Category: CyberSecurityNews

RubyGems Malware Attack Weaponizes 60+ Packages to Steal Credentials from Social Media and Marketing Tools
08
Aug
2025

RubyGems Malware Attack Weaponizes 60+ Packages to Steal Credentials from Social Media and Marketing Tools

Threat actors began slipping malicious code into legitimate RubyGems packages, disguising infostealers as social media automation tools in early 2023….

PyPI Released Advisory to Prevent ZIP Parser Confusion Attacks on Python Package Installers
08
Aug
2025

PyPI Released Advisory to Prevent ZIP Parser Confusion Attacks on Python Package Installers

In recent months, security researchers have uncovered a novel attack vector targeting Python package installers through ambiguities in the ZIP…

US Confirms Shutdown of BlackSuit Ransomware That Hacked Over 450 Organizations
08
Aug
2025

US Confirms Shutdown of BlackSuit Ransomware That Hacked Over 450 Organizations

U.S. authorities have announced the successful dismantling of the BlackSuit ransomware operation, a notorious group linked to attacks on more…

Columbia University Data Breach - Hackers Stolen 870,000 Individuals Personal and Financial Data
08
Aug
2025

Columbia University Data Breach – Hackers Stolen 870,000 Individuals Personal and Financial Data

Columbia University has disclosed a major cybersecurity incident where an unauthorized third party accessed and extracted a significant volume of…

Windows User Account Control Bypassed Using Character Editor to Escalate Privileges
08
Aug
2025

Windows User Account Control Bypassed Using Character Editor to Escalate Privileges

A sophisticated new technique that exploits the Windows Private Character Editor to bypass User Account Control (UAC) and achieve privilege…

Exploiting ECS Protocol on EC2 to Exfiltrate Cross-Task IAM and Execution Role Credentials
08
Aug
2025

Exploiting ECS Protocol on EC2 to Exfiltrate Cross-Task IAM and Execution Role Credentials

A sophisticated technique dubbed “ECScape” that allows malicious containers running on Amazon Elastic Container Service (ECS) to steal AWS credentials…

Threat Actors Weaponize Malicious Gopackages to Deliver Obfuscated Remote Payloads
08
Aug
2025

Threat Actors Weaponize Malicious Gopackages to Deliver Obfuscated Remote Payloads

Cybersecurity researchers have uncovered a sophisticated malware campaign targeting the Go ecosystem through eleven malicious packages that employ advanced obfuscation…

Biggest Ever GreedyBear Attack With 650 Hacking Tools Stolen $1 Million from Victims
08
Aug
2025

Biggest Ever GreedyBear Attack With 650 Hacking Tools Stolen $1 Million from Victims

A sophisticated cybercriminal operation known as GreedyBear has orchestrated one of the most extensive cryptocurrency theft campaigns to date, deploying…

Flipper Zero 'DarkWeb' Firmware Bypasses Rolling Code Security on Major Vehicle Brands
08
Aug
2025

Flipper Zero ‘DarkWeb’ Firmware Bypasses Rolling Code Security on Major Vehicle Brands

A new and custom firmware for the popular Flipper Zero multi-tool device is reportedly capable of bypassing the rolling code…

CISA Releases Emergency Advisory Urges Feds to Patch Exchange Server Vulnerability by Monday
08
Aug
2025

CISA Releases Emergency Advisory Urges Feds to Patch Exchange Server Vulnerability by Monday

CISA has issued an emergency advisory directing all Federal Civilian Executive Branch agencies to mitigate a newly disclosed Microsoft Exchange…

08
Aug
2025

Flipper Zero ‘DarkWeb’ Firmware Bypasses Rolling Code Security on Major Vehicle Brands

A new and custom firmware for the popular Flipper Zero multi-tool device is reportedly capable of bypassing the rolling code…

Guided Selling in 3D Product Configurators
08
Aug
2025

Guided Selling in 3D Product Configurators

People don’t want to guess when they buy something – especially something complex or customizable. They want to feel like…