Category: CyberSecurityNews

McDonald’s AI Hiring Bot With Password ‘123456’ Leaks Millions of Job-Seekers Data
10
Jul
2025

McDonald’s AI Hiring Bot With Password ‘123456’ Leaks Millions of Job-Seekers Data

A severe security vulnerability in McDonald’s AI-powered hiring system has exposed the personal information of potentially 64 million job applicants…

Microsoft Confirms Teams Outage for Users, Investigation Underway
10
Jul
2025

Microsoft Confirms Teams Outage for Users, Investigation Underway

Microsoft acknowledged a significant outage affecting its popular communication platform, Microsoft Teams, leaving numerous users unable to access critical services….

Windows BitLocker Bypass Vulnerability Let Attackers Bypass Security Feature
09
Jul
2025

Windows BitLocker Bypass Vulnerability Let Attackers Bypass Security Feature

A critical security vulnerability in Windows BitLocker enables attackers to bypass the encryption feature through a sophisticated time-of-check time-of-use (TOCTOU)…

Microsoft 365 PDF Export LFI Vulnerability Allows Access to Sensitive Server Data
09
Jul
2025

Microsoft 365 PDF Export LFI Vulnerability Allows Access to Sensitive Server Data

A critical Local File Inclusion (LFI) vulnerability was recently discovered in Microsoft 365’s Export to PDF functionality, potentially allowing attackers…

Top 5 Remote-Access And RMM Tools Most Abused By Threat Actors 
09
Jul
2025

Top 5 Remote-Access And RMM Tools Most Abused By Threat Actors 

Remote monitoring and management (RMM) tools are a go-to for IT teams, but that same power makes them a favorite…

Reflectiz Now Available on the Datadog Marketplace
09
Jul
2025

Reflectiz Now Available on the Datadog Marketplace

Reflectiz, a leading cybersecurity company specializing in web exposure management, today announced a new integration with Datadog, Inc. (NASDAQ: DDOG), the…

Splunk Address Third-Party Packages Vulnerabilities in SOAR Versions
09
Jul
2025

Splunk Address Third-Party Packages Vulnerabilities in SOAR Versions

Splunk has released critical security updates addressing multiple vulnerabilities in third-party packages in SOAR versions 6.4.0 and 6.4.  Published on…

Microsoft Patches Wormable RCE Vulnerability in Windows and Windows Server
09
Jul
2025

Microsoft Patches Wormable RCE Vulnerability in Windows and Windows Server

Microsoft has released critical security updates to address CVE-2025-47981, a severe heap-based buffer overflow vulnerability in the SPNEGO Extended Negotiation…

VS Code Extension Weaponized With Two Lines of Code Leads to Supply Chain Attack
09
Jul
2025

VS Code Extension Weaponized With Two Lines of Code Leads to Supply Chain Attack

A sophisticated supply chain attack has compromised ETHcode, a popular Visual Studio Code extension for Ethereum development, through a malicious…

Chinese Hackers Exploit Microsoft Exchange Servers to Steal COVID-19 Research Data
09
Jul
2025

Chinese Hackers Exploit Microsoft Exchange Servers to Steal COVID-19 Research Data

A sophisticated cyberattack orchestrated by Chinese state-sponsored hackers has exposed vulnerabilities in the global cybersecurity infrastructure, targeting critical COVID-19 research…

Splunk Address Third Party Packages Vulnerabilities in Enterprise Versions
09
Jul
2025

Splunk Address Third Party Packages Vulnerabilities in Enterprise Versions

Splunk has released critical security updates addressing multiple Common Vulnerabilities and Exposures (CVEs) in third-party packages across Enterprise versions 9.4.3,…

SparkKitty Malware Attacking iOS and Android Users to Steal Gallery Images
09
Jul
2025

SparkKitty Malware Attacking iOS and Android Users to Steal Gallery Images

A sophisticated Trojan malware known as SparkKitty has been actively targeting iOS and Android devices since early 2024, infiltrating both…