Category: TheHackerNews

CISA Adds Gladinet and CWP Flaws
05
Nov
2025

CISA Adds Gladinet and CWP Flaws to KEV Catalog Amid Active Exploitation Evidence

Nov 05, 2025Ravie LakshmananVulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two security…

A Cybercrime Merger Like No Other — Scattered Spider, LAPSUS$, and ShinyHunters Join Forces
04
Nov
2025

A Cybercrime Merger Like No Other — Scattered Spider, LAPSUS$, and ShinyHunters Join Forces

The nascent collective that combines three prominent cybercrime groups, Scattered Spider, LAPSUS$, and ShinyHunters, has created no less than 16…

Europol and Eurojust Dismantle €600 Million Crypto Fraud Network in Global Sweep
04
Nov
2025

Europol and Eurojust Dismantle €600 Million Crypto Fraud Network in Global Sweep

Nov 04, 2025Ravie LakshmananCybercrime / Money Laundering Nine people have been arrested in connection with a coordinated law enforcement operation…

Critical React Native CLI Flaw Exposed Millions of Developers to Remote Attacks
04
Nov
2025

Critical React Native CLI Flaw Exposed Millions of Developers to Remote Attacks

Nov 04, 2025Ravie LakshmananVulnerability / Supply Chain Security Details have emerged about a now-patched critical security flaw in the popular…

Microsoft Teams Bugs Let Attackers Impersonate Colleagues and Edit Messages Unnoticed
04
Nov
2025

Microsoft Teams Bugs Let Attackers Impersonate Colleagues and Edit Messages Unnoticed

Nov 04, 2025Ravie Lakshmanan Cybersecurity researchers have disclosed details of four security flaws in Microsoft Teams that could have exposed…

Operation SkyCloak Deploys Tor-Enabled OpenSSH Backdoor Targeting Defense Sectors
04
Nov
2025

Operation SkyCloak Deploys Tor-Enabled OpenSSH Backdoor Targeting Defense Sectors

Nov 04, 2025Ravie LakshmananMalware / Cyber Espionage Threat actors are leveraging weaponized attachments distributed via phishing emails to deliver malware…

BlackCat Ransomware Attacks
04
Nov
2025

U.S. Prosecutors Indict Cybersecurity Insiders Accused of BlackCat Ransomware Attacks

Nov 04, 2025Ravie LakshmananRansomware / Cybercrime Federal prosecutors in the U.S. have accused a trio of allegedly hacking the networks…

Google's AI 'Big Sleep' Finds 5 New Vulnerabilities in Apple's Safari WebKit
04
Nov
2025

Google’s AI ‘Big Sleep’ Finds 5 New Vulnerabilities in Apple’s Safari WebKit

Nov 04, 2025Ravie LakshmananArtificial Intelligence / Vulnerability Google’s artificial intelligence (AI)-powered cybersecurity agent called Big Sleep has been credited by…

Microsoft Detects "SesameOp" Backdoor Using OpenAI's API as a Stealth Command Channel
04
Nov
2025

Microsoft Detects “SesameOp” Backdoor Using OpenAI’s API as a Stealth Command Channel

Nov 04, 2025Ravie LakshmananArtificial Intelligence / Malware Microsoft has disclosed details of a novel backdoor dubbed SesameOp that uses OpenAI…

04
Nov
2025

Microsoft Detects “SesameOp” Backdoor Using OpenAI’s API as a Stealth Command Channel

Nov 04, 2025Ravie LakshmananArtificial Intelligence / Malware Microsoft has disclosed details of a novel backdoor dubbed SesameOp that uses OpenAI…

Malicious VSX Extension "SleepyDuck" Uses Ethereum to Keep Its Command Server Alive
03
Nov
2025

Malicious VSX Extension “SleepyDuck” Uses Ethereum to Keep Its Command Server Alive

Nov 03, 2025Ravie LakshmananCryptocurrency / Threat Intelligence Cybersecurity researchers have flagged a new malicious extension in the Open VSX registry…

Cybercriminals Exploit Remote Monitoring Tools to Infiltrate Logistics and Freight Networks
03
Nov
2025

Cybercriminals Exploit Remote Monitoring Tools to Infiltrate Logistics and Freight Networks

Nov 03, 2025Ravie LakshmananCybercrime / Supply Chain Attack Bad actors are increasingly training their sights on trucking and logistics companies…