Category: CyberSecurityNews

Metasploit Releases 7 New Exploit Modules covering FreePBX, Cacti and SmarterMail
31
Jan
2026

Metasploit Releases 7 New Exploit Modules covering FreePBX, Cacti and SmarterMail

The latest update to the Metasploit Framework this week provides a significant enhancement for penetration testers and red teamers, introducing…

Attackers Using Hugging Face Hosting to Deliver Android RAT Payload
30
Jan
2026

Attackers Using Hugging Face Hosting to Deliver Android RAT Payload

A new Android threat campaign has emerged that uses social engineering combined with a legitimate machine learning platform to spread…

UAT-8099 Targets Vulnerable IIS Servers Using Web Shells, PowerShell, and Region-Customized BadIIS
30
Jan
2026

UAT-8099 Targets Vulnerable IIS Servers Using Web Shells, PowerShell, and Region-Customized BadIIS

A new wave of targeted attacks has emerged against Internet Information Services (IIS) servers across Asia, with threat actors deploying…

TAMECAT PowerShell-Based Backdoor Exfiltrates Login Credentials from Microsoft Edge and Chrome
30
Jan
2026

TAMECAT PowerShell-Based Backdoor Exfiltrates Login Credentials from Microsoft Edge and Chrome

A sophisticated PowerShell-based malware named TAMECAT has emerged as a critical threat to enterprise security, targeting login credentials stored in…

Ex-Google Engineer Convicted of Stealing Google’s AI Secrets For China
30
Jan
2026

Ex-Google Engineer Convicted of Stealing Google’s AI Secrets For China

A federal jury has convicted Linwei Ding, 38, a former Google software engineer, on charges of economic espionage and trade…

Attackers Hijacked 200+ Websites Exploiting Magento Vulnerability to Gain Root-level Access
30
Jan
2026

Attackers Hijacked 200+ Websites Exploiting Magento Vulnerability to Gain Root-level Access

A critical security breach has exposed multiple Magento e-commerce platforms worldwide as threat actors successfully exploited a severe authentication flaw…

NVIDIA GPU Display Driver Vulnerabilities Allows Code Execution and Privilege Escalation
30
Jan
2026

NVIDIA GPU Display Driver Vulnerabilities Allows Code Execution and Privilege Escalation

NVIDIA has issued a critical security update addressing multiple high-severity vulnerabilities in its GPU Display Driver, vGPU software, and HD…

GhostChat Spyware Attacking Android Users Via WhatsApp to Exfiltrate Sensitive Details
30
Jan
2026

GhostChat Spyware Attacking Android Users Via WhatsApp to Exfiltrate Sensitive Details

A new Android spyware campaign has emerged, targeting users in Pakistan through a sophisticated romance scam that uses fake dating…

Wireshark 4.6.3 Released Fix for Vulnerabilities that Lead to DoS Attack and Crashes
30
Jan
2026

Wireshark 4.6.3 Released Fix for Vulnerabilities that Lead to DoS Attack and Crashes

The Wireshark Foundation has officially released Wireshark 4.6.3, the latest update to the world’s most popular network protocol analyzer. This…

Education-Themed Malicious Domains Linked to Bulletproof Hosting Infrastructure Exposed
30
Jan
2026

Education-Themed Malicious Domains Linked to Bulletproof Hosting Infrastructure Exposed

Security researchers have uncovered a sophisticated traffic distribution network leveraging deceptive education-themed domains to deliver malware and phishing attacks. The…

Critical Ivanti Endpoint Manager RCE Vulnerabilities Actively Exploited in Attacks
30
Jan
2026

Critical Ivanti Endpoint Manager RCE Vulnerabilities Actively Exploited in Attacks

Two critical code-injection vulnerabilities have been disclosed in the Endpoint Manager Mobile (EPMM) platform, which are currently being actively exploited…

Microsoft Teams New Feature to Flag Suspicious One-to-One Calls
30
Jan
2026

Microsoft Teams New Feature to Flag Suspicious One-to-One Calls

A new security feature is being added to Teams to help organizations detect and stop voice-based scams and phishing attacks….