New Epstein Tool Searches LinkedIn Connections Against 3.5 Million Pages Epstein Files
Epstein Tool A new open-source Python tool named EpsteIn enables users to check if their LinkedIn connections appear in over 3.5 million pages of Jeffrey…
Category: CyberSecurityNews
CISA Warns of React Native Community Command Injection Vulnerability Exploited in Attacks
React Native Command Injection Flaw The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2025-11953 to its Known Exploited Vulnerabilities (KEV) catalog, flagging an…
New CentOS 9 Vulnerability Lets Attackers Escalate to Root Privileges
CentOS 9 Vulnerability A critical use-after-free (UAF) vulnerability in the Linux kernel’s sch_cake queuing discipline (Qdisc) affects CentOS 9, allowing local users to gain root…
Critical n8n Vulnerability Enables System Command Execution Via Weaponized Workflows
n8n Vulnerability A critical remote code execution (RCE) vulnerability in n8n, the popular workflow automation platform. This flaw allows authenticated attackers to execute arbitrary system…
Attackers Mimic RTO Challan Notifications to Deliver Android Malware
A sophisticated Android malware campaign targeting Indian users has emerged, disguising itself as legitimate Regional Transport Office (RTO) challan notifications. The malicious applications are distributed…
Betterment Data Breach Exposes 1.4 million Customers Personal Details
Betterment Data Breach Betterment has disclosed a social engineering–driven data breach that exposed personal information for approximately 1.4 million customer accounts, significantly expanding the fallout…
170+ SolarWinds Help Desk Installations Vulnerable to RCE Attacks Exposed Online
SolarWinds Help Desk Installations Vulnerable Over 170 SolarWinds Web Help Desk installations remain vulnerable to a critical remote code execution (RCE) flaw that has been…
ShadowSyndicate Using Server Transition Technique in Ransomware Attacks
ShadowSyndicate, a malicious activity cluster first identified in 2022, has evolved its infrastructure management techniques by adopting a server transition method that allows the threat…
WatchGuard VPN Client for Windows Vulnerability Enables Command Execution With SYSTEM Privileges
WatchGuard VPN Client Windows Vulnerability A security advisory addressing a significant privilege-escalation vulnerability affecting its Mobile VPN with an IPSec client for Windows. The flaw,…
Threat Actors Hacking NGINX Servers to Redirect Web Traffic to Malicious Servers
Threat Actors Hacking NGINX Servers A sophisticated campaign in which threat actors are stealthily compromising NGINX servers to redirect web traffic to malicious destinations. The…
Microsoft to Add Sysmon Threat Detection Feature Natively to Windows 11
Microsoft Add Sysmon Windows 11 A major upgrade has been announced to enhance capabilities for cybersecurity defenders and threat hunters in the Windows ecosystem. With…
Beware of Weaponized Voicemail Messages Granting Hackers Remote Access to Your System
Cybercriminals are increasingly shifting tactics toward social engineering to bypass traditional security defenses, catching many users off guard. A sophisticated new campaign dubbed “Voicemail Trap”…