Category: CyberSecurityNews

New Wonderland Android Malware with Bidirectional SMS-Stealing Capabilities Stealing OTPs
22
Dec
2025

New Wonderland Android Malware with Bidirectional SMS-Stealing Capabilities Stealing OTPs

A sophisticated new Android malware family called Wonderland has emerged as a significant threat to users in Uzbekistan and the…

Hackers Exploiting .onmicrosoft.com Domains to Launch TOAD Scam Attack
22
Dec
2025

Hackers Exploiting .onmicrosoft.com Domains to Launch TOAD Scam Attack

Cybercriminals are increasingly weaponizing legitimate Microsoft infrastructure to bypass security filters and trick users into falling for Telephone-Oriented Attack Delivery…

Lies-in-the-Loop Attack Turns AI Safety Dialogs into Remote Code Execution Attack
22
Dec
2025

Lies-in-the-Loop Attack Turns AI Safety Dialogs into Remote Code Execution Attack

A newly discovered attack technique has exposed a critical weakness in artificial intelligence code assistants by weaponizing their built-in safety…

125,000 IPs WatchGuard Firebox Devices Exposed to Internet Vulnerable to RCE Attacks
22
Dec
2025

125,000 IPs WatchGuard Firebox Devices Exposed to Internet Vulnerable to RCE Attacks

The Shadowserver Foundation identified approximately 125,000 WatchGuard Firebox firewall devices worldwide at risk due to a critical vulnerability actively exploited….

Hackers Using Phishing Tools to Access M365 Accounts via OAuth Device Code
22
Dec
2025

Hackers Using Phishing Tools to Access M365 Accounts via OAuth Device Code

Threat actors are now targeting Microsoft 365 accounts using a growing attack method known as OAuth device code phishing. This…

Multiple Exim Server Vulnerabilities Let Attackers Seize Control of the Server
22
Dec
2025

Multiple Exim Server Vulnerabilities Let Attackers Seize Control of the Server

Security researchers at the National Institute of Standards and Technology (NIST) have uncovered critical security flaws in the Exim mail…

Now Admins Can Block External Users in Microsoft Teams From Defender Portal
22
Dec
2025

Now Admins Can Block External Users in Microsoft Teams From Defender Portal

Microsoft is set to enhance the security integration between Microsoft Teams and Microsoft Defender for Office 365 with a new…

Threat Actors are Hiring Insiders in Banks, Telecoms, and Tech from $3,000 to $15,000 for Access or Data
22
Dec
2025

Threat Actors are Hiring Insiders in Banks, Telecoms, and Tech from $3,000 to $15,000 for Access or Data

Cyber criminals are changing their tactics by recruiting insiders within organizations instead of relying on traditional attack methods like brute…

U.S. DOJ Charged 54 in Connection With ATM Hacking Attack by Deploying Ploutus Malware
22
Dec
2025

U.S. DOJ Charged 54 in Connection With ATM Hacking Attack by Deploying Ploutus Malware

The U.S. Department of Justice (DOJ) has charged 54 individuals in a sweeping crackdown on a transnational cyber-physical attack network….

DIG AI - Darknet AI Tool Enabling Threat Actors to Launch Sophisticated Attacks
22
Dec
2025

DIG AI – Darknet AI Tool Enabling Threat Actors to Launch Sophisticated Attacks

A new and ominous player has emerged in the rapidly expanding landscape of “Shadow AI.” Researchers at Resecurity have identified…

100+ Cisco Secure Email Devices Exposed to Zero‑Day Exploited in the Wild
21
Dec
2025

100+ Cisco Secure Email Devices Exposed to Zero‑Day Exploited in the Wild

Security researchers have identified at least 120 Cisco Secure Email Gateway and Cisco Secure Email and Web Manager devices vulnerable…

Claude Opus 4.5 Now Integrated with GitHub Copilot
20
Dec
2025

Claude Opus 4.5 Now Integrated with GitHub Copilot

GitHub has announced the general availability of Claude Opus 4.5, Anthropic’s advanced AI model, across its Copilot platform. This integration…