WordPress Backup Plugin Vulnerability Exposes 800,000 Sites to Remote Code Execution Attacks
A critical flaw in the WPvivid Backup & Migration WordPress plugin can let an unauthenticated attacker upload files and run code on the server, a…
Category: CyberSecurityNews
Chrome Security Update – Patch for Vulnerabilities that Enables Code Execution Attacks
Chrome Security Update Patch Vulnerabilities Google has released Chrome 145 to the stable channel for Windows, Mac, and Linux, addressing 11 security vulnerabilities that could…
Sophisticated ‘duer-js’ NPM Package Distributes ‘Bada Stealer’ Malware Targeting Windows and Discord Users
A dangerous malware campaign has emerged on the NPM package registry, putting thousands of developers and Windows users at risk. The malicious package, known as…
Lazarus Group’s ‘Graphalgo’ Fake Recruiter Campaign Exploits GitHub, npm, and PyPI to Distribute Malware
The North Korean state-sponsored hacking team, Lazarus Group, has launched a sophisticated fake recruiter campaign targeting cryptocurrency developers through a malicious operation called “graphalgo.” Active…
Google Warns of Hackers Leveraging Gemini AI Model for All Stages of Cyberattacks
Gemini AI Model Cyberattacks Threat actors have begun leveraging Google’s Gemini API to dynamically generate C# code for multi-stage malware, evading traditional detection methods. The…
Hackers Can Weaponize Google Calendar Invite into Secretly Streaming a Victim’s Camera Through Zoom
Promptware Hackers Can Weaponize Google Calendar A new and dangerous class of cyberattack called “Promptware” has been discovered, capable of turning your personal AI assistant…
Adblock Filters Exposes Reveal User Location Despite VPN Protection
Adblock Filters Exposes User Location Many internet users believe VPNs make them completely anonymous online. While VPNs hide your IP address and encrypt traffic, a…
Fake CAPTCHA Attacks Emerge as Key Entry Point for LummaStealer Malware Campaigns
LummaStealer, a notorious information-stealing malware, has made a significant comeback following a major law enforcement disruption in 2025. This resurgence is characterized by a shift…
Microsoft Outlook Add-in Stolen 4,000 Microsoft account Credentials and Credit Card Numbers
Microsoft Outlook Add-in Stolen Credentials Security researchers have identified the first documented instance of a malicious Microsoft Outlook add-in being used against users in real-world…
$44 Evilmouse Autonomously Executes Commands and Compromises Systems Once Connected
Evilmouse Compromises Systems A $44 hardware implant disguised as an ordinary computer mouse. This device acts as a covert keystroke injector, akin to the Hak5…
Palo Alto Networks Firewall Vulnerability Allows an Attacker to Force Firewalls into a Reboot Loop
Palo Alto Networks Firewall Vulnerability A critical denial-of-service (DoS) flaw in Palo Alto Networks’ PAN-OS software could let unauthenticated attackers crash firewalls into endless reboot…
Threat Actors Leveraging Employee Monitoring and SimpleHelp Tools to Deploy Ransomware Attacks
Cybercriminals are increasingly using valid administrative software to launch attacks, making their malicious activities much harder to spot. Instead of relying solely on custom computer…