PLAYFULGHOST Delivered via Phishing and SEO Poisoning in Trojanized VPN Apps

04/01/2025 0 Comments 0 tags

Cybersecurity researchers have flagged a new malware called PLAYFULGHOST that comes with a wide range of information-gathering features like keylogging, screen capture, audio capture, remote shell, and file transfer/execution. The

U.S. Sanctions Chinese Cybersecurity Firm for State-Backed Hacking Campaigns

04/01/2025 0 Comments 0 tags

The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) on Friday issued sanctions against a Beijing-based cybersecurity company known as Integrity Technology Group, Incorporated for orchestrating several cyber attacks

New AI Jailbreak Method ‘Bad Likert Judge’ Boosts Attack Success Rates by Over 60%

03/01/2025 0 Comments 0 tags

Cybersecurity researchers have shed light on a new jailbreak technique that could be used to get past a large language model’s (LLM) safety guardrails and produce potentially harmful or malicious

LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers

03/01/2025 0 Comments 0 tags

A proof-of-concept (PoC) exploit has been released for a now-patched security flaw impacting Windows Lightweight Directory Access Protocol (LDAP) that could trigger a denial-of-service (DoS) condition. The out-of-bounds reads vulnerability

Critical Deadline: Update Old .NET Domains Before January 7, 2025 to Avoid Service Disruption

03/01/2025 0 Comments 0 tags

Microsoft has announced that it’s making an “unexpected change” to the way .NET installers and archives are distributed, requiring developers to update their production and DevOps infrastructure. “We expect that

Apple to Pay Siri Users $20 Per Device in Settlement Over Accidental Siri Privacy Violations

03/01/2025 0 Comments 0 tags

Apple has agreed to pay $95 million to settle a proposed class action lawsuit that accused the iPhone maker of invading users’ privacy using its voice-activated Siri assistant. The development

Severe Security Flaws Patched in Microsoft Dynamics 365 and Power Apps Web API

02/01/2025 0 Comments 0 tags

Details have emerged about three now-patched security vulnerabilities in Dynamics 365 and Power Apps Web API that could result in data exposure. The flaws, discovered by Melbourne-based cybersecurity company Stratus

Cross-Domain Attacks: A Growing Threat to Modern Security and How to Combat Them

02/01/2025 0 Comments 0 tags

In the past year, cross-domain attacks have gained prominence as an emerging tactic among adversaries. These operations exploit weak points across multiple domains – including endpoints, identity systems and cloud

Malicious Obfuscated NPM Package Disguised as an Ethereum Tool Deploys Quasar RAT

02/01/2025 0 Comments 0 tags

Cybersecurity researchers have discovered a malicious package on the npm package registry that masquerades as a library for detecting vulnerabilities in Ethereum smart contracts but, in reality, drops an open-source

Three Russian-German Nationals Charged with Espionage for Russian Secret Service

02/01/2025 0 Comments 0 tags

German prosecutors have charged three Russian-German nationals for acting as secret service agents for Russia. The individuals, named Dieter S., Alexander J., and Alex D., have been accused of working