Category: TheHackerNews

WinRAR Vulnerability
10
Dec
2025

WinRAR Vulnerability CVE-2025-6218 Under Active Attack by Multiple Threat Groups

Dec 10, 2025Ravie LakshmananVulnerability / Malware The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a security flaw…

Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two Zero-Days
10
Dec
2025

Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two Zero-Days

Microsoft closed out 2025 with patches for 56 security flaws in various products across the Windows platform, including one vulnerability…

Fortinet, Ivanti, and SAP Issue Urgent Patches
10
Dec
2025

Fortinet, Ivanti, and SAP Issue Urgent Patches for Authentication and Code Execution Flaws

Dec 10, 2025Ravie LakshmananVulnerability / Endpoint Security Fortinet, Ivanti, and SAP have moved to address critical security flaws in their…

North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT Malware
09
Dec
2025

North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT Malware

Threat actors with ties to North Korea have likely become the latest to exploit the recently disclosed critical security React2Shell…

Four Threat Clusters Using CastleLoader as GrayBravo Expands Its Malware Service Infrastructure
09
Dec
2025

Four Threat Clusters Using CastleLoader as GrayBravo Expands Its Malware Service Infrastructure

Dec 09, 2025Ravie LakshmananCybersecurity / Malware Four distinct threat activity clusters have been observed leveraging a malware loader known as…

Storm-0249 Escalates Ransomware Attacks with ClickFix, Fileless PowerShell, and DLL Sideloading
09
Dec
2025

Storm-0249 Escalates Ransomware Attacks with ClickFix, Fileless PowerShell, and DLL Sideloading

Dec 09, 2025Ravie LakshmananRansomware / Endpoint Security The threat actor known as Storm-0249 is likely shifting from its role as…

Google Adds Layered Defenses to Chrome to Block Indirect Prompt Injection Threats
09
Dec
2025

Google Adds Layered Defenses to Chrome to Block Indirect Prompt Injection Threats

Google on Monday announced a set of new security features in Chrome, following the company’s addition of agentic artificial intelligence…

How to Streamline Zero Trust Using the Shared Signals Framework
09
Dec
2025

How to Streamline Zero Trust Using the Shared Signals Framework

Zero Trust helps organizations shrink their attack surface and respond to threats faster, but many still struggle to implement it…

STAC6565 Targets Canada in 80% of Attacks as Gold Blade Deploys QWCrypt Ransomware
09
Dec
2025

STAC6565 Targets Canada in 80% of Attacks as Gold Blade Deploys QWCrypt Ransomware

Canadian organizations have emerged as the focus of a targeted cyber campaign orchestrated by a threat activity cluster known as…

Researchers Find Malicious VS Code, Go, npm, and Rust Packages Stealing Developer Data
09
Dec
2025

Researchers Find Malicious VS Code, Go, npm, and Rust Packages Stealing Developer Data

Dec 09, 2025Ravie LakshmananMalware / Threat Analysis Cybersecurity researchers have discovered two new extensions on Microsoft Visual Studio Code (VS…

Experts Confirm JS#SMUGGLER Uses Compromised Sites to Deploy NetSupport RAT
08
Dec
2025

Experts Confirm JS#SMUGGLER Uses Compromised Sites to Deploy NetSupport RAT

Cybersecurity researchers are calling attention to a new campaign dubbed JS#SMUGGLER that has been observed leveraging compromised websites as a…

How Can Retailers Cyber-Prepare for the Most Vulnerable Time of the Year?
08
Dec
2025

How Can Retailers Cyber-Prepare for the Most Vulnerable Time of the Year?

Dec 08, 2025The Hacker News The holiday season compresses risk into a short, high-stakes window. Systems run hot, teams run…