Cyber Security News

Logicube’s Falcon-NEO2 Forensic Imager Achieves Project VIC Validation; Now VICS Data Compliant and Endorsed for Law Enforcement Forensic Use Kindred Tech and Logicube, Inc. are proud to announce that the Falcon-NEO2, Logicube’s Best-In-Class digital forensic imaging solution, has successfully completed validation testing and is now VICS data compliant. This marks a major advancement in the global interoperability of forensic […]

The post Logicube’s Falcon®-NEO2 Forensic Imager Achieves Project VIC Validation; Now VICS Data Compliant appeared first on Cyber Security News.

Malware doesn’t need fancy tools to be dangerous. Sometimes, all it takes is WMIC, a quiet, native utility that’s still doing damage.   In the past weeks, we’ve seen a consistent pattern in some ANY.RUN sandbox sessions: malware keeps reaching for WMIC to do its dirty work.   Let’s take a closer look at five WMIC command […]

The post Top 5 WMIC Commands Used By Malware  appeared first on Cyber Security News.

The digital frontlines of modern conflict have expanded dramatically in 2025, with state-sponsored hackers from China, Russia, North Korea, and Iran executing sophisticated attacks against energy grids, telecommunications networks, and transportation systems worldwide. These operations, often masked as routine cybercrime, are reshaping national security paradigms while testing the resilience of democracies and allied partnerships. China’s […]

The post Global Powers Intensify Cyber Warfare with Covert Digital Strikes on Critical Systems appeared first on Cyber Security News.

Adobe has released a critical security update for its popular design software Illustrator, addressing a severe vulnerability that could allow attackers to execute arbitrary code on targeted systems.  The security bulletin details a heap-based buffer overflow vulnerability that affects multiple versions of the software on both Windows and macOS platforms. The security flaw, identified as […]

The post Critical Adobe Illustrator Vulnerability Let Attackers Execute Malicious Code appeared first on Cyber Security News.

A new attack vector where cybercriminals are weaponizing Google Calendar invites to deliver malware, using a sophisticated obfuscation technique involving just a single visible character that hides malicious code. This discovery highlights how threat actors are evolving their tactics to bypass traditional security measures by exploiting trusted platforms. In March 2025, security researchers at Aikido […]

The post Weaponized Google Calendar Invites Delivers Malicious Payload With Just One Character appeared first on Cyber Security News.

Samsung has disclosed a critical security vulnerability (CVE-2025-4632) affecting its MagicINFO 9 Server platform, a widely deployed content management system used for digital signage across retail, transportation, healthcare, and corporate environments worldwide.  The flaw allows unauthenticated attackers to write arbitrary files with system-level privileges, potentially leading to complete system compromise. Critical Path Traversal in Samsung […]

The post Samsung MagicINFO 9 Server Vulnerability Let Attackers Write Arbitrary File appeared first on Cyber Security News.

Adobe has released critical security updates for Photoshop on both Windows and macOS platforms after discovering multiple severe vulnerabilities that could allow attackers to execute arbitrary code on victims’ systems.  The security bulletin addresses three critical flaws affecting Photoshop 2025 (version 26.5 and earlier) and Photoshop 2024 (version 25.12.2 and earlier). Multiple Critical Flaws Discovered […]

The post Adobe Photoshop Vulnerability Let Attackers Execute Arbitrary Code appeared first on Cyber Security News.

A newly disclosed security flaw in Microsoft Defender for Endpoint could allow attackers with local access to elevate their privileges to SYSTEM level, potentially gaining complete control over affected systems.  The vulnerability, tracked as CVE-2025-26684, was patched as part of Microsoft’s May 2025 Patch Tuesday security updates released yesterday. Security researchers identified the vulnerability as […]

The post Microsoft Defender Vulnerability Allows Attackers to Elevate Privileges appeared first on Cyber Security News.

Google Threat Intelligence has launched a new blog series aimed at empowering security professionals with advanced threat hunting techniques, kicking off with a deep dive into detecting malicious .desktop files on Linux systems. .desktop files, standard configuration files in Linux desktop environments, define how applications are launched and displayed. Following the Desktop Entry Specification, these […]

The post Google Threat Intelligence Launches Actionable Technique To Hunt for Malicious .Desktop Files appeared first on Cyber Security News.

Microsoft has issued a security advisory regarding a new vulnerability in Active Directory Certificate Services (AD CS) that could allow attackers to perform denial-of-service attacks over a network.  The vulnerability, identified as CVE-2025-29968, affects multiple versions of Windows Server and has been assigned an “Important” severity rating with a CVSS score of 6.5/5.7. The security […]

The post Microsoft Warns of AD CS Vulnerability Let Attackers Deny Service Over a Network appeared first on Cyber Security News.

A sophisticated phishing operation exploiting compromised Indiana government sender accounts to distribute fraudulent TxTag toll collection messages.  The campaign, which emerged this week, leverages the GovDelivery communications platform to lend legitimacy to the scam emails targeting unsuspecting recipients nationwide. Sophisticated Phishing Targets Indiana Toll Users  The phishing emails, which appear to originate from legitimate Indiana […]

The post Hacking Abusing GovDelivery For TxTag ‘Toll Charges’ Phishing Attack appeared first on Cyber Security News.

Critical vulnerabilities were identified in TheGem, a premium WordPress theme with more than 82,000 installations worldwide.  Researchers identified two separate but interconnected vulnerabilities in TheGem theme versions 5.10.3 and earlier.  When combined, these vulnerabilities create a dangerous attack vector that could lead to remote code execution and complete site compromise. “The downloaded file is copied […]

The post 82,000+ WordPress Sites Exposed to Remote Code Execution Attacks appeared first on Cyber Security News.

Microsoft’s May 2025 Patch Tuesday has addressed several critical vulnerabilities in Windows Remote Desktop services that could allow attackers to execute malicious code remotely. Security experts are urging users to apply these patches immediately to safeguard their systems against potential exploits. Among the 72 flaws fixed in this month’s security update, two critical Remote Desktop […]

The post Windows Remote Desktop Vulnerability Let Attackers Execute Malicious Code Over Network appeared first on Cyber Security News.

Microsoft has rolled out Windows 11 Insider Preview Build 26200.5600 (KB5058493) to the Dev Channel, bringing a host of new features, improvements, and fixes for Windows Insiders. Announced by Amanda Langowski and Brandon LeBlanc, this update introduces enhanced Copilot+ PC experiences, refined system functionalities, and support for enterprise users, while addressing several bugs from previous […]

The post Microsoft Windows 11 Insider Preview Build 26200.5600 Released appeared first on Cyber Security News.

Microsoft released two significant cumulative updates for Windows 11, KB5058411 and KB5058405, targeting improved security and system performance across various versions of the operating system. These updates, part of Microsoft’s monthly quality update cycle, address critical security vulnerabilities and introduce key fixes to enhance user experience. Microsoft’s released this update along with may 2025 Patch […]

The post Microsoft Rolls Out Windows 11 Cumulative Updates KB5058411 and KB5058405 With May Patch Tuesday appeared first on Cyber Security News.

Microsoft has patched a critical zero-day vulnerability in the Windows Desktop Window Manager (DWM) Core Library, tracked as CVE-2025-30400, which was actively exploited in the wild to grant attackers SYSTEM-level privileges on affected systems. The flaw, disclosed as part of Microsoft’s May 2025 Patch Tuesday, underscores the persistent risks posed by privilege escalation bugs in […]

The post Windows DWM 0-Day Vulnerability Allows Attackers to Escalate Privileges appeared first on Cyber Security News.

Microsoft has patched an actively exploited zero-day vulnerability in the Windows Ancillary Function Driver for WinSock (afd.sys) as part of its May 2025 Patch Tuesday release. Tracked as CVE-2025-32709, this “use-after-free” vulnerability allowed attackers to elevate privileges and gain administrator access to compromised systems. Security experts are urging organizations to prioritize patching this vulnerability immediately, […]

The post Windows Ancillary for WinSock 0-Day Vulnerability Let Attackers Escalate Privileges appeared first on Cyber Security News.

Microsoft has disclosed a critical memory corruption vulnerability in its Scripting Engine (CVE-2025-30397), which allows unauthorized attackers to execute code remotely over a network. The flaw, classified as “Important” and tracked under CWE-843 (Type Confusion), was released as part of the company’s May 2025 Patch Tuesday security updates. The vulnerability arises from the Scripting Engine’s […]

The post Microsoft Scripting Engine 0-Day Vulnerability Enables Remote Code Execution Over Network appeared first on Cyber Security News.

Microsoft has confirmed that threat actors are actively exploiting two critical vulnerabilities in the Windows Common Log File System (CLFS) driver to gain SYSTEM-level privileges on compromised systems. The vulnerabilities, tracked as CVE-2025-32706 and CVE-2025-32701, were addressed in the May 2025 Patch Tuesday security update released on May 13, 2025. Critical Vulnerabilities Under Active Exploitation […]

The post Windows Common Log File System 0-Day Vulnerability Actively Exploited in the Wild appeared first on Cyber Security News.

Microsoft has released its Patch Tuesday updates for May 2025, addressing a total of 78 vulnerabilities across its product ecosystem, with five identified as actively exploited zero-day flaws. The updates cover a wide range of software, including Windows, Microsoft Office, Azure, Visual Studio, and more, urging users and administrators to apply patches immediately to mitigate […]

The post Microsoft Patch Tuesday May 2025: 72 Vulnerabilities Fixed, Including 5 Actively Exploited Zero-Day appeared first on Cyber Security News.