Aggregator

OFAC Sanctions DPRK IT Worker Network Funding WMD Programs Through Fake Remote Jobs

The Hackers News
1 week 4 days ago
The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) has sanctioned six individuals and two entities for their involvement in the Democratic People's Republic of Korea (DPRK) information technology (IT) worker scheme with an aim to defraud U.S. businesses and generate illicit revenue for the regime to fund its weapons of mass destruction (WMD) programs. "The North Korean
The Hacker News

New iOS Exploit With Advanced iPhone Hacking Tools Attacking Users to Steal Personal Data

Cyber Security News
1 week 4 days ago

A sophisticated full-chain iOS exploit kit dubbed DarkSword, actively deployed by multiple commercial surveillance vendors and state-sponsored threat actors since at least November 2025 to steal sensitive personal data from iPhone users across four countries. DarkSword is a full-chain iOS exploit that chains six distinct vulnerabilities, four of which were leveraged as zero-days, to achieve complete […]

The post New iOS Exploit With Advanced iPhone Hacking Tools Attacking Users to Steal Personal Data appeared first on Cyber Security News.

Guru Baran

The High Cost of Slow Triage: How to Make Tier 1 the Fastest Layer in Your SOC 

Cyber Security News
1 week 4 days ago

Why do so many SOCs still struggle to move quickly even with strong detection tools in place? In many cases, the real bottleneck is Tier 1 triage. When alerts take too long to validate, resources are wasted on noise, senior teams get pulled into low-value cases, and real incidents take longer to confirm.  By giving Tier […]

The post The High Cost of Slow Triage: How to Make Tier 1 the Fastest Layer in Your SOC  appeared first on Cyber Security News.

Balaji N

CVE-2025-67829 | Mura up to 10.1.13 beanFeed.cfc getQuery sortDirection sql injection

VulDB Recent Entries
1 week 4 days ago
A vulnerability classified as critical was found in Mura up to 10.1.13. Impacted is the function getQuery of the file beanFeed.cfc. Such manipulation of the argument sortDirection leads to sql injection. This vulnerability is traded as CVE-2025-67829. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.
vuldb.com

CVE-2025-55041 | MuraCMS up to 10.1.10 User Management cUsers.cfc getUserManager groupId cross-site request forgery

VulDB Recent Entries
1 week 4 days ago
A vulnerability marked as problematic has been reported in MuraCMS up to 10.1.10. This affects the function getUserManager of the file cUsers.cfc of the component User Management Handler. The manipulation of the argument groupId leads to cross-site request forgery. This vulnerability is documented as CVE-2025-55041. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

Managed ad