Category: TheHackerNews

Russia-Linked Hackers Use Microsoft 365 Device Code Phishing for Account Takeovers
19
Dec
2025

Russia-Linked Hackers Use Microsoft 365 Device Code Phishing for Account Takeovers

Dec 19, 2025Ravie LakshmananCybersecurity / Cloud Security A suspected Russia-aligned group has been attributed to a phishing campaign that employs…

CountLoader and GachiLoader Malware
19
Dec
2025

Cracked Software and YouTube Videos Spread CountLoader and GachiLoader Malware

Cybersecurity researchers have disclosed details of a new campaign that has used cracked software distribution sites as a distribution vector…

WatchGuard Warns of Active Exploitation of Critical Fireware OS VPN Vulnerability
19
Dec
2025

WatchGuard Warns of Active Exploitation of Critical Fireware OS VPN Vulnerability

Dec 19, 2025Ravie LakshmananVulnerability / Network Security WatchGuard has released fixes to address a critical security flaw in Fireware OS…

Nigeria Arrests RaccoonO365 Phishing Developer Linked to Microsoft 365 Attacks
19
Dec
2025

Nigeria Arrests RaccoonO365 Phishing Developer Linked to Microsoft 365 Attacks

Dec 19, 2025Ravie LakshmananCybercrime / Law Enforcement Authorities in Nigeria have announced the arrest of three “high-profile internet fraud suspects”…

New UEFI Flaw Enables Early-Boot DMA Attacks on ASRock, ASUS, GIGABYTE, MSI Motherboards
19
Dec
2025

New UEFI Flaw Enables Early-Boot DMA Attacks on ASRock, ASUS, GIGABYTE, MSI Motherboards

Dec 19, 2025Ravie LakshmananFirmware Security / Vulnerability Certain motherboard models from vendors like ASRock, ASUSTeK Computer, GIGABYTE, and MSI are…

China-Aligned Threat Group Uses Windows Group Policy to Deploy Espionage Malware
18
Dec
2025

China-Aligned Threat Group Uses Windows Group Policy to Deploy Espionage Malware

Dec 18, 2025Ravie LakshmananMalware / Cloud Security A previously undocumented China-aligned threat cluster dubbed LongNosedGoblin has been attributed to a…

HPE OneView Flaw Rated CVSS 10.0 Allows Unauthenticated Remote Code Execution
18
Dec
2025

HPE OneView Flaw Rated CVSS 10.0 Allows Unauthenticated Remote Code Execution

Dec 18, 2025Ravie LakshmananVulnerability / Enterprise Security Hewlett Packard Enterprise (HPE) has resolved a maximum-severity security flaw in OneView Software…

North Korea-Linked Hackers
18
Dec
2025

North Korea-Linked Hackers Steal $2.02 Billion in 2025, Leading Global Crypto Theft

Threat actors with ties to the Democratic People’s Republic of Korea (DPRK or North Korea) have been instrumental in driving…

The Case for Dynamic AI-SaaS Security as Copilots Scale
18
Dec
2025

The Case for Dynamic AI-SaaS Security as Copilots Scale

Within the past year, artificial intelligence copilots and agents have quietly permeated the SaaS applications businesses use every day. Tools…

Kimsuky Spreads DocSwap Android Malware via QR Phishing Posing as Delivery App
18
Dec
2025

Kimsuky Spreads DocSwap Android Malware via QR Phishing Posing as Delivery App

Dec 18, 2025Ravie LakshmananMalware / Mobile Security The North Korean threat actor known as Kimsuky has been linked to a…

CISA Flags Critical ASUS Live Update Flaw After Evidence of Active Exploitation
18
Dec
2025

CISA Flags Critical ASUS Live Update Flaw After Evidence of Active Exploitation

Dec 18, 2025Ravie LakshmananVulnerability / Software Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical…

Cisco Warns of Active Attacks Exploiting Unpatched 0-Day in AsyncOS Email Security Appliances
18
Dec
2025

Cisco Warns of Active Attacks Exploiting Unpatched 0-Day in AsyncOS Email Security Appliances

Dec 18, 2025Ravie LakshmananVulnerability / Network Security Cisco has alerted users to a maximum-severity zero-day flaw in Cisco AsyncOS software…