Malware Attack Targets World Uyghur Congress Leaders via Trojanized UyghurEdit++ Tool

info@thehackernews.com (The Hacker News) 2025-04-29 01:43:00 thehackernews.com Apr 29, 2025Ravie LakshmananCybersecurity / Malware In a new campaign detected in March...

CISA Adds Actively Exploited Broadcom and Commvault Flaws to KEV Database

info@thehackernews.com (The Hacker News) 2025-04-29 00:21:00 thehackernews.com Apr 29, 2025Ravie LakshmananVulnerability / Web Security The U.S. Cybersecurity and Infrastructure Security...

Breaking Down 5 Real Vulns

info@thehackernews.com (The Hacker News) 2025-04-28 07:00:00 thehackernews.com Not every security vulnerability is high risk on its own - but in...

Earth Kurma Targets Southeast Asia With Rootkits and Cloud-Based Data Theft Tools

info@thehackernews.com (The Hacker News) 2025-04-28 05:07:00 thehackernews.com Government and telecommunications sectors in Southeast Asia have become the target of a...

Hackers Exploit Critical Craft CMS Flaws; Hundreds of Servers Likely Compromised

info@thehackernews.com (The Hacker News) 2025-04-28 03:13:00 thehackernews.com Apr 28, 2025Ravie LakshmananWeb Application Security / Vulnerability Threat actors have been observed...

Storm-1977 Hits Education Clouds with AzureChecker, Deploys 200+ Crypto Mining Containers

info@thehackernews.com (The Hacker News) 2025-04-27 01:02:00 thehackernews.com Apr 27, 2025Ravie LakshmananKubernetes / Cloud Security Microsoft has revealed that a threat...

Researchers Identify Rack::Static Vulnerability Enabling Data Breaches in Ruby Servers

info@thehackernews.com (The Hacker News) 2025-04-25 04:57:00 thehackernews.com Apr 25, 2025Ravie LakshmananVulnerability / Data Breach Cybersecurity researchers have disclosed three security...

Linux io_uring PoC Rootkit Bypasses System Call-Based Threat Detection Tools

info@thehackernews.com (The Hacker News) 2025-04-24 08:58:00 thehackernews.com Apr 24, 2025Ravie LakshmananEndpoint Security / Linux Cybersecurity researchers have demonstrated a proof-of-concept...

Darcula Adds GenAI to Phishing Toolkit, Lowering the Barrier for Cybercriminals

info@thehackernews.com (The Hacker News) 2025-04-24 07:27:00 thehackernews.com Apr 24, 2025Ravie LakshmananPhishing / Cybercrime The threat actors behind the Darcula phishing-as-a-service...

Critical Commvault Command Center Flaw Enables Attackers to Execute Code Remotely

info@thehackernews.com (The Hacker News) 2025-04-24 06:00:00 thehackernews.com Apr 24, 2025Ravie LakshmananData Breach / Vulnerability A critical security flaw has been...

WhatsApp Adds Advanced Chat Privacy to Blocks Chat Exports and Auto-Downloads

info@thehackernews.com (The Hacker News) 2025-04-24 00:03:00 thehackernews.com Apr 24, 2025Ravie LakshmananData Protection / Artificial Intelligence WhatsApp has introduced an extra...

Russian Hackers Exploit Microsoft OAuth to Target Ukraine Allies via Signal and WhatsApp

info@thehackernews.com (The Hacker News) 2025-04-23 06:49:00 thehackernews.com Multiple suspected Russia-linked threat actors are "aggressively" targeting individuals and organizations with ties...

Ripple’s xrpl.js npm Package Backdoored to Steal Private Keys in Major Supply Chain Attack

info@thehackernews.com (The Hacker News) 2025-04-23 03:17:00 thehackernews.com Apr 23, 2025Ravie LakshmananBlockchain / Cryptocurrency The Ripple cryptocurrency npm JavaScript library named...

Google Drops Cookie Prompt in Chrome, Adds IP Protection to Incognito

info@thehackernews.com (The Hacker News) 2025-04-23 01:19:00 thehackernews.com Apr 23, 2025Ravie LakshmananPrivacy / Artificial Intelligence Google on Tuesday revealed that it...

Zambia’s Updated Cyber Laws Prompt Surveillance Warnings

Robert Lemos, Contributing Writer 2025-04-23 03:00:00 www.darkreading.com Pro-democracy activists, critics of the current government, and legal professionals in the south-central...

Microsoft Secures MSA Signing with Azure Confidential VMs Following Storm-0558 Breach

info@thehackernews.com (The Hacker News) 2025-04-22 03:38:00 thehackernews.com Apr 22, 2025Ravie LakshmananIdentity Management / Cloud Security Microsoft on Monday announced that...

Kimsuky Exploits BlueKeep RDP Vulnerability to Breach Systems in South Korea and Japan

info@thehackernews.com (The Hacker News) 2025-04-21 12:42:00 thehackernews.com Apr 21, 2025Ravie LakshmananMalware / Vulnerability Cybersecurity researchers have flagged a new malicious...

5 Reasons Device Management Isn’t Device Trust

info@thehackernews.com (The Hacker News) 2025-04-21 07:25:00 thehackernews.com The problem is simple: all breaches start with initial access, and initial access...

APT29 Deploys GRAPELOADER Malware Targeting European Diplomats Through Wine-Tasting Lures

info@thehackernews.com (The Hacker News) 2025-04-20 00:58:00 thehackernews.com The Russian state-sponsored threat actor known as APT29 has been linked to an...

Rogue npm Packages Mimic Telegram Bot API to Plant SSH Backdoors on Linux Systems

info@thehackernews.com (The Hacker News) 2025-04-19 11:11:00 thehackernews.com Apr 19, 2025Ravie LakshmananLinux / Malware Cybersecurity researchers have uncovered three malicious packages...

[Webinar] AI Is Already Inside Your SaaS Stack — Learn How to Prevent the Next Silent Breach

info@thehackernews.com (The Hacker News) 2025-04-18 05:45:00 thehackernews.com Apr 18, 2025The Hacker NewsSaaS Security / Shadow IT Your employees didn't mean...

Critical Erlang/OTP SSH Vulnerability (CVSS 10.0) Allows Unauthenticated Code Execution

info@thehackernews.com (The Hacker News) 2025-04-17 05:11:00 thehackernews.com Apr 17, 2025Ravie LakshmananVulnerability / Network Security A critical security vulnerability has been...

CISA Flags Actively Exploited Vulnerability in SonicWall SMA Devices

info@thehackernews.com (The Hacker News) 2025-04-17 01:44:00 thehackernews.com Apr 17, 2025Ravie LakshmananVulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security...

Apple Patches Two Actively Exploited iOS Flaws Used in Sophisticated Targeted Attacks

info@thehackernews.com (The Hacker News) 2025-04-16 23:33:00 thehackernews.com Apr 17, 2025Ravie LakshmananZero-Day / Vulnerability Apple on Wednesday released security updates for...

New BPFDoor Controller Enables Stealthy Lateral Movement in Linux Server Attacks

info@thehackernews.com (The Hacker News) 2025-04-16 06:37:00 thehackernews.com Apr 16, 2025Ravie LakshmananCyber Espionage / Network Security Cybersecurity researchers have unearthed a...

U.S. Govt. Funding for MITRE’s CVE Ends April 16, Cybersecurity Community on Alert

info@thehackernews.com (The Hacker News) 2025-04-16 01:06:00 thehackernews.com Apr 16, 2025Ravie LakshmananVulnerability Management / Incident Response The U.S. government funding for...