A critical security flaw (CVE-2024-6198) in widely deployed Viasat satellite modems allows unauthenticated attackers to execute arbitrary code on affected devices via a stack buffer overflow in the “SNORE” web interface. The vulnerability, rated 7.7 (High) on the CVSS v4…
Category: Cyber Security News
China-Nexus Hackers Attacking Organizations Infrastructure & High-Value Customers
A sophisticated China-linked threat actor has been conducting extensive cyber espionage operations targeting critical infrastructure and high-value organizations across multiple sectors. This activity cluster, tracked as PurpleHaze, demonstrates technical overlaps with previously identified Chinese advanced persistent threats and employs a…
AI-Powered Threats – How CISOs Can Stay Ahead of the Curve
Artificial Intelligence (AI) is rapidly transforming the cybersecurity landscape, introducing both unprecedented opportunities and formidable challenges. For Chief Information Security Officers (CISOs), the rise of AI-powered threats means traditional defenses are no longer sufficient. Attackers are leveraging machine learning, automation,…
Why Your CISO Should Report to the CEO, Not the CIO
In an era where cyber threats dominate boardroom discussions, the reporting structure of a Chief Information Security Officer (CISO) has profound implications for organizational resilience. Traditionally, CISOs reported to Chief Information Officers (CIOs), reflecting the perception of cybersecurity as a…
Hackers Exploit MS Equation Editor Vulnerability to Deploy XLoader Malware
A sophisticated phishing campaign exploiting a nearly 8-year-old Microsoft Office vulnerability to distribute the dangerous XLoader information stealer. The attack leverages CVE-2017-11882, a memory corruption vulnerability in Microsoft’s Equation Editor component, demonstrating that cybercriminals continue to successfully weaponize older security…
Securing Boardroom Buy-In for Your Cybersecurity Budget
Cybersecurity has evolved from a technical concern to a strategic business priority. With escalating regulatory requirements, sophisticated threat actors, and the rising financial and reputational costs of breaches, boards of directors are increasingly scrutinizing cybersecurity investments. However, securing budget approval…
Outlaw Cybergang Attacking Linux Environments Worldwide With New Malware
A previously documented threat actor known as Outlaw (or “Dota”) has resurfaced with an enhanced malware toolkit targeting Linux servers globally, according to a recent incident response investigation by Securelist analysts. The group, active since at least 2018, has shifted…
Konni APT Hackers Using Multi-Stage Malware to Attack Organizations
A sophisticated multi-stage malware campaign linked to the North Korean Konni APT group has been detected targeting organizations primarily in South Korea. Security researchers uncovered the operation on April 29, 2025, revealing a complex attack chain designed to establish persistent…
OpenAI Rolled Out Last Week’s GPT-4o Update Causing Flattering Issues
OpenAI has reversed last week’s update to its GPT-4o model after users reported the AI had become excessively agreeable and flattering, a behavior AI researchers term “sycophancy.” The company confirmed that the rollback is complete for free users and is…
Firefox 138 Released With Fix for Multiple High-Severity Vulnerabilities
Mozilla has released Firefox 138, addressing several high-severity security vulnerabilities while introducing long-awaited features, including improved profile management. Security researchers identified multiple critical flaws that could allow attackers to escalate privileges or bypass security mechanisms, prompting this significant security update,…
Samsung MagicINFO Vulnerability Allows Remote Code Execution Without Valid User
A critical security vulnerability has been discovered in Samsung’s MagicINFO digital signage management platform that could allow attackers to execute arbitrary code with system-level privileges without requiring authentication. The vulnerability, tracked as CVE-2024-7399, affects Samsung MagicINFO 9 Server versions prior…
New Germlin Stealer Advertised on Hacker Forums Steals Credit Card Data & Login Credentials
Cybersecurity researchers have identified a new information-stealing malware called Gremlin Stealer that has been active in the wild since March 2025. This sophisticated malware targets sensitive information including browser data, cryptocurrency wallets, and various login credentials. First spotted being advertised…
Key Breakthroughs from RSA Conference 2025 – Day 1
The first day of the RSA Conference 2025 set the stage for a transformative era in cybersecurity, with over 44,000 attendees and 300+ vendors converging in San Francisco to showcase cutting-edge solutions. Against a backdrop of escalating AI-driven threats and…
CISA Warns SAP 0-day Vulnerability Exploited in the Wild
CISA has added a critical SAP NetWeaver vulnerability to its Known Exploited Vulnerabilities (KEV) catalog on April 29, 2025. The zero-day flaw, tracked as CVE-2025-31324, carries a maximum CVSS score of 10.0 and has been actively exploited in the wild…
WhatsApp Introduces AI Tools With Promise of Full Message Secrecy
WhatsApp, the world’s largest messaging platform, has announced a major leap in privacy-preserving artificial intelligence (AI) with the introduction of its new “Private Processing” system. This technology enables users to access advanced AI features-such as message summarization and writing suggestions-while…
Hackers Leveraging GetShared to Deploy Malware Bypassing Defenses
Cybercriminals have discovered a new attack vector utilizing the legitimate file-sharing service GetShared to distribute malware and conduct phishing campaigns. This emerging threat allows attackers to circumvent traditional email security measures by exploiting the trusted status of notifications from recognized…
Verizon 2025 Report Alarming Rise in Cyberattacks Via Third-Parties
Verizon Business recently released its 2025 Data Breach Investigations Report (DBIR), revealing a disturbing trend in the cybersecurity landscape: third-party involvement in data breaches has doubled to 30% over the past year, creating unprecedented challenges for organizations worldwide. This significant…
Avast Antivirus Vulnerability Let Attackers Escalate Privileges
Security researchers have disclosed a critical vulnerability in Avast Free Antivirus that could allow attackers to gain elevated system privileges and execute malicious code with kernel-level access. The vulnerability, tracked as CVE-2025-3500, received a high CVSS score of 8.8 and…
Unpatched Windows Shortcut Vulnerability Let Attackers Execute Remote Code – PoC Released
Security researcher Nafiez has publicly disclosed a previously unknown vulnerability affecting Windows LNK files (shortcuts) that can potentially allow attackers to execute code remotely without user interaction. Despite releasing a working proof-of-concept (PoC), Microsoft has declined to patch the flaw,…
GitAuto Strengthens Code Security By Automating QA At Scale
In the current software landscape, security breaches caused by untested or poorly tested code are both common and costly. While automated testing is often cited as a best practice, it remains inconsistently applied due to the manual overhead required. GitAuto,…