Category: CyberSecurityNews

Weaponized Python Package Termncolor Attacking Leverages Windows Run Key to Maintain Persistence
19
Aug
2025

Weaponized Python Package Termncolor Attacking Leverages Windows Run Key to Maintain Persistence

A sophisticated supply chain attack targeting Python developers has emerged through a seemingly innocuous package named termncolor, which conceals a…

Threats Actors Using Telegram as The Communication Channel to Exfiltrate The Stolen Data
19
Aug
2025

Threats Actors Using Telegram as The Communication Channel to Exfiltrate The Stolen Data

Cybersecurity researchers have identified an alarming trend where threat actors are increasingly leveraging Telegram’s Bot API infrastructure as a covert…

Technical Details of SAP 0-Day Exploitation Script Used to Achieve RCE Disclosed
19
Aug
2025

Technical Details of SAP 0-Day Exploitation Script Used to Achieve RCE Disclosed

A sophisticated zero-day exploitation script targeting SAP systems has emerged in the cybersecurity landscape, demonstrating advanced remote code execution capabilities…

VirtualBox 7.2 Released With Support for Windows 11/Arm VMs and Bug Fixes
18
Aug
2025

VirtualBox 7.2 Released With Support for Windows 11/Arm VMs and Bug Fixes

Oracle has announced the release of VirtualBox 7.2, a major update to the popular open-source virtualization platform that introduces significant…

APT SideWinder Actor Profile - Recent Attacks, Tactics, Techniques, and Procedures
18
Aug
2025

APT SideWinder Actor Profile – Recent Attacks, Tactics, Techniques, and Procedures

APT SideWinder, also known as Rattlesnake, Razor Tiger, and T-APT-04, is a nation-state advanced persistent threat (APT) group active since…

Intel Websites Exploited to Hack Every Intel Employee and View Confidential Data
18
Aug
2025

Intel Websites Exploited to Hack Every Intel Employee and View Confidential Data

A series of critical vulnerabilities across multiple internal Intel websites allowed for the complete exfiltration of the company’s global employee…

X-VPN’s August Update Lets Mobile Users Choose Servers in 26 Regions with Military-grade AES-256 Encryption
18
Aug
2025

X-VPN’s August Update Lets Mobile Users Choose Servers in 26 Regions with Military-grade AES-256 Encryption

San Francisco, CA – August 12, 2025 — Addressing the growing demand for data privacy in financial workflows, X-VPN has…

New Ghost-tapping Attacks Steal Customers' Cards Linked to Services Like Apple Pay and Google Pay
18
Aug
2025

New Ghost-tapping Attacks Steal Customers’ Cards Linked to Services Like Apple Pay and Google Pay

A sophisticated new cybercriminal technique known as “ghost-tapping” has emerged as a significant threat to contactless payment systems, enabling Chinese-speaking…

Bragg Confirms Cyber Attack - Hackers Accessed Internal IT Systems
18
Aug
2025

Bragg Confirms Cyber Attack – Hackers Accessed Internal IT Systems

Bragg Gaming Group has confirmed a significant cybersecurity incident that compromised the company’s internal IT infrastructure early Saturday morning, August…

Linux Kernel netfilter Vulnerability Let Attackers Escalate Privileges
18
Aug
2025

Linux Kernel netfilter Vulnerability Let Attackers Escalate Privileges

A critical vulnerability in the Linux kernel’s netfilter ipset subsystem has been discovered that allows local attackers to escalate privileges…

1000+ Exposed N-able N-central RMM Servers Unpatched for 0-Day Vulnerabilities
18
Aug
2025

1000+ Exposed N-able N-central RMM Servers Unpatched for 0-Day Vulnerabilities

Over 1,000 exposed and unpatched N-able N-central Remote Monitoring and Management (RMM) servers are vulnerable to two newly disclosed zero-day…

Critical PostgreSQL Vulnerabilities Allow Arbitrary Code Injection During Restoration
18
Aug
2025

Critical PostgreSQL Vulnerabilities Allow Arbitrary Code Injection During Restoration

The PostgreSQL Global Development Group has issued emergency security updates across all supported versions to address three critical vulnerabilities that…