News

Fri 14 Mar 2025· 57 articles

1. 06:08

   New MassJacker Malware Targets Piracy Users, Hijacking Cryptocurrency Transactions

   Users searching for pirated software are the target of a new malware campaign that delivers a previously undocumented clipper malware called MassJacker, according to findings from CyberArk. Clipper malware is a type of cryware (as coined by Microsoft) that's…

   The Hacker NewsOriginal report
2. 06:01

   Decrypting Akira Ransomware on Linux/ESXi Without Paying Hackers

   A team successfully decrypted an instance of the Akira ransomware on Linux/ESXi systems without succumbing to the hackers’ demands. This achievement not only underscores the ingenuity of cybersecurity experts but also serves as a powerful message to those…

   gbhackers.comOriginal report
3. 05:37

   OBSCURE#BAT Malware Uses Fake CAPTCHA Pages to Deploy Rootkit r77 and Evade Detection

   A new malware campaign has been observed leveraging social engineering tactics to deliver an open-source rootkit called r77. The activity, condemned OBSCURE#BAT by Securonix, enables threat actors to establish persistence and evade detection on compromised…

   The Hacker NewsOriginal report
4. 05:18

   New Cyber Attack Targets PyPI Users to Steal Cloud Tokens and Sensitive Data

   A recent discovery by ReversingLabs researchers has unveiled a malicious cyber attack targeting the Python Package Index (PyPI) users, a popular platform for Python developers. This sophisticated campaign involves malicious packages masquerading as…

   gbhackers.comOriginal report
5. 05:05

   SocGholish’s Intrusion Techniques Facilitate Distribution of RansomHub Ransomware

   Trend Research analyzed SocGholish’s MaaS framework and its role in deploying RansomHub ransomware through compromised websites, using highly obfuscated JavaScript loaders to evade detection and execute various malicious tasks.

   trendmicro.comOriginal report
6. 02:13

   Google, Apple, and Microsoft Rush to Patch Actively Exploited Zero-Day Vulnerability

   In a coordinated effort to mitigate an actively exploited security vulnerability, Google, Apple, and Microsoft have released emergency

   SecurityOnlineOriginal report
7. 02:07

   Juniper Issues Urgent Fix for Actively Exploited Junos OS Flaw – CVE-2025-21590

   Juniper Networks has released an out-of-cycle security bulletin addressing an actively exploited vulnerability in Junos OS that could

   SecurityOnlineOriginal report
8. 02:02

   JSPSpy Webshells Found with Custom File Management Tool

   Hunt researchers have recently uncovered a cluster of JSPSpy web shell servers with a surprising addition: a rebranded

   SecurityOnlineOriginal report
9. 01:55

   Bitdefender BOX v1 Vulnerabilities Expose Smart Homes to Remote Attacks

   Bitdefender has issued a security advisory detailing three critical vulnerabilities affecting the Bitdefender BOX v1, a now-discontinued security

   SecurityOnlineOriginal report
10. 01:50

    Ramadan Scam Alert: Crypto Traps, Fake Giveaways Explode

    A new report from CloudSEK warns of a significant rise in scams exploiting the generosity and charitable spirit

    SecurityOnlineOriginal report
11. 01:45

    Cisco Alerts on Public Disclosure of CVE-2025-20115 – BGP Flaw Puts Networks at Risk

    Cisco has issued a security advisory addressing a denial-of-service (DoS) vulnerability in its IOS XR Software. The vulnerability,

    SecurityOnlineOriginal report
12. 01:42

    New Sobolan Malware Campaign Targets Jupyter Notebooks and Cloud-Native Environments

    Aqua Nautilus researchers have uncovered a new malware campaign that specifically targets interactive computing environments like Jupyter Notebooks,

    SecurityOnlineOriginal report
13. 01:37

    RMM Tools: The New Weapon of Choice for Cybercriminals

    Proofpoint researchers have released a report highlighting a concerning trend: the increasing use of legitimate Remote Monitoring and

    SecurityOnlineOriginal report
14. 01:33

    Lazarus Breaches IIS: Web Shells & Evolving C2 Tactics Unveiled

    The notorious North Korean threat actor Lazarus Group has been identified breaching Windows web servers to establish command-and-control

    SecurityOnlineOriginal report
15. 01:30

    Keras Deep Learning Framework Hit by Arbitrary Code Execution Vulnerability (CVE-2025-1550)

    A security vulnerability has been discovered in Keras, a widely-used multi-backend deep learning framework. The vulnerability, tracked as

    SecurityOnlineOriginal report
16. 00:32

    XCSSET Malware Returns with Enhanced Obfuscation and Persistence Techniques

    Microsoft Threat Intelligence has discovered a new variant of the XCSSET malware, a sophisticated threat targeting macOS developers.

    SecurityOnlineOriginal report
17. 00:02

    U.S. CISA adds Apple products and Juniper Junos OS flaws to its Known Exploited Vulnerabilities catalog

    U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple products and Juniper Junos OS flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities...

    Security AffairsOriginal report