News

Tue 16 Sep 2025· 96 articles

1. 05:58

   Insider breach at FinWise Bank exposes data of 689,000 AFF customers

   An insider breach at FinWise Bank exposed the data of 689,000 American First Finance customers. The incident occurred on 31 May 2024, when FinWise Bank notified the Maine AG that a former employee who had left the organisation continued to access AFF data.…

   Security Affairs
   
2. 05:30

   Microsoft Resolves Bluetooth Audio Problem in Windows 11 24H2 Update

   Microsoft has addressed a widespread audio issue affecting Bluetooth speakers, headsets and built-in laptop speakers in Windows 11 version 24H2, caused by an incompatibility with Dirac Audio’s cridspapo[.]dll. According to Microsoft, the problem arose when…

   gbhackers.com
3. 05:14

   Open Source CyberSOCEval Sets New Benchmark for AI in Malware Analysis and Threat Intelligence

   Open Source CyberSOCEval, a newly launched evaluation platform, is making waves in the cybersecurity community by demonstrating how artificial intelligence can transform malware analysis and threat intelligence. Developed by a group of independent security…

   gbhackers.com
   
4. 05:00

   40 npm Packages Compromised in Supply Chain Attack Using bundle.js to Steal Credentials

   Cybersecurity researchers have flagged a fresh software supply chain attack targeting the npm registry that has affected more than 40 packages from multiple maintainers. The compromised versions inject a local bundle[.]js and modify package[.]json to…

   The Hacker News
5. 04:50

   Daily CyberSecurity Launches CVE Watchtower: Live Intelligence for a Faster Response

   Daily CyberSecurity has launched CVE Watchtower, a live intelligence service designed to deliver real-time vulnerability information to help organisations respond faster. The offering provides tiered access, including a Free Tier for CVE numbers, Level 1 at…

   SecurityOnline
   
6. 03:20

   Unmasking the DarkCloud: A New Stealer Is Hiding Malware in JPG Files

   According to CyberProof, MDR analysts observed a sharp increase in DarkCloud Stealer infections, with campaigns primarily targeting financial organisations through phishing emails carrying malicious RAR attachments. The initial access vector was a phishing…

   SecurityOnline
   
7. 02:35

   CVE-2025-5821: Critical Authentication Bypass in WordPress Case Theme User Plugin Exploited in the Wild

   CVE-2025-5821 describes a critical authentication bypass in the Case Theme User WordPress plugin, which has around 12,000 active installations and is bundled in multiple premium themes. The flaw, present in all versions up to 1.0.3, stems from the plugin’s…

   SecurityOnline
   
8. 02:00

   HijackLoader: The Stealthy Malware Loader Powering Modern Cyberattacks

   HijackLoader has emerged as a stealthy malware loader used to gain initial access, evade defenses and deliver sophisticated payloads, with Seqrite highlighting its prominence since mid-2023 and its growing role in Malware-as-a-Service offerings. Since…

   SecurityOnline
   
9. 01:53

   Maranhão Stealer: A New Malware Hijacks Gamers’ PCs Through Pirated Games

   The Cyble Research and Intelligence Labs (CRIL) has uncovered an active campaign distributing a new information-stealing malware named Maranhão Stealer, first detected in May 2025. It targets gamers through social engineering websites that offer pirated…

   SecurityOnline
   
10. 01:40

    Spring Framework and Spring Security Vulnerabilities Expose Authorization Bypass Risks (CVE-2025-41248 & CVE-2025-41249)

    According to the advisory, two related vulnerabilities—CVE-2025-41248 and CVE-2025-41249—affect Spring Security and the Spring Framework, arising from annotation resolution flaws in method security checks when parameterised types with unbounded generics are…

    SecurityOnline
    
11. 01:20

    @ctrl/tinycolor and 40+ NPM Packages Compromised

    The StepSecurity blog reports that the popular @ctrl/tinycolor package, which receives over 2 million weekly downloads, has been compromised alongside more than 40 other NPM packages across multiple maintainers. The attack features a self-propagating malware…

    StepSecurity
12. 00:38

    Former Defense Contractor Sentenced to Over 10 Years in Prison for Attempted Espionage

    According to U.S. Department of Justice, John Murray Rowe Jr., 67, of Lead, South Dakota, was sentenced to 126 months in prison, followed by three years of supervised release and a $25,000 fine for attempted espionage. The defendant was charged by indictment…

    DataBreaches
13. 00:15

    PoC Published: Linux Kernel 0-Click RCE Vulnerability Found in ksmbd

    According to BitsByWill, a security researcher who conducted a deep-dive into ksmbd, two Linux kernel flaws—CVE-2023-52440 and CVE-2023-4130—affect ksmbd, the in-kernel SMB server. The first, CVE-2023-52440, is a controlled SLUB overflow in…

    SecurityOnline
    
14. 00:10

    Kimsuky Group Weaponizes AI Deepfakes in New Spear-Phishing Campaign

    The Genians Security Center (GSC) has uncovered a new spear-phishing campaign by the North Korean threat group Kimsuky, detected on 17 July 2025 and attributed to their use of artificial intelligence in cyberattacks. The campaign impersonated a South Korean…

    SecurityOnlineKimsuky
    
15. 00:06

    Yurei: The New Ransomware Group Using Open-Source Code to Target Businesses

    Yurei is a newly identified ransomware group named after spirits from Japanese folklore, with its first listed victim a Sri Lankan food manufacturing company and additional victims from India and Nigeria soon appearing on its darknet leak site, according to…

    SecurityOnline
    
16. 00:01

    A Digital Trojan Horse: A New Campaign Is Using SEO to Deliver Malware

    Researchers at FortiGuard Labs have uncovered a sophisticated SEO poisoning campaign aimed at Chinese-speaking users, manipulating search engine rankings and creating lookalike domains to lure victims into downloading malware disguised as legitimate…

    SecurityOnline