IBM has disclosed a critical authentication bypass vulnerability affecting its API Connect platform, assigning it a maximum CVSS severity score of 9.8. The flaw, tracked as CVE-2025-13915, represents a primary authentication weakness (CWE-305) that requires no user interaction or special…
ESET Flags Rising Threat of AI-Driven Malware and Ransomware
The cybersecurity landscape entered a critical new era in the second half of 2025 as AI-powered malware transitioned from theoretical threat to tangible reality, while the ransomware-as-a-service economy expanded at an unprecedented pace. According to ESET Research’s latest Threat Report,…
Hackers Promote “VOID” AV Killer Claiming Kernel-Level Defense Evasion
A threat actor operating under the handle Crypt4You has begun advertising a sophisticated new offensive tool on underground cybercrime forums, marketed as a “kernel-level” security neutralization utility. Dubbed VOID KILLER, the malware is designed explicitly to terminate antivirus (AV) and Endpoint Detection and…
Magecart Campaign Deploys 50+ Malicious Scripts to Hijack E-Commerce Transactions
A sophisticated and expansive Magecart campaign has been uncovered, marking a dangerous evolution in client-side attacks. Security researchers have identified a global operation utilizing over 50 distinct malicious scripts to hijack checkout and account creation flows across dozens of e-commerce…
WHILL Model C2 Electric Wheelchairs and Model F Power Chairs
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker within Bluetooth range to take control over the product. The following versions of WHILL Model C2 Electric Wheelchairs and Model F Power Chairs are affected: Model C2 Electric…
NDSS 2025 – Distributed Function Secret Sharing And Applications
Session 7C: Secure Protocols Authors, Creators & Presenters: Pengzhi Xing (University of Electronic Science and Technology of China), Hongwei Li (University of Electronic Science and Technology of China), Meng Hao (Singapore Management University), Hanxiao Chen (University of Electronic Science and…
Korean Air Confirms Employee Data Leak Linked to Third-Party Breach
Korean Air has confirmed that personal information belonging to thousands of its employees was exposed following a cyber incident at Korean Air Catering and Duty-Free, commonly referred to as KC&D. The company disclosed the issue after receiving notification from…
CSA Issues Alert on Critical SmarterMail Bug Allowing Remote Code Execution
The Cyber Security Agency of Singapore (CSA) has issued a bulletin warning of a maximum-severity security flaw in SmarterTools SmarterMail email software that could be exploited to achieve remote code execution. The vulnerability, tracked as CVE-2025-52691, carries a CVSS score…
IT Security News Hourly Summary 2025-12-30 18h : 2 posts
2 posts were published in the last hour 16:32 : 2.5M Malicious Requests Hit Adobe ColdFusion and Others in Holiday Attack 16:31 : Azure Fundamentals Study Notes: Your Ultimate Guide to AZ-900
2.5M Malicious Requests Hit Adobe ColdFusion and Others in Holiday Attack
A holiday-timed campaign drove 2.5 million malicious requests targeting Adobe ColdFusion and other enterprise platforms. The post 2.5M Malicious Requests Hit Adobe ColdFusion and Others in Holiday Attack appeared first on eSecurity Planet. This article has been indexed from eSecurity…
Azure Fundamentals Study Notes: Your Ultimate Guide to AZ-900
A beginner-friendly AZ-900 guide covering cloud concepts, Azure services, architecture, governance, monitoring, and exam prep for Azure Fundamentals certification. This article has been indexed from CyberMaterial Read the original article: Azure Fundamentals Study Notes: Your Ultimate Guide to AZ-900
Mustang Panda deploys ToneShell via signed kernel-mode rootkit driver
China-linked APT Mustang Panda used a signed kernel-mode rootkit driver to load shellcode and deploy its ToneShell backdoor. China-linked APT Mustang Panda (aka Hive0154, HoneyMyte, Camaro Dragon, RedDelta or Bronze President) was observed using a signed kernel-mode rootkit driver with embedded shellcode to deploy…
Chinese Hackers Use Rootkit to Hide ToneShell Malware Activity
A Chinese-linked threat group tied to the HoneyMyte, also known as Mustang Panda or Bronze President, is using a new kernel rootkit to hide its ToneShell backdoor. The campaign has hit government networks across Southeast and East Asia, with the…
Interview QnA: Blockchain for Cybersecurity
A structured QnA guide explaining blockchain fundamentals, security features, smart contracts, risks, and real-world cybersecurity applications for interviews. This article has been indexed from CyberMaterial Read the original article: Interview QnA: Blockchain for Cybersecurity
HoneyMyte (aka Mustang Panda) Deploys ToneShell Backdoor in New Attacks
HoneyMyte (Mustang Panda) is back with a new ToneShell backdoor. Read how this stealthy attack blinds Microsoft Defender to target government entities in Asia. This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI, and More Read…
Best of 2025: How Secure Are Your Machine Identities in the Cloud?
Are Your Machine Identities Secure in the Cloud? More and more organizations are shifting their operations to the cloud. While this move optimizes business processes and enhances productivity, it also presents new challenges. One of the top concerns is the…
SQL Study Notes Part I: Foundations of Structured Query Language
SQL fundamentals covering data retrieval, filtering, arithmetic, table creation, updates, deletes, NULL handling, and safe querying for beginners. This article has been indexed from CyberMaterial Read the original article: SQL Study Notes Part I: Foundations of Structured Query Language
Cyber Briefing: 2025.12.30
AI investment scams surge as Mac malware bypasses Gatekeeper, critical software flaws emerge, ransomware hits universities, and massive breaches expose millions. This article has been indexed from CyberMaterial Read the original article: Cyber Briefing: 2025.12.30
Trend Micro’s Pivotal Role in INTERPOL’s Operation Sentinel: Dismantling Digital Extortion Networks Across Africa
Continuing a Legacy of Successful Collaboration This article has been indexed from Trend Micro Research, News and Perspectives Read the original article: Trend Micro’s Pivotal Role in INTERPOL’s Operation Sentinel: Dismantling Digital Extortion Networks Across Africa
Get Executives on board with managing Cyber Risk
Learn how the 2025 Trend Micro Defenders Survey Report helps paint a clear picture of how security teams are looking to work with executive leaders to manage cyber risk. This article has been indexed from Trend Micro Research, News and…
Zero-Day RCE Exposes 70,000+ XSpeeder Devices Worldwide
A critical zero-day in XSpeeder’s SXZOS firmware allows unauthenticated remote code execution on more than 70,000 exposed devices worldwide. The post Zero-Day RCE Exposes 70,000+ XSpeeder Devices Worldwide appeared first on eSecurity Planet. This article has been indexed from eSecurity…
A Year of Unprecedented Cybersecurity Incidents Redefined Global Risk in 2025
The year 2025 marked a turning point in the global cybersecurity landscape, with the scale, frequency, and impact of attacks surpassing anything seen before. Across governments, enterprises, and critical infrastructure, breaches were no longer isolated technical failures but events…
SOC Analyst Study Notes Part IV: Malware Analysis and Reverse Engineering
Malware analysis helps SOC analysts safely dissect threats, extract IOCs, and turn reverse engineering insights into faster detection, response, and defense improvements. This article has been indexed from CyberMaterial Read the original article: SOC Analyst Study Notes Part IV: Malware…
Edge Security Is Not Enough: Why Agentic AI Moves the Risk Inside Your APIs
For the last twenty years, cybersecurity has been built around the edge: the belief that threats come from the outside, and that firewalls, WAFs, and API gateways can inspect and control what enters the environment. That model worked when applications…