Chinese Hackers Abuse IPv6 SLAAC for AitM Attacks via Spellbinder Lateral Movement Tool

info@thehackernews.com (The Hacker News) 2025-04-30 07:05:00 thehackernews.com Apr 30, 2025Ravie LakshmananMalware / DNS Security A China-aligned advanced persistent threat (APT)...

The Multi-Billion Dollar Problem You Don’t Know About

info@thehackernews.com (The Hacker News) 2025-04-30 06:24:00 thehackernews.com Everyone has cybersecurity stories involving family members. Here's a relatively common one. The...

Indian Court Orders Action to Block Proton Mail Over AI Deepfake Abuse Allegations

info@thehackernews.com (The Hacker News) 2025-04-30 00:45:00 thehackernews.com Apr 30, 2025Ravie LakshmananPrivacy / Data Protection A high court in the Indian...

WhatsApp Launches Private Processing to Enable AI Features While Protecting Message Privacy

info@thehackernews.com (The Hacker News) 2025-04-29 13:22:00 thehackernews.com Apr 29, 2025Ravie LakshmananArtificial Intelligence / Data Protection Popular messaging app WhatsApp on...

Malware Attack Targets World Uyghur Congress Leaders via Trojanized UyghurEdit++ Tool

info@thehackernews.com (The Hacker News) 2025-04-29 01:43:00 thehackernews.com Apr 29, 2025Ravie LakshmananCybersecurity / Malware In a new campaign detected in March...

CISA Adds Actively Exploited Broadcom and Commvault Flaws to KEV Database

info@thehackernews.com (The Hacker News) 2025-04-29 00:21:00 thehackernews.com Apr 29, 2025Ravie LakshmananVulnerability / Web Security The U.S. Cybersecurity and Infrastructure Security...

Breaking Down 5 Real Vulns

info@thehackernews.com (The Hacker News) 2025-04-28 07:00:00 thehackernews.com Not every security vulnerability is high risk on its own - but in...

Earth Kurma Targets Southeast Asia With Rootkits and Cloud-Based Data Theft Tools

info@thehackernews.com (The Hacker News) 2025-04-28 05:07:00 thehackernews.com Government and telecommunications sectors in Southeast Asia have become the target of a...

Hackers Exploit Critical Craft CMS Flaws; Hundreds of Servers Likely Compromised

info@thehackernews.com (The Hacker News) 2025-04-28 03:13:00 thehackernews.com Apr 28, 2025Ravie LakshmananWeb Application Security / Vulnerability Threat actors have been observed...

Storm-1977 Hits Education Clouds with AzureChecker, Deploys 200+ Crypto Mining Containers

info@thehackernews.com (The Hacker News) 2025-04-27 01:02:00 thehackernews.com Apr 27, 2025Ravie LakshmananKubernetes / Cloud Security Microsoft has revealed that a threat...

Researchers Identify Rack::Static Vulnerability Enabling Data Breaches in Ruby Servers

info@thehackernews.com (The Hacker News) 2025-04-25 04:57:00 thehackernews.com Apr 25, 2025Ravie LakshmananVulnerability / Data Breach Cybersecurity researchers have disclosed three security...

Linux io_uring PoC Rootkit Bypasses System Call-Based Threat Detection Tools

info@thehackernews.com (The Hacker News) 2025-04-24 08:58:00 thehackernews.com Apr 24, 2025Ravie LakshmananEndpoint Security / Linux Cybersecurity researchers have demonstrated a proof-of-concept...

Darcula Adds GenAI to Phishing Toolkit, Lowering the Barrier for Cybercriminals

info@thehackernews.com (The Hacker News) 2025-04-24 07:27:00 thehackernews.com Apr 24, 2025Ravie LakshmananPhishing / Cybercrime The threat actors behind the Darcula phishing-as-a-service...

Critical Commvault Command Center Flaw Enables Attackers to Execute Code Remotely

info@thehackernews.com (The Hacker News) 2025-04-24 06:00:00 thehackernews.com Apr 24, 2025Ravie LakshmananData Breach / Vulnerability A critical security flaw has been...

WhatsApp Adds Advanced Chat Privacy to Blocks Chat Exports and Auto-Downloads

info@thehackernews.com (The Hacker News) 2025-04-24 00:03:00 thehackernews.com Apr 24, 2025Ravie LakshmananData Protection / Artificial Intelligence WhatsApp has introduced an extra...

Russian Hackers Exploit Microsoft OAuth to Target Ukraine Allies via Signal and WhatsApp

info@thehackernews.com (The Hacker News) 2025-04-23 06:49:00 thehackernews.com Multiple suspected Russia-linked threat actors are "aggressively" targeting individuals and organizations with ties...

Ripple’s xrpl.js npm Package Backdoored to Steal Private Keys in Major Supply Chain Attack

info@thehackernews.com (The Hacker News) 2025-04-23 03:17:00 thehackernews.com Apr 23, 2025Ravie LakshmananBlockchain / Cryptocurrency The Ripple cryptocurrency npm JavaScript library named...

Google Drops Cookie Prompt in Chrome, Adds IP Protection to Incognito

info@thehackernews.com (The Hacker News) 2025-04-23 01:19:00 thehackernews.com Apr 23, 2025Ravie LakshmananPrivacy / Artificial Intelligence Google on Tuesday revealed that it...

Zambia’s Updated Cyber Laws Prompt Surveillance Warnings

Robert Lemos, Contributing Writer 2025-04-23 03:00:00 www.darkreading.com Pro-democracy activists, critics of the current government, and legal professionals in the south-central...

Microsoft Secures MSA Signing with Azure Confidential VMs Following Storm-0558 Breach

info@thehackernews.com (The Hacker News) 2025-04-22 03:38:00 thehackernews.com Apr 22, 2025Ravie LakshmananIdentity Management / Cloud Security Microsoft on Monday announced that...

Kimsuky Exploits BlueKeep RDP Vulnerability to Breach Systems in South Korea and Japan

info@thehackernews.com (The Hacker News) 2025-04-21 12:42:00 thehackernews.com Apr 21, 2025Ravie LakshmananMalware / Vulnerability Cybersecurity researchers have flagged a new malicious...

5 Reasons Device Management Isn’t Device Trust

info@thehackernews.com (The Hacker News) 2025-04-21 07:25:00 thehackernews.com The problem is simple: all breaches start with initial access, and initial access...

APT29 Deploys GRAPELOADER Malware Targeting European Diplomats Through Wine-Tasting Lures

info@thehackernews.com (The Hacker News) 2025-04-20 00:58:00 thehackernews.com The Russian state-sponsored threat actor known as APT29 has been linked to an...

Rogue npm Packages Mimic Telegram Bot API to Plant SSH Backdoors on Linux Systems

info@thehackernews.com (The Hacker News) 2025-04-19 11:11:00 thehackernews.com Apr 19, 2025Ravie LakshmananLinux / Malware Cybersecurity researchers have uncovered three malicious packages...

[Webinar] AI Is Already Inside Your SaaS Stack — Learn How to Prevent the Next Silent Breach

info@thehackernews.com (The Hacker News) 2025-04-18 05:45:00 thehackernews.com Apr 18, 2025The Hacker NewsSaaS Security / Shadow IT Your employees didn't mean...

Critical Erlang/OTP SSH Vulnerability (CVSS 10.0) Allows Unauthenticated Code Execution

info@thehackernews.com (The Hacker News) 2025-04-17 05:11:00 thehackernews.com Apr 17, 2025Ravie LakshmananVulnerability / Network Security A critical security vulnerability has been...