Attackers Execute Arbitrary Code on Locked Laptops appeared first on Cyber Security News.

Apple has rolled out iOS 18.3.1 and iPadOS 18.3.1, addressing a Zero-day vulnerability exploited in targeted extremely sophisticated attacks by taking advantage of disabling the USB-restricted mode. Apple’s USB Restricted Mode is a security feature that prevents unauthorized access to data on an iOS device. It prevents USB accessories from connecting to a locked device after a […]

The post Apple 0-Day Vulnerability Exploited in “Extremely Sophisticated” Attacks in the Wild appeared first on Cyber Security News.

In a significant breakthrough against global cybercrime, Thai authorities announced today the arrest of four European nationals linked to the notorious 8Base ransomware group. The operation, codenamed “Phobos Aetor,” culminated in the seizure of the group’s dark web infrastructure and the apprehension of two men and two women accused of orchestrating ransomware attacks that affected […]

The post 8Base Ransomware Dark Web Site Seized, Four Operators Arrested appeared first on Cyber Security News.

A critical security vulnerability, CVE-2024-52875, has been identified in GFI KerioControl firewalls, affecting versions 9.2.5 through 9.4.5. This flaw, which can be exploited for remote code execution (RCE), has already drawn significant attention from cybercriminals, with thousands of unpatched systems worldwide now at risk. The vulnerability resides in several unauthenticated URI paths of the KerioControl […]

The post 12,000+ KerioControl Firewall Instances Vulnerable to 1-Click RCE Exploit appeared first on Cyber Security News.

Cybersecurity experts have observed a significant increase in the use of the NetSupport Remote Access Trojan (RAT) in recent months, a malicious tool that allows attackers to gain full control over compromised systems. This surge in activity has been linked to the “ClickFix” Initial Access Vector (IAV), a sophisticated social engineering technique that tricks users […]

The post NetSupport RAT Grant Attackers Full Access To Victims Systems appeared first on Cyber Security News.

A critical server-side request forgery (SSRF) vulnerability in Microsoft Power Platform’s SharePoint connector allowed attackers to harvest user credentials and impersonate victims across multiple services, including Power Apps, Power Automate, Copilot Studio, and Copilot 365. The patched flaw posed severe risks to organizations relying on SharePoint for data management and collaboration. The vulnerability, if exploited, […]

The post Microsoft SharePoint Connector Vulnerability Let Attackers Steal User’s Credentials appeared first on Cyber Security News.

GitHub has unveiled a groundbreaking update to its AI-powered coding assistant, GitHub Copilot, with the introduction of Agent Mode.  This new feature, available in preview for Visual Studio Code (VS Code) Insiders, empowers developers to autonomously complete complex coding tasks by combining advanced AI capabilities with workflow automation.  Alongside this, GitHub announced the general availability […]

The post GitHub Copilot’s New Agent Mode Let Developers Autonomously Complete Coding Tasks appeared first on Cyber Security News.

A recent analysis of over 1 million malware samples unveiled a trend where adversaries increasingly exploit the Application Layer of the Open System Interconnection (OSI) model to conduct stealthy Command-and-Control (C2) operations.  By leveraging trusted Application Layer Protocols, attackers are embedding malicious activities within legitimate network traffic, making detection by traditional security measures challenging. The […]

The post 1M+ Malware Samples Analysis Reveal Application Layer Abused for Stealthy C2 appeared first on Cyber Security News.

With the release of DeepSeek-V3 on December 25, 2024, the number of LLMjacking attacks in the cybersecurity space has significantly increased. Within hours of its launch, malicious actors had compromised the model, integrating it into OpenAI Reverse Proxy (ORP) systems to exploit stolen credentials and monetize unauthorized access.  This rapid exploitation highlights the evolving sophistication […]

The post LLM Hijackers Gained Stolen Access to DeepSeek-V3 Model Very Next Day After Release appeared first on Cyber Security News.

QR codes have become an integral part of our digital lives, offering quick access to websites, services, and even payment systems. However, their widespread use has also made them a prime target for scammers. A new threat, known as “quishing,” involves using fake QR codes to redirect users to fraudulent websites, steal personal data, and […]

The post Quishing via QR Codes Emerging As a Top Attack Vector Used by Hackers appeared first on Cyber Security News.

In a significant shift in the ransomware landscape, payments to attackers have decreased by approximately 35% year-over-year. This decline is attributed to increased law enforcement actions, improved international collaboration, and a growing trend among victims to refuse ransom demands. Here below we have mentioned all the key developments in 2024:- Shifts in Ransomware Tactics As […]

The post Ransomware Payments Dropped By 35%, As Victims Refusing To Pay appeared first on Cyber Security News.

A routine physical penetration test conducted by cybersecurity professionals took an unexpected turn when armed police arrested two security experts during a simulated breach at a corporate office in Malta. The incident involving miscommunication between the client and local authorities has sparked discussions about the importance of coordination in such high-stakes assessments. Physical penetration testing […]

The post Penetration Testers Arrested by Police During Authorized Physical Penetration Testing appeared first on Cyber Security News.

Researchers have uncovered a critical flaw in the Linux kernel that could allow attackers to execute remote code.  The vulnerability, which had been inactive for seven years, was uncovered while conducting routine research on the Linux kernel’s TCP subsystem. This bug, now identified as CVE-2024-36904, highlights the persistent risks in widely used open-source software. Discovery […]

The post Seven Years Old Linux Kernel Vulnerability Let Attackers Execute Remote Code appeared first on Cyber Security News.

Cisco has reportedly fallen victim to a significant data breach, with sensitive credentials from its internal network and domain infrastructure leaked online. The breach is allegedly linked to the Kraken ransomware group, which has published a dataset on its dark web blog. The attackers reportedly left a threatening message alongside the leaked data, suggesting they […]

The post Cisco Hacked – Ransomware Group Allegedly Breach Internal Network & Gained AD Access appeared first on Cyber Security News.

Reverse engineering has long been a challenging yet essential process for cybersecurity professionals, software analysts, and researchers.  With the introduction of GhidrAssist, a cutting-edge plugin for the popular reverse engineering platform Ghidra, the process becomes significantly more streamlined and efficient.  GhidrAssist integrates Large Language Models (LLMs) into Ghidra, offering a suite of AI-powered tools to […]

The post GhidrAssist Brings AI Features to Ghidra in Reverse Engineering appeared first on Cyber Security News.

Security researcher David Kennedy unveiled a novel attack technique known as “BYOTB” (Bring Your Own Trusted Binary) in a recent presentation at BSides London 2024, which leverages trusted binaries to bypass security measures and evade detection. This approach exploits the trust placed in legitimate software by using it in adversarial ways, making it challenging for […]

The post New ‘BYOTB’ Attack Exploits Trusted Binaries to Evade Detection, Researchers Reveal appeared first on Cyber Security News.

A cybersecurity enthusiast discovered the longest and most complicated passwords ever used by searching through a huge dataset of 31 million likely WPA WiFi passwords.  Typically, a password’s length and complexity directly affect its security. While diverse character sets prevent dictionary attacks, longer passwords exponentially lengthen the time needed for brute-force attempts. According to cybersecurity […]

The post World’s Longest and Strongest WiFi Passwords From 31 Million Passwords List appeared first on Cyber Security News.

A significant vulnerability has been identified in GitHub Enterprise Servers, allowing attackers to bypass SAML authentication and log in as other user accounts. This exploit leverages quirks in the libxml2 library, specifically related to XML entities, to deceive the verification process. The vulnerability, designated as CVE-2025-23369 and this security flaw highlights the importance of robust […]

The post SAML Bypass Authentication on GitHub Enterprise Servers To Login as Other User Account appeared first on Cyber Security News.