CISA warns of Google Chromium 0-Day Input Validation Vulnerability Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CISA has issued an urgent warning about a critical vulnerability in Google Chromium that threat actors are actively exploiting.  The vulnerability, designated as CVE-2025-6558, poses a significant security risk to millions of users across multiple web browsers that utilize the …

UNC3944 Attacking VMware vSphere and Enabling SSH on ESXi Hosts to Reset ‘root’ Passwords

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

UNC3944, a financially driven threat organization associated with “0ktapus,” “Octo Tempest,” and “Scattered Spider,” launched a sophisticated cyber campaign that used social engineering and hypervisor-level attacks to target VMware vSphere environments in the retail, airline, and insurance industries. Google Threat …

Threat Actor Mimo Attacking Magento CMS to Steal Card Details and Bandwidth Monetization

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The cybersecurity landscape faces a new threat as the notorious Mimo threat actor, previously known for targeting Craft content management systems, has significantly evolved its operations to compromise Magento ecommerce platforms. This expansion represents a dangerous shift toward high-value targets …

Weaponized LNK File Disguised as Credit Card Security Email Steals User Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals have evolved their social engineering tactics with a sophisticated malware campaign that exploits users’ trust in financial institutions. The latest threat involves a malicious LNK file masquerading as a credit card security email authentication popup, specifically targeting unsuspecting users …

Lumma Stealer Via Fake Cracked Software Steals Login Credentials and Private Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The brief lull following May’s multinational takedown of the Lumma Stealer infrastructure proved deceptive. Within weeks, telemetry again lit up with fresh command-and-control (C2) beacons, revealing that the information-stealing malware had swapped overt marketplace promotion for quieter channels while expanding …

Key Administrator of World’s Most Popular Dark Web Cybercrime Platform Arrested

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An investigation led by the French Police and Paris Prosecutor, in close cooperation with their Ukrainian counterparts and Europol, has resulted in the arrest of the suspected administrator of xss[.]is, one of the world’s most influential Russian-speaking cybercrime platforms. The …

New ZuRu Malware Variant Weaponizes Termius SSH Client to Attack macOS Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A fresh strain of the long-running macOS.ZuRu family has surfaced, hiding inside a doctored of the popular Termius SSH client and quietly turning developer workstations into remote footholds. First seen in late May 2025, the 248 MB rogue disk image …

Jetflicks Illegal Paid Streaming Service Operators Jailed for 7 Years

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Five Nevada men, including a German citizen, received prison sentences of up to 84 months for operating Jetflicks, one of the largest illegal television streaming services in United States history.  The defendants generated millions in criminal profits by distributing copyrighted …

How Businesses Prevent Credential Theft with Early Phishing Detection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Phishing attacks are evolving rapidly, allowing cybercriminals to bypass traditional security systems like email filters and static defenses. As a result, many businesses are left vulnerable to credential theft, often without realizing the threat until it’s too late. Early detection is key, and …

Silicon Valley Engineer Pleads Guilty to Stealing Missile Detection Data for China

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A dual U.S.-China citizen and former Silicon Valley engineer has pleaded guilty to stealing critical military technology secrets designed to protect American national security interests.  Chenguang Gong, 59, of San Jose, admitted to transferring over 3,600 classified files containing advanced …