DoNot APT Expands Operations, Targets European Foreign Ministries with LoptikMod Malware
09
Jul
2025

DoNot APT Expands Operations, Targets European Foreign Ministries with LoptikMod Malware

Jul 09, 2025Ravie LakshmananMalware / Cyber Espionage A threat actor with suspected ties to India has been observed targeting a…

UK government signs deal with Google Cloud to upskill 100,000 civil servants in AI by 2030
09
Jul
2025

UK government signs deal with Google Cloud to upskill 100,000 civil servants in AI by 2030

As part of the agreement, Google will train 100,000 civil servants working across the public sector in using AI and…

Token MFA header
09
Jul
2025

The MFA You Trust Is Lying to You – and Here’s How Attackers Exploit It

Still getting login codes via text or authenticator apps? You’re not alone—and that’s a big problem. What used to feel…

Microsoft Patches Wormable RCE Vulnerability in Windows and Windows Server
09
Jul
2025

Microsoft Patches Wormable RCE Vulnerability in Windows and Windows Server

Microsoft has released critical security updates to address CVE-2025-47981, a severe heap-based buffer overflow vulnerability in the SPNEGO Extended Negotiation…

SparkKitty Malware Steals Photos from iOS and Android Devices
09
Jul
2025

SparkKitty Malware Steals Photos from iOS and Android Devices

A sophisticated Trojan malware campaign has been targeting mobile device users across iOS and Android platforms since February 2024, with…

Iranian group Pay2Key.I2P ramps Up ransomware attacks against Israel and US with incentives for affiliates
09
Jul
2025

Iranian group Pay2Key.I2P ramps Up ransomware attacks against Israel and US with incentives for affiliates

Iranian group Pay2Key.I2P ramps Up ransomware attacks against Israel and US with incentives for affiliates Pierluigi Paganini July 09, 2025…

VS Code Extension Weaponized With Two Lines of Code Leads to Supply Chain Attack
09
Jul
2025

VS Code Extension Weaponized With Two Lines of Code Leads to Supply Chain Attack

A sophisticated supply chain attack has compromised ETHcode, a popular Visual Studio Code extension for Ethereum development, through a malicious…

TapTrap Android Exploit Allows Malicious Apps to Bypass Permissions
09
Jul
2025

TapTrap Android Exploit Allows Malicious Apps to Bypass Permissions

A new Android vulnerability called TapTrap that allows malicious apps to bypass the operating system’s permission system without requiring any…

How To Automate Ticket Creation, Device Identification and Threat Triage With Tines
09
Jul
2025

How To Automate Ticket Creation, Device Identification and Threat Triage With Tines

Jul 09, 2025The Hacker NewsSecurity Operations / Automation Run by the team at workflow orchestration and AI platform Tines, the…

Chinese Hackers Exploit Microsoft Exchange Servers to Steal COVID-19 Research Data
09
Jul
2025

Chinese Hackers Exploit Microsoft Exchange Servers to Steal COVID-19 Research Data

A sophisticated cyberattack orchestrated by Chinese state-sponsored hackers has exposed vulnerabilities in the global cybersecurity infrastructure, targeting critical COVID-19 research…

Hackers Exploit IIS Machine Keys to Breach Organizations
09
Jul
2025

Hackers Exploit IIS Machine Keys to Breach Organizations

A sophisticated campaign by an initial access broker (IAB) group exploiting leaked Machine Keys from ASP.NET websites to gain unauthorized…

Lessons from Ireland on closing the cybersecurity talent gap
09
Jul
2025

OpenAI’s Investment for AI Cyber Threats. Next-Generation Security Awareness Training.

Adaptive Security provides one platform to prevent GenAI social engineering. The cybersecurity startup is upgrading the human firewall for deepfake personas,…