Category: CyberSecurityNews

HeartCrypt-Packed EDR Killer Tools ‘AVKiller’ Actively Used in Ransomware Attacks
07
Aug
2025

HeartCrypt-Packed EDR Killer Tools ‘AVKiller’ Actively Used in Ransomware Attacks

Cybersecurity teams have confronted a rising threat from a novel “EDR killer” payload in recent months, commonly referred to as…

Nvidia Says No Backdoors, No Kill Switches, and No Spyware in its Chips
07
Aug
2025

Nvidia Says No Backdoors, No Kill Switches, and No Spyware in its Chips

Nvidia Corporation has issued a strong statement asserting that its graphics processing units (GPUs) contain no backdoors, kill switches, or…

HashiCorp Vault 0-Day Vulnerabilities Let Attackers Execute Remote Code
07
Aug
2025

HashiCorp Vault 0-Day Vulnerabilities Let Attackers Execute Remote Code

Security researchers uncovered a series of critical zero-day vulnerabilities in HashiCorp Vault in early August 2025, the widely adopted secrets…

1.2 Million Healthcare Devices and Systems Found Exposed Online
07
Aug
2025

1.2 Million Healthcare Devices and Systems Found Exposed Online

Over 1.2 million internet-connected healthcare devices and systems with exposure that endanger patient data shown in new research by European cybersecurity…

07
Aug
2025

Gemini Exploited via Prompt Injection in Google Calendar Invite to Steal Emails, and Control Smart Devices

A sophisticated attack method exploits Google’s Gemini AI assistant through seemingly innocent calendar invitations and emails.  The attack, dubbed “Targeted…

Hackers Uses Social Engineering Attack to Gain Remote Access in 300 Seconds
07
Aug
2025

Hackers Uses Social Engineering Attack to Gain Remote Access in 300 Seconds

Threat actors successfully compromised corporate systems within just five minutes using a combination of social engineering tactics and rapid PowerShell…

Microsoft Exchange Server Vulnerability Enables Privelege Escalation
07
Aug
2025

Microsoft Exchange Server Vulnerability Enables Privelege Escalation

A critical security vulnerability in Microsoft Exchange Server hybrid deployments has been disclosed, allowing attackers with on-premises administrative access to…

Sophisticated DevilsTongue Windows Spyware Tracking Users Globally
06
Aug
2025

Sophisticated DevilsTongue Windows Spyware Tracking Users Globally

The emergence of DevilsTongue marks a significant escalation in mercenary spyware capabilities, leveraging advanced Windows-based techniques to infiltrate high-value targets…

Akira and Lynx Ransomware Attacking Managed Service Providers With Stolen Login Credential and Vulnerabilities
06
Aug
2025

Akira and Lynx Ransomware Attacking Managed Service Providers With Stolen Login Credential and Vulnerabilities

Two sophisticated ransomware operations have emerged as significant threats to managed service providers (MSPs) and small businesses, with the Akira…

Global Jewellery Brand Pandora Suffers Hacked
06
Aug
2025

Global Jewellery Brand Pandora Suffers Hacked

Danish jewellery giant Pandora has disclosed a significant data breach that compromised customer information through a third-party vendor platform.  The…

Lazarus Hackers Trick Users Into Believing Their Camera or Microphone is Blocked to Deliver PyLangGhost RAT
06
Aug
2025

Lazarus Hackers Trick Users Into Believing Their Camera or Microphone is Blocked to Deliver PyLangGhost RAT

Cybersecurity researchers have observed a new social engineering campaign attributed to North Korea’s Lazarus Group in recent weeks that leverages…

Google's Salesforce Instances Hacked in Ongoing Attack
06
Aug
2025

Google’s Salesforce Instances Hacked in Ongoing Attack

Google has confirmed that one of its corporate Salesforce instances was compromised in June by the threat group tracked as…