Hackers May Leverage Raw Disk Reads to Bypass EDR Solutions and Access Highly Sensitive Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new technique that allows attackers to read highly sensitive files on Windows systems, bypassing many of the modern security tools designed to prevent such breaches. A report from Workday’s Offensive Security team explains how, by reading data directly from …

Colombian Malware Weaponizing SWF and SVG to Bypass Detection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A previously unseen malware campaign began circulating in early August 2025, through email attachments and web downloads, targeting users in Colombia and beyond. By leveraging two distinct vector-based file formats—Adobe Flash SWF and Scalable Vector Graphics (SVG)—the attackers crafted a …

CISA Warns of Linux Kernel Race Condition Vulnerability Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a new high-severity vulnerability in the Linux kernel to its Known Exploited Vulnerabilities (KEV) catalog, signaling that it is being actively exploited in attacks. The warning, issued on September 4, …

Windows Heap-based Buffer Overflow Vulnerability Let Attackers Elevate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A recently patched vulnerability in a core Windows driver could allow a local attacker to execute code with the highest system privileges, effectively taking full control of a target machine. The flaw, identified as CVE-2025-53149, is a heap-based buffer overflow …

Hackers Scanning Cisco ASA Devices to Exploit Vulnerabilities from 25,000 IPs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An unprecedented surge in malicious scanning activity targeting Cisco Adaptive Security Appliances (ASAs) occurred in late August 2025, with over 25,000 unique IP addresses participating in coordinated reconnaissance efforts. GreyNoise, a threat intelligence company, observed two distinct scanning waves that …

Chess.com Data Breach – Hackers Breached External System and Gained Internal Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Online chess giant Chess.com has disclosed a data breach that compromised the personal information of 4,541 individuals, according to a filing with the Maine Attorney General’s Office. The cyber incident took place on June 5, 2025 and was discovered nearly two weeks later on June 19, …

Tycoon Phishing Kit Employs New Technique to Hide Malicious Links

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals are deploying increasingly sophisticated methods to bypass security systems, with the latest threat emerging from the advanced Tycoon phishing-as-a-service kit. This malicious platform has introduced novel techniques designed to obscure dangerous links, making them nearly invisible to traditional detection …

Bridgestone Confirms Cyberattack Impacts Manufacturing Facilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Tire manufacturing giant Bridgestone Americas has confirmed it is responding to a cyberattack that disrupted operations at some of its manufacturing facilities this week. In a statement, the company asserted that the incident has been contained and that business is …

NoisyBear Weaponizing ZIP Files to PowerShell Loaders and Exfiltrate Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated threat actor known as NoisyBear has emerged as a significant concern for Kazakhstan’s energy sector, employing advanced tactics to infiltrate critical infrastructure through weaponized ZIP files and PowerShell-based attack chains. This newly identified group has been orchestrating targeted …

Sendmarc appoints Rob Bowker as North American Region Lead

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Wilmington, United States, September4th, 2025, CyberNewsWire: Veteran email security leader to expand MSP and VAR partnerships and accelerate DMARC adoption.  Sendmarc today announced the appointment of Rob Bowker as North American Region Lead. Bowker will oversee regional expansion with a …