Category: CyberSecurityNews

Hackers Using Calendly-Themed Phishing Attack to Steal Google Workspace Account
03
Dec
2025

Hackers Using Calendly-Themed Phishing Attack to Steal Google Workspace Account

A sophisticated phishing campaign has emerged targeting business professionals with Calendly-themed emails, combining social engineering with advanced credential theft techniques….

Hackers Can Weaponize Claude Skills to Execute MedusaLocker Ransomware Attack
03
Dec
2025

Hackers Can Weaponize Claude Skills to Execute MedusaLocker Ransomware Attack

A new feature in Anthropic’s Claude AI, known as Claude Skills, has been identified as a potential vector for ransomware…

India’s New SIM-Binding Rule for WhatsApp, Signal, Telegram, and Other Messaging Platforms
03
Dec
2025

India’s New SIM-Binding Rule for WhatsApp, Signal, Telegram, and Other Messaging Platforms

India has implemented a mandatory SIM-binding requirement for messaging applications, including WhatsApp, Telegram, Signal, Snapchat, and others. The Department of…

Longwatch RCE Vulnerability Let Attackers Execute Remote Code With Elevated Privileges
03
Dec
2025

Longwatch RCE Vulnerability Let Attackers Execute Remote Code With Elevated Privileges

A critical security vulnerability has been discovered in Industrial Video & Control’s Longwatch video surveillance system, allowing attackers to execute…

29.7 Tbps DDoS Attack Via Aisuru botnet Breaks Internet With New World Record
03
Dec
2025

29.7 Tbps DDoS Attack Via Aisuru botnet Breaks Internet With New World Record

A new 29.7 Tbps distributed denial-of-service (DDoS) blast from the Aisuru botnet has set a new world record for attack…

Hackers Exploit Critical Yearn Finance’s yETH Pool Vulnerability to Steal $9 Million in Ethereum
03
Dec
2025

Hackers Exploit Critical Yearn Finance’s yETH Pool Vulnerability to Steal $9 Million in Ethereum

The decentralized finance sector witnessed a devastating breach targeting Yearn Finance’s yETH pool, resulting in the theft of approximately $9…

K7 Antivirus Vulnerability Allows Attackers Gain SYSTEM-level Privileges
03
Dec
2025

K7 Antivirus Vulnerability Allows Attackers Gain SYSTEM-level Privileges

A serious privilege escalation vulnerability in K7 Ultimate Security, an antivirus product from K7 Computing, was found by abusing named…

Shai-Hulud 2.0 Malware Attack Compromised 30,000 Repositories and Stolen 500 GitHub Usernames and Tokens
03
Dec
2025

Shai-Hulud 2.0 Malware Attack Compromised 30,000 Repositories and Stolen 500 GitHub Usernames and Tokens

A significant supply chain security breach has emerged with the discovery of Shai-Hulud 2.0, a sophisticated malware that has compromised…

Storm-0900 Hackers Leveraging Parking Ticket and Medical Test Themes in Massive Phishing Attack
03
Dec
2025

Storm-0900 Hackers Leveraging Parking Ticket and Medical Test Themes in Massive Phishing Attack

On Thanksgiving eve, a sophisticated threat actor known as Storm-0900 launched a high-volume phishing campaign targeting users across the United…

Microsoft Patched Windows LNK Vulnerability Abused by Hackers to Hide Malicious Code
03
Dec
2025

Microsoft Patched Windows LNK Vulnerability Abused by Hackers to Hide Malicious Code

Microsoft has silently patched a Windows shortcut vulnerability that threat actors have been exploiting since 2017 to hide malicious commands…

CISA Warns of Android 0-Day Vulnerability Exploited in Attacks
03
Dec
2025

CISA Warns of Android 0-Day Vulnerability Exploited in Attacks

CISA has added two critical Android Framework vulnerabilities to its Known Exploited Vulnerabilities catalog, signaling active exploitation in the wild….

MuddyWater Attacks Critical Infrastructure With Custom Malware and Improved Tactics
03
Dec
2025

MuddyWater Attacks Critical Infrastructure With Custom Malware and Improved Tactics

MuddyWater, an Iran-aligned cyberespionage group also known as Mango Sandstorm, has launched a new, highly targeted campaign against critical infrastructure…