The identities of alleged core members of the Lumma Stealer group were exposed in an underground doxxing campaign. The post Lumma Stealer Activity Drops After Doxxing appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the original…
SIM Farm Dismantled in Europe, Seven Arrested
The individuals ran a highly sophisticated cybercrime-as-a-service (CaaS) platform that caused roughly €5 million (~$5.8 million) in losses. The post SIM Farm Dismantled in Europe, Seven Arrested appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the…
131 Chrome Extensions Caught Hijacking WhatsApp Web for Massive Spam Campaign
Cybersecurity researchers have uncovered a coordinated campaign that leveraged 131 rebranded clones of a WhatsApp Web automation extension for Google Chrome to spam Brazilian users at scale. The 131 spamware extensions share the same codebase, design patterns, and infrastructure, according…
Analysing ClickFix: 3 Reasons Why Copy/Paste Attacks Are Driving Security Breaches
ClickFix, FileFix, fake CAPTCHA — whatever you call it, attacks where users interact with malicious scripts in their web browser are a fast-growing source of security breaches. ClickFix attacks prompt the user to solve some kind of problem or challenge…
⚡ Weekly Recap: F5 Breached, Linux Rootkits, Pixnapping Attack, EtherHiding & More
It’s easy to think your defenses are solid — until you realize attackers have been inside them the whole time. The latest incidents show that long-term, silent breaches are becoming the norm. The best defense now isn’t just patching fast,…
IT Security News Hourly Summary 2025-10-20 15h : 2 posts
2 posts were published in the last hour 12:34 : AI-Powered Phishing Detection: The Next Generation Security Engine 12:34 : Salt Typhoon Uses Citrix Flaw in Global Cyber-Attack
AI-Powered Phishing Detection: The Next Generation Security Engine
Check Point is thrilled to introduce a continuously-trained AI-engine designed to analyze key information about websites, achieving remarkable results in detecting phishing attempts. Integrated with our ThreatCloud AI, it offers comprehensive protection across Quantum gateways, Harmony Email, Endpoint, and Harmony…
Salt Typhoon Uses Citrix Flaw in Global Cyber-Attack
A cyber intrusion by China-linked group Salt Typhoon has been observed targeting global infrastructure via DLL sideloading This article has been indexed from www.infosecurity-magazine.com Read the original article: Salt Typhoon Uses Citrix Flaw in Global Cyber-Attack
How To Prepare For Your Virtual Doctor Visit To Get The Most From Your Consultation
We’ve all been there—camera on, audio glitching, laptop balanced on a stack of books, and… How To Prepare For Your Virtual Doctor Visit To Get The Most From Your Consultation on Latest Hacking News | Cyber Security News, Hacking Tools…
Suspected Chinese Hackers Spent a Year-Plus Inside F5 Systems: Report
The suspected Chinese-backed threat actors that hacked into F5’s systems and stole data from the security vendor’s BIG-IP application suite spent more than a year inside the networks dtbefore being in detected in August, according to a Bloomberg report that…
AWS outage: what it reveals about the fragility of cloud cybersecurity
The fall of the world’s leading cloud infrastructure platform has caused a blackout across websites, apps, and social networks without contingency plans. Lacking a plan… The post AWS outage: what it reveals about the fragility of cloud cybersecurity appeared first…
Prosper Confirms Data Breach Impacting 17 Million Users
Prosper confirmed a major data breach affecting 17 million people. Learn what happened, why it matters for fintech security, and how IT leaders can respond. The post Prosper Confirms Data Breach Impacting 17 Million Users appeared first on TechRepublic. This…
Amazon DNS outage breaks much of the internet
The outage affected websites like Coinbase and Fortnite, and disrupted services like Signal, Zoom and Amazon’s own products, including Ring. This article has been indexed from Security News | TechCrunch Read the original article: Amazon DNS outage breaks much of…
Criminal SIM Card Supply Network Busted by Europol
Several suspects have been arrested over links with a network running a “sophisticated” cybercrime-enabling service This article has been indexed from www.infosecurity-magazine.com Read the original article: Criminal SIM Card Supply Network Busted by Europol
PoC Released for Linux-PAM Vulnerability Enabling Local Root Privilege Escalation
A new proof-of-concept (PoC) has been released for a serious vulnerability tracked as CVE-2025-8941, affecting the Pluggable Authentication Modules (PAM) used across Linux distributions. The flaw, rated 7.8 (High) on the CVSS scale, allows local attackers to elevate privileges to…
Agentic AI’s OODA Loop Problem
The OODA loop—for observe, orient, decide, act—is a framework to understand decision-making in adversarial situations. We apply the same framework to artificial intelligence agents, who have to make their decisions with untrustworthy observations and orientation. To solve this problem, we…
F5 breach exposes 262,000 BIG-IP systems worldwide
Over 262K F5 BIG-IP devices exposed after threat actors stole source code and data on undisclosed flaws in a recent F5 breach. Over 262,000 F5 BIG-IP devices are exposed online after F5 confirmed a breach by nation-state actors who stole…
Many Online Services and Websites Affected by an AWS Outage, (Mon, Oct 20th)
The info is spreading across the news websites: For approximatively two hours, many online services or websites are suffering of an Amazon Web Services outage. Some affected services: This article has been indexed from SANS Internet Storm Center, InfoCON: green…
Does the Qantas hack include U.S. citizens?
Yes, it does. Although there is no exact number of how many U.S. citizens are affected, the number is likely enormous. Every year, Australia welcomes… The post Does the Qantas hack include U.S. citizens? appeared first on Panda Security Mediacenter.…
NSO Ordered to Stop Hacking WhatsApp, but Damages Cut to $4 Million
The judge ruled that punitive damages of $167 million awarded by a jury were excessive. The post NSO Ordered to Stop Hacking WhatsApp, but Damages Cut to $4 Million appeared first on SecurityWeek. This article has been indexed from SecurityWeek…
Vulnerability in Dolby Decoder Can Allow Zero-Click Attacks
On Android, the out-of-bounds write issue can be triggered during the processing of media files without user interaction. The post Vulnerability in Dolby Decoder Can Allow Zero-Click Attacks appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read…
Microsoft Revokes 200+ Fake Certificates Used in Teams Malware Attack
Microsoft has revoked over 200 fraudulent code-signing certificates used in a ransomware campaign involving fake Teams installers by threat group Vanilla Tempest This article has been indexed from www.infosecurity-magazine.com Read the original article: Microsoft Revokes 200+ Fake Certificates Used in…
IT Security News Hourly Summary 2025-10-20 12h : 2 posts
2 posts were published in the last hour 9:34 : PoC Exploit Released for Windows Server Update Services Remote Code Execution Vulnerability 9:34 : Canva Down – Suffers Global Outage, Leaving Millions of Users Unable to Access Platform
PoC Exploit Released for Windows Server Update Services Remote Code Execution Vulnerability
A proof-of-concept (PoC) exploit has been released for a critical vulnerability in Microsoft’s Windows Server Update Services (WSUS), enabling unauthenticated attackers to execute remote code with SYSTEM privileges on affected servers. Dubbed CVE-2025-59287 and assigned a CVSS v3.1 score of…