Category: TheHackerNews

Microsoft Fixes 80 Flaws — Including SMB PrivEsc and Azure CVSS 10.0 Bugs
10
Sep
2025

Microsoft Fixes 80 Flaws — Including SMB PrivEsc and Azure CVSS 10.0 Bugs

Microsoft on Tuesday addressed a set of 80 security flaws in its software, including one vulnerability that has been disclosed…

Automating vCISO and Compliance Services
10
Sep
2025

Automating vCISO and Compliance Services

Introduction Managed service providers (MSPs) and managed security service providers (MSSPs) are under increasing pressure to deliver strong cybersecurity outcomes…

China-Linked APT41 Hackers
10
Sep
2025

China-Linked APT41 Hackers Target U.S. Trade Officials Amid 2025 Negotiations

Sep 10, 2025Ravie LakshmananMalware / Cyber Espionage The House Select Committee on China has formally issued an advisory warning of…

New Phishing Kit Targeting US and EU Enterprises
10
Sep
2025

New Phishing Kit Targeting US and EU Enterprises

Sep 10, 2025The Hacker NewsMalware Analysis / Enterprise Security Phishing-as-a-Service (PhaaS) platforms keep evolving, giving attackers faster and cheaper ways…

SAP Patches Critical NetWeaver (CVSS Up to 10.0) and Previously Exploited S/4HANA Flaws
10
Sep
2025

SAP Patches Critical NetWeaver (CVSS Up to 10.0) and Previously Exploited S/4HANA Flaws

Sep 10, 2025Ravie LakshmananSoftware Security / Vulnerability SAP on Tuesday released security updates to address multiple security flaws, including three…

Adobe Commerce Flaw CVE-2025-54236 Lets Hackers Take Over Customer Accounts
10
Sep
2025

Adobe Commerce Flaw CVE-2025-54236 Lets Hackers Take Over Customer Accounts

Sep 10, 2025Ravie LakshmananVulnerability / Software Security Adobe has warned of a critical security flaw in its Commerce and Magento…

Axios Abuse and Salty 2FA Kits Fuel Advanced Microsoft 365 Phishing Attacks
09
Sep
2025

Axios Abuse and Salty 2FA Kits Fuel Advanced Microsoft 365 Phishing Attacks

Threat actors are abusing HTTP client tools like Axios in conjunction with Microsoft’s Direct Send feature to form a “highly…

RatOn Android Malware Detected With NFC Relay and ATS Banking Fraud Capabilities
09
Sep
2025

RatOn Android Malware Detected With NFC Relay and ATS Banking Fraud Capabilities

Sep 09, 2025Ravie LakshmananMobile Security / Threat Intelligence A new Android malware called RatOn evolved from a basic tool capable…

TOR-Based Cryptojacking Attack Expands Through Misconfigured Docker APIs
09
Sep
2025

TOR-Based Cryptojacking Attack Expands Through Misconfigured Docker APIs

Cybersecurity researchers have discovered a variant of a recently disclosed campaign that abuses the TOR network for cryptojacking attacks targeting…

[Webinar] Shadow AI Agents Multiply Fast — Learn How to Detect and Control Them
09
Sep
2025

[Webinar] Shadow AI Agents Multiply Fast — Learn How to Detect and Control Them

Sep 09, 2025The Hacker NewsArtificial Intelligence / Threat Detection One click is all it takes. An engineer spins up an…

Rising AI and Phishing Risks
09
Sep
2025

New Malware Campaigns Highlight Rising AI and Phishing Risks

Cybersecurity researchers have disclosed details of a phishing campaign that delivers a stealthy banking malware-turned-remote access trojan called MostereRAT. The…

How Leading CISOs are Getting Budget Approval
09
Sep
2025

How Leading CISOs are Getting Budget Approval

It’s budget season. Once again, security is being questioned, scrutinized, or deprioritized. If you’re a CISO or security leader, you’ve…