Category: CyberSecurityNews

Lumma Infostealer Malware Attacks Users to Steal Browser Cookies, Cryptocurrency Wallets and VPN/RDP Accounts
22
Oct
2025

Lumma Infostealer Malware Attacks Users to Steal Browser Cookies, Cryptocurrency Wallets and VPN/RDP Accounts

Since its emergence in August 2022, Lumma Infostealer has rapidly become a cornerstone of malware-as-a-service platforms, enabling even unskilled threat…

Multiple Gitlab Security Vulnerabilities Let Attackers Trigger DoS Condition
22
Oct
2025

Multiple Gitlab Security Vulnerabilities Let Attackers Trigger DoS Condition

GitLab has urgently released patch versions 18.5.1, 18.4.3, and 18.3.5 for its Community Edition (CE) and Enterprise Edition (EE) to…

Critical Vulnerability In Oracle E-Business Suite's Marketing Product Allows Full Access To Attackers
22
Oct
2025

Critical Vulnerability In Oracle E-Business Suite’s Marketing Product Allows Full Access To Attackers

Oracle has disclosed two critical vulnerabilities in its E-Business Suite’s Marketing product that could hand full control to remote attackers….

Azure Apps Vulnerability Lets Hackers Create Malicious Apps Mimicking Microsoft Teams
22
Oct
2025

Azure Apps Vulnerability Lets Hackers Create Malicious Apps Mimicking Microsoft Teams

Security flaws in Microsoft’s Azure ecosystem enable cybercriminals to create deceptive applications that imitate official services like the “Azure Portal….

Threat Actors Allegedly Selling Monolock Ransomware on Dark Web Forums
22
Oct
2025

Threat Actors Allegedly Selling Monolock Ransomware on Dark Web Forums

Monolock ransomware has surfaced in underground forums, with threat actors advertising version 1.0 for sale alongside stolen corporate credentials. First…

New GlassWorm Using Invisible Code Hits Attacking VS Code Extensions on OpenVSX Marketplace
22
Oct
2025

New GlassWorm Using Invisible Code Hits Attacking VS Code Extensions on OpenVSX Marketplace

Over the past week, cybersecurity professionals have been gripped by the emergence of GlassWorm, a highly sophisticated, self-propagating malware campaign…

Hackers Abuse ASP.NET Machine Keys To Compromise IIS Servers And Deploy Malicious Modules
22
Oct
2025

Hackers Abuse ASP.NET Machine Keys To Compromise IIS Servers And Deploy Malicious Modules

A sneaky hacking campaign where attackers used publicly available ASP.NET machine keys to break into Windows IIS web servers. These…

ZYXEL Authorization Bypass Vulnerability Let Attackers View and Download System Configuration
22
Oct
2025

ZYXEL Authorization Bypass Vulnerability Let Attackers View and Download System Configuration

A critical authorization bypass vulnerability has emerged in ZYXEL’s ATP and USG series network security appliances, allowing attackers to circumvent…

Threat Actors Compromise Xubuntu Website To Deliver Malicious Windows Executable
22
Oct
2025

Threat Actors Compromise Xubuntu Website To Deliver Malicious Windows Executable

Threat actors infiltrated the official Xubuntu website, redirecting torrent downloads to a malicious ZIP file containing Windows-targeted malware. The incident,…

Hackers Exploited 34 Zero-Day Vulnerabilities And Earned $522,500 In Pwn2Own Ireland 2025
22
Oct
2025

Hackers Exploited 34 Zero-Day Vulnerabilities And Earned $522,500 In Pwn2Own Ireland 2025

The first day of Pwn2Own Ireland 2025 wrapped up with a bang, as security researchers uncovered 34 unique zero-day vulnerabilities…

Chrome V8 JavaScript Engine Vulnerability Let Attackers Execute Remote Code
22
Oct
2025

Chrome V8 JavaScript Engine Vulnerability Let Attackers Execute Remote Code

Google has swiftly addressed a high-severity flaw in its Chrome browser’s V8 JavaScript engine, releasing an emergency update to thwart…

Cavalry Werewolf APT Hackers Attacking Multiple Industries With FoalShell and StallionRAT
22
Oct
2025

Cavalry Werewolf APT Hackers Attacking Multiple Industries With FoalShell and StallionRAT

A sophisticated threat campaign has emerged targeting Russia’s public sector and critical industries between May and August 2025. The Cavalry…