Category: CyberSecurityNews

DPRK's Largest Cryptocurrency Heist via a Compromised macOS Developer and AWS Pivots
08
May
2025

DPRK’s Largest Cryptocurrency Heist via a Compromised macOS Developer and AWS Pivots

North Korean state-sponsored hackers have executed what security experts are calling the largest cryptocurrency theft operation to date, successfully stealing…

Healthcare Sector Emerges as a Prime Target for Cyber Attacks in 2025
07
May
2025

Healthcare Sector Emerges as a Prime Target for Cyber Attacks in 2025

The healthcare industry has become increasingly vulnerable to sophisticated cyber threats in 2025, with malicious actors specifically targeting medical institutions’…

Critical Open Source Easyjson Library Under Full Control of Russian Company
07
May
2025

Critical Open Source Easyjson Library Under Full Control of Russian Company

A critical security revelation has sent shockwaves through the cybersecurity community as researchers uncovered that easyjson, a widely adopted open-source…

Windows 0-Day Vulnerability Exploited in Wild to Deploy Play ransomware
07
May
2025

Windows 0-Day Vulnerability Exploited in Wild to Deploy Play ransomware

Threat actors linked to the Play ransomware operation exploited a zero-day vulnerability in Microsoft Windows prior to its patching on…

CISA Warns of Langflow Missing Authentication Vulnerability Exploited in Attacks
06
May
2025

CISA Warns of Langflow Missing Authentication Vulnerability Exploited in Attacks

CISA has added a critical Langflow vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in…

UDP Vulnerability in Windows Deployment Services Allows 0-Click System Crashes
06
May
2025

UDP Vulnerability in Windows Deployment Services Allows 0-Click System Crashes

A newly discovered vulnerability in Microsoft’s Windows Deployment Services (WDS) allows attackers to remotely crash servers with zero user interaction…

Darcula (PhaaS) Stolen 884,000 Credit Card Details on 13 Million Clicks from Users Worldwide
06
May
2025

Darcula (PhaaS) Stolen 884,000 Credit Card Details on 13 Million Clicks from Users Worldwide

Security researchers have uncovered one of the largest credit card theft operations in recent history, with a sophisticated Phishing-as-a-Service (PhaaS)…

The New Breed Of Layer 7 Attacks And How SMEs
06
May
2025

The New Breed Of Layer 7 Attacks And How SMEs

When most people think of DDoS attacks, they envision tsunami-like floods of traffic overwhelming servers. That’s the classic Layer 3/4…

PCI Compliance Is Not Just A Checkbox It’s A Live-Fire Security Test 
06
May
2025

PCI Compliance Is Not Just A Checkbox It’s A Live-Fire Security Test 

Most executives still treat PCI DSS like paperwork something to file away after a quarterly scan. But that mindset is…

New T1555.003 Technique Let Attackers Steal Passwords From Web Browsers
06
May
2025

New T1555.003 Technique Let Attackers Steal Passwords From Web Browsers

A sophisticated credential theft technique, identified as T1555.003 in the MITRE ATT&CK framework, has emerged as a significant threat to…

Ransomware Groups Allegedly Breach IT Networks, Stealing Data from UK Retailers
06
May
2025

Ransomware Groups Allegedly Breach IT Networks, Stealing Data from UK Retailers

A notorious ransomware group dubbed DragonForce has claimed responsibility for a series of cyber attacks targeting major UK retailers, with…

RomCom RAT Attacking UK Organizations Via Customer Feedback Portals
06
May
2025

RomCom RAT Attacking UK Organizations Via Customer Feedback Portals

A sophisticated Remote Access Trojan (RAT) dubbed “RomCom” has emerged as a significant threat targeting UK organizations through their customer…