PayPal Hit With $2 Million Fine For Cybersecurity Failures
The New York State Department of Financial Services (NYDFS) has imposed a $2 million fine on PayPal, Inc. for violations of its stringent cybersecurity regulations.…
Category: CyberSecurityNews
New Ransomware Attacking VMware ESXi Hosts Via SSH Tunneling to Evade Detection
New ransomware strains are quietly infiltrating VMware ESXi hosts by setting up SSH tunnels and concealing malicious traffic within legitimate activity. This stealth tactic allows…
phpMyAdmin Vulnerability Let Hackers Trigger XSS Attack With Malicious Tables
A moderate-severity Cross-Site Scripting (XSS) vulnerability has been identified in phpMyAdmin, a widely used open-source tool for managing MySQL databases. This flaw, tracked as CVE-2025-24530,…
Bypassing EDR Detection by Exploiting Hardware Breakpoints at CPU Level
Adversaries continue to innovate methods to bypass Endpoint Detection and Response (EDR) systems. An exceptionally sophisticated approach involves leveraging hardware breakpoints at the CPU level…
North Korean IT Workers Demands Ransomware By Stealing Companies Source Codes
North Korean IT workers masquerading as remote workers have been breaking into Western companies, stealing confidential source codes, and requesting ransoms to prevent their release.…
Critical SonicWall Vulnerability Exploited In Attacks Execute Arbitrary OS Commands
A critical security vulnerability, tracked as CVE-2025-23006, has been identified in SonicWall’s SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC). This flaw, classified…
Nnice Ransomware Attacking Windows Systems With Advanced Encryption Techniques
A new ransomware strain called Nnice has emerged as a significant threat to Windows systems, employing sophisticated encryption techniques and evasion methods. First observed on…
Next.js Framework Exposes Websites To Cache Poisoning & XSS Attacks
A critical vulnerability, identified as CVE-2024-46982, has been discovered in the popular Next.js framework, widely used for building full-stack web applications. This flaw exposes websites…
Researcher Jailbreaking an AI’s System Prompt Through Creativity
In a remarkable display of creativity, a researcher showcased how an artificial intelligence (AI) system’s tightly guarded “system prompt” could be indirectly accessed not through…
Rails Apps File Write Vulnerability Let Attackers Execute Code Remotely
Researchers uncovered a critical security vulnerability in Rails applications that leverages the Bootsnap caching library. This exploit allows attackers to achieve remote code execution (RCE) by…
Open-Source ClamAV Releases Critical Security Patch Updates – What’s Inside!
The ClamAV team has announced the release of security patch updates for ClamAV versions 1.4.2 and 1.0.8. These updates address a critical vulnerability and include…
New Cookie Sandwich Technique Let Attackers Bypass HttpOnly Flag On Servers
A newly discovered attack technique, dubbed the “cookie sandwich,” enables attackers to bypass the HttpOnly flag on certain servers, exposing sensitive cookies, including session identifiers,…