Category: EN

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.  CVE-2025-54948 Trend Micro Apex One OS Command Injection Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and…

USB Malware Campaign Spreads Cryptominer Worldwide

A multi-stage attack delivered via USB devices has been observed installing cryptomining malware using DLL hijacking and PowerShell This article has been indexed from www.infosecurity-magazine.com Read the original article: USB Malware Campaign Spreads Cryptominer Worldwide

Novel 5G Attack Bypasses Need for Malicious Base Station

Researchers detailed a new 5G attack named Sni5Gect that can allow attackers to sniff traffic  and cause disruption. The post Novel 5G Attack Bypasses Need for Malicious Base Station appeared first on SecurityWeek. This article has been indexed from SecurityWeek…

Strengthening Identity Security

Osterman’s 2025 research shows how to close identity security gaps from compromised passwords with faster detection and remediation. The post Strengthening Identity Security appeared first on Security Boulevard. This article has been indexed from Security Boulevard Read the original article:…

Workday Latest Company Hit by Third-Party CRM Platform Breach

Workday, a high-profile HR and finance software solutions maker, is the latest victim of a string of data breaches orchestrated by the resurgent ShinyHunters threat group through Salesforce’s CRM solution, joining a lineup of targets that includes Google, Qantas, Pandora,…

Technical Details of SAP 0-Day Exploitation Script for RCE Revealed

Cybersecurity researchers have unveiled the inner workings of an exploit script targeting a critical zero-day vulnerability in SAP NetWeaver’s Visual Composer Metadata Uploader, now designated as CVE-2025–31324. This flaw stems from a missing authorization check on the HTTP endpoint /developmentserver/metadatauploader,…

New NIST guide explains how to detect morphed images

Face morphing software can blend two people’s photos into one image, making it possible for someone to fool identity checks at buildings, airports, borders, and other secure places. These morphed images can trick face recognition systems into linking the photo…

Popular npm Package Compromised in Phishing Attack

An incident involving the npm package eslint-config-prettier has been uncovered spreading Scavenger RAT This article has been indexed from www.infosecurity-magazine.com Read the original article: Popular npm Package Compromised in Phishing Attack