Category: TheHackerNews

Hackers Stole $1.5 Billion in Bybit Heist
07
Mar
2025

Safe{Wallet} Confirms North Korean TraderTraitor Hackers Stole $1.5 Billion in Bybit Heist

Mar 07, 2025Ravie LakshmananSecurity Breach / Cryptocurrency Safe{Wallet} has revealed that the cybersecurity incident that led to the Bybit $1.5…

PHP-CGI RCE Flaw Exploited
07
Mar
2025

PHP-CGI RCE Flaw Exploited in Attacks on Japan’s Tech, Telecom, and E-Commerce Sectors

Mar 07, 2025Ravie LakshmananThreat Intelligence /Vulnerability Threat actors of unknown provenance have been attributed to a malicious campaign predominantly targeting…

Medusa Ransomware Hits 40+ Victims in 2025, Demands $100K–$15M Ransom
06
Mar
2025

Medusa Ransomware Hits 40+ Victims in 2025, Demands $100K–$15M Ransom

Mar 06, 2025Ravie LakshmananThreat Intelligence / Vulnerability The threat actors behind the Medusa ransomware have claimed nearly 400 victims since…

EncryptHub Deploys Ransomware and Stealer via Trojanized Apps, PPI Services, and Phishing
06
Mar
2025

EncryptHub Deploys Ransomware and Stealer via Trojanized Apps, PPI Services, and Phishing

Mar 06, 2025Ravie LakshmananMalware / Ransomware The financially motivated threat actor known as EncryptHub has been observed orchestrating sophisticated phishing…

Critical Kibana Vulnerability
06
Mar
2025

Elastic Releases Urgent Fix for Critical Kibana Vulnerability Enabling Remote Code Execution

Mar 06, 2025Ravie LakshmananData Security / Software Security Elastic has rolled out security updates to address a critical security flaw…

Outsmarting Cyber Threats with Attack Graphs
06
Mar
2025

Outsmarting Cyber Threats with Attack Graphs

Cyber threats are growing more sophisticated, and traditional security approaches struggle to keep up. Organizations can no longer rely on…

Over 1,000 WordPress Sites Infected with JavaScript Backdoors Enabling Persistent Attacker Access
06
Mar
2025

Over 1,000 WordPress Sites Infected with JavaScript Backdoors Enabling Persistent Attacker Access

Mar 06, 2025Ravie LakshmananData Breach / Website Security Over 1,000 websites powered by WordPress have been infected with a third-party…

U.S. Charges 12 Chinese Nationals in State-Backed Hacking Operations
06
Mar
2025

U.S. Charges 12 Chinese Nationals in State-Backed Hacking Operations

The U.S. Department of Justice (DoJ) has announced charges against 12 Chinese nationals for their alleged participation in a wide-ranging…

Google Rolls Out AI Scam Detection for Android to Combat Conversational Fraud
05
Mar
2025

Google Rolls Out AI Scam Detection for Android to Combat Conversational Fraud

Mar 05, 2025Ravie LakshmananMobile Security / Artificial Intelligence Google has announced the rollout of artificial intelligence (AI)-powered scam detection features…

Cyber Attacks to IT Supply Chains
05
Mar
2025

China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial Access

Mar 05, 2025Ravie LakshmananNetwork Security / Data Breach The China-lined threat actor behind the zero-day exploitation of security flaws in…

Dark Caracal Uses Poco RAT to Target Spanish-Speaking Enterprises in Latin America
05
Mar
2025

Dark Caracal Uses Poco RAT to Target Spanish-Speaking Enterprises in Latin America

Mar 05, 2025Ravie LakshmananCyber Espionage / Malware The threat actor known as Dark Caracal has been attributed to a campaign…

Defending against USB drive attacks with Wazuh
05
Mar
2025

Defending against USB drive attacks with Wazuh

USB drive attacks constitute a significant cybersecurity risk, taking advantage of the everyday use of USB devices to deliver malware…