The United States has introduced a sweeping new requirement for all applicants seeking F, M, or J nonimmigrant visas: effective immediately, individuals must set the privacy settings of all their personal social media accounts to “public” before submitting their visa…
Category: Cyber Security News
NVIDIA Megatron LM Vulnerability Let Attackers Inject Malicious Code
Critical security vulnerabilities in NVIDIA Megatron LM large language model framework that could allow attackers to inject malicious code and gain unauthorized system access. The company released emergency security patches on June 24, 2025, addressing two high-severity vulnerabilities that affect…
CISA Issued ICS Advisories Covering Current Vulnerabilities and Exploits
CISA has issued eight Industrial Control Systems (ICS) advisories on June 24, 2025, highlighting significant security vulnerabilities across multiple vendors’ systems. The advisories, coded as ICSA-25-175-01 through ICSA-25-175-07, plus an update to a previously identified vulnerability (ICSA-19-029-02 Update B), provide…
APT Hackers Abuse Microsoft ClickOnce to Execute Malware as Trusted Host
A sophisticated new APT malware campaign has emerged, specifically targeting critical energy, oil, and gas infrastructure through an advanced exploitation of Microsoft ClickOnce technology. The campaign, designated as OneClik by cybersecurity researchers, represents a significant evolution in attack methodologies, demonstrating…
TeamViewer for Windows Vulnerability Let Attackers Delete Files Using SYSTEM Privileges
A significant security vulnerability in the TeamViewer Remote Management solution for Windows that could allow attackers with local access to delete arbitrary files with SYSTEM privileges, potentially leading to privilege escalation. The vulnerability, identified as CVE-2025-36537, was announced on June…
NCSC Warns of SHOE RACK Malware Using DOH & SSH Protocol for Attacking Fortinet Firewalls
The UK’s National Cyber Security Centre (NCSC) has issued a critical warning about a sophisticated post-exploitation malware strain dubbed SHOE RACK, which leverages an unusual combination of DNS-over-HTTPS (DOH) and SSH protocols to establish persistent backdoor access on compromised systems.…
New DRAT V2 Updates C2 Protocol Expands Functional Capabilities With Shell Command Execution
A sophisticated evolution in the cyber threat landscape has emerged with the discovery of DRAT V2, a significantly enhanced remote access trojan that demonstrates the continuing advancement of state-aligned threat actors targeting critical infrastructure. This latest iteration represents a strategic…
Gonjeshke Darande Threat Actors Pose as Hacktivist Infiltrated Iranian Crypto Exchange
In a significant escalation of cyber warfare in the Middle East, suspected Israeli state-sponsored threat actors operating under the name “Gonjeshke Darande” (Predatory Sparrow) successfully infiltrated Nobitex, Iran’s largest cryptocurrency exchange, on June 18, 2025. Rather than extracting funds for…
New FileFix Attack Abuses Windows File Explorer to Execute Malicious Commands
A novel social engineering technique called “FileFix” that exploits Windows File Explorer’s address bar functionality to execute malicious commands, presenting a dangerous alternative to the increasingly popular ClickFix attack method. The technique, discovered by security researcher mr.d0x, leverages browser file…
Threat Actors Abuse ConnectWise Configuration to Build a Signed Malware
A sophisticated malware campaign has emerged that exploits legitimate ConnectWise remote access software to create validly signed malicious applications, representing a significant evolution in cybercriminal tactics. Since March 2025, security researchers have observed a dramatic increase in attacks using what…
Google Cloud Donates A2A Protocol to Linux Foundation Enables Secure, Intelligent Communication
Google Cloud has transferred its groundbreaking Agent2Agent (A2A) protocol to the Linux Foundation, marking a pivotal moment in artificial intelligence interoperability. The announcement, made at Open Source Summit North America on June 23, 2025, establishes a new collaborative framework for…
Zimbra Classic Web Client Vulnerability Let Attackers Execute Arbitrary JavaScript
A critical security vulnerability has been discovered in Zimbra Classic Web Client that enables attackers to execute arbitrary JavaScript code through stored cross-site scripting (XSS) attacks. The vulnerability, designated as CVE-2025-27915, poses significant risks to organizations using affected Zimbra installations,…
Facebook, Netflix, Microsoft Hijacked to Insert Fake Phone Number
A sophisticated scam operation targeting major American companies, including Netflix, Microsoft, and Bank of America, where attackers manipulate legitimate websites to display fraudulent phone numbers. The attack, technically classified as a search parameter injection attack, exploits vulnerabilities in website search…
2,000+ Devices Hacked Using Weaponized Social Security Statement Themes
A sophisticated phishing campaign masquerading as official Social Security Administration (SSA) communications has successfully compromised more than 2,000 devices, according to a recent investigation. The attack, which leverages the trust associated with government correspondence, represents a concerning evolution in social…
Critical Convoy Vulnerability Let Attackers Execute Remote Code on Affected Servers
A critical security vulnerability has been discovered in Performave Convoy that allows unauthenticated remote attackers to execute arbitrary code on affected servers. The vulnerability, identified as CVE-2025-52562, affects all versions from 3.9.0-rc.3 through 4.4.0 of the ConvoyPanel/panel package. Security researcher…
Xiaomi’s Interoperability App Vulnerability Let Hackers Gain Unauthorized Access to the Victim’s Device
A severe security vulnerability has been discovered in Xiaomi’s interoperability application, potentially exposing millions of users to unauthorized device access. The vulnerability, assigned CVE-2024-45347, carries a severe CVSS score of 9.6, indicating its high-risk nature for affected users. Attackers can…
OPPO Clone Phone Weak WiFi Hotspot Exposes Sensitive Data
A critical security vulnerability has been discovered in OPPO’s Clone Phone feature that could expose sensitive user data through inadequately secured WiFi hotspots. The vulnerability, designated CVE-2025-27387, affects ColorOS 15.0.2 and earlier versions, presenting a high-severity risk with a CVSS…
Pro-Iranian Hacktivists Targeting US Networks Department of Homeland Security Warns
The Department of Homeland Security has issued a critical advisory warning of escalating cyber threats from pro-Iranian hacktivist groups targeting United States networks, as tensions between Iran and the US reach a dangerous new peak following recent military exchanges. The…
Weaponized DMV-Themed Phishing Attacking U.S. Citizens to Harvest Personal and Financial Data
A sophisticated phishing campaign emerged in May 2025, targeting U.S. citizens through a coordinated impersonation of state Department of Motor Vehicles (DMV) agencies. This large-scale operation utilized SMS phishing techniques combined with deceptive web infrastructure to harvest personal and financial…
OWASP AI Testing Guide – A New Project to Detect Vulnerabilities in AI Applications
The Open Web Application Security Project (OWASP) has announced the development of a comprehensive OWASP AI Testing Guide, marking a significant milestone in addressing the growing security challenges posed by artificial intelligence implementations across industries. This specialized framework emerges as…