Category: CyberSecurityNews

What is MCP Server – How it is Powering AI-Driven Cyber Defense
13
Aug
2025

What is MCP Server – How it is Powering AI-Driven Cyber Defense

MCP (Model Control Plane) Server is a centralized platform that orchestrates, manages, and secures the lifecycle of AI models deployed…

New Charon Ransomware Employs DLL Sideloading, and Anti-EDR Capabilities to Attack Organizations
13
Aug
2025

New Charon Ransomware Employs DLL Sideloading, and Anti-EDR Capabilities to Attack Organizations

A sophisticated new ransomware family called Charon has emerged in the cybersecurity landscape, targeting organizations in the Middle East’s public…

FortiWeb Authentication Bypass Vulnerability Let Attackers Log in As Any Existing User
13
Aug
2025

FortiWeb Authentication Bypass Vulnerability Let Attackers Log in As Any Existing User

A critical authentication bypass vulnerability in FortiWeb allows unauthenticated remote attackers to impersonate any existing user on affected systems.  The…

Several Docker Images Contain Infamous XZ Backdoor Planted for More Than a Year
13
Aug
2025

Several Docker Images Contain Infamous XZ Backdoor Planted for More Than a Year

The cybersecurity community continues to grapple with the lingering effects of the XZ Utils backdoor, a sophisticated supply chain attack…

Ukrainian Web3team Weaponizing NPM Package to Attack Job Seekers and Steal Sensitive Data
13
Aug
2025

Ukrainian Web3team Weaponizing NPM Package to Attack Job Seekers and Steal Sensitive Data

A sophisticated cybercriminal operation disguised as a Ukrainian Web3 development team has been targeting job seekers through weaponized NPM packages,…

Windows Remote Desktop Services Vulnerability Let Attacker Deny Services Over Network
13
Aug
2025

Windows Remote Desktop Services Vulnerability Let Attacker Deny Services Over Network

Microsoft released security patches addressing a significant vulnerability in Windows Remote Desktop Services that could allow unauthorized attackers to launch…

13
Aug
2025

Ukrainian Web3team Weaponizing NPM Package to Attack Job Seekers and Steal Sensitive Data

A sophisticated cybercriminal operation disguised as a Ukrainian Web3 development team has been targeting job seekers through weaponized NPM packages,…

New Windows 0-Click NTLM Credential Leakage Vulnerability Bypasses Microsoft’s Patch
13
Aug
2025

New Windows 0-Click NTLM Credential Leakage Vulnerability Bypasses Microsoft’s Patch

A critical zero-click NTLM credential leakage vulnerability that circumvents Microsoft’s recent patch for CVE-2025-24054.  The newly identified flaw, assigned CVE-2025-50154,…

Multiple Chrome High-Severity Vulnerabilities Let Attackers Execute Arbitrary Code
13
Aug
2025

Multiple Chrome High-Severity Vulnerabilities Let Attackers Execute Arbitrary Code

Google Chrome has released a critical security update addressing six vulnerabilities that could potentially enable arbitrary code execution on affected…

Critical FortiSIEM Vulnerability Let Attackers to Execute Malicious Commands
13
Aug
2025

Critical FortiSIEM Vulnerability Let Attackers to Execute Malicious Commands

A critical security vulnerability in the Fortinet FortiSIEM platform allows unauthenticated attackers to execute arbitrary commands remotely.  The vulnerability CVE-2025-25256,…

Hackers Attacking Fortinet SSL VPN Under Attack From 780 unique IPs
13
Aug
2025

Hackers Attacking Fortinet SSL VPN Under Attack From 780 unique IPs

An unprecedented surge in brute-force attacks targeting Fortinet SSL VPN infrastructure, with over 780 unique IP addresses participating in coordinated…

Electronic Arts Blocked 300,000 Attempts Following Battlefield 6 Beta Launch
12
Aug
2025

Electronic Arts Blocked 300,000 Attempts Following Battlefield 6 Beta Launch

Electronic Arts has revealed that their Javelin anti-cheat system successfully prevented 330,000 attempts to cheat or tamper with anti-cheat controls…