Category: CyberSecurityNews

Cisco Warns of IOS XR Software Vulnerability Let Attackers Trigger DoS condition
14
Mar
2025

Cisco Warns of IOS XR Software Vulnerability Let Attackers Trigger DoS condition

Cisco has issued security advisories for multiple vulnerabilities affecting its IOS XR Software, with particular emphasis on a significant memory…

Lazarus Hackers Exploiting IIS Servers to Deploy ASP-based Web Shells
14
Mar
2025

Lazarus Hackers Exploiting IIS Servers to Deploy ASP-based Web Shells

Researchers have identified a series of sophisticated attacks by the notorious Lazarus group targeting South Korean web servers.  The threat…

United States Charges Developer of LockBit Ransomware Group
14
Mar
2025

United States Charges Developer of LockBit Ransomware Group

Rostislav Panev, a 51-year-old dual Russian and Israeli national, has been extradited to the United States on charges related to…

Microsoft365 Themed Attack Leveraging OAuth Redirection for Account Takeover 
14
Mar
2025

Microsoft365 Themed Attack Leveraging OAuth Redirection for Account Takeover 

Two sophisticated phishing campaigns were observed targeting Microsoft 365 users by exploiting OAuth redirection vulnerabilities combined with brand impersonation techniques. …

Decrypting Linux/ESXi Akira Ransomware Files Without Paying Ransomware
14
Mar
2025

Decrypting Linux/ESXi Akira Ransomware Files Without Paying Ransomware

A cybersecurity researcher has successfully broken the encryption used by the Linux/ESXI variant of the Akira ransomware, enabling data recovery…

SuperBlack Actors Exploiting Two Fortinet Vulnerabilities to Deploy Ransomware
14
Mar
2025

SuperBlack Actors Exploiting Two Fortinet Vulnerabilities to Deploy Ransomware

Between late January and early March 2025, cybersecurity researchers at Forescout’s Vedere Labs uncovered a series of sophisticated intrusions leveraging…

Bitdefender Warns of Multiple Vulnerabilities that Let Attackers Execute MITM Attack
14
Mar
2025

Bitdefender Warns of Multiple Vulnerabilities that Let Attackers Execute MITM Attack

Bitdefender has disclosed two critical vulnerabilities affecting its BOX v1 device that could allow network-adjacent attackers to execute Man-in-the-Middle (MITM)…

Mozilla Urging Users to Update Firefox, Else Add-ons Will Stop Working
14
Mar
2025

Mozilla Urging Users to Update Firefox, Else Add-ons Will Stop Working

Mozilla has issued an urgent warning to Firefox users worldwide, emphasizing the critical need to update their browsers before March…

2-year-old Windows Kernel 0-day Vulnerability Exploited in the Wild
14
Mar
2025

2-year-old Windows Kernel 0-day Vulnerability Exploited in the Wild

Microsoft has patched a critical Windows Kernel vulnerability that has been actively exploited for nearly two years.  The vulnerability, tracked…

Apache NiFi Vulnerability Let Attackers Access MongoDB Username & Passwords
14
Mar
2025

Apache NiFi Vulnerability Let Attackers Access MongoDB Username & Passwords

A significant security vulnerability has been identified in Apache NiFi, allowing potential attackers with specific access privileges to expose MongoDB…

DeepSeek Generating Fully Working Keyloggers & Data Exfiltration Tools
14
Mar
2025

DeepSeek Generating Fully Working Keyloggers & Data Exfiltration Tools

Security researchers at Unit 42 have successfully prompted DeepSeek, a relatively new large language model (LLM), to generate detailed instructions…

Siemens SINAMICS S200 Bootloader Vulnerability Let Attackers Compromise the Device
13
Mar
2025

Siemens SINAMICS S200 Bootloader Vulnerability Let Attackers Compromise the Device

Siemens has disclosed a critical security vulnerability affecting specific SINAMICS S200 drive systems that could allow attackers to compromise devices…