Hackers Exploiting Google Search Ads to Launch Malvertising Campaigns

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat researchers have identified a persistent series of malvertising campaigns targeting graphic design professionals, using Google Search ads as a vector. This campaign, active since at least November 13, 2024, exploits two dedicated IP addresses, 185.11.61[.]243 and 185.147.124[.]110, to host …

Critical Mullvad VPN Vulnerabilities Let Attackers Execute Malicious Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers have uncovered several high-severity vulnerabilities in the popular Mullvad VPN service that could allow attackers to execute malicious code and compromise user privacy. The flaws were discovered during a comprehensive security audit conducted by X41 D-Sec GmbH in …

Weekly Cyber Security News Recap: Data Leaks, Vulnerabilities & Cybersecurity News

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Welcome to this week’s Cyber Security Newsletter, where we delve into the latest developments and crucial updates in cybersecurity. Your involvement in this rapidly changing digital realm is vital, and we aim to provide you with the most current insights …

Curl Vulnerability Let Attackers Access Sensitive Information

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical security flaw has been discovered in the popular data transfer tool Curl, potentially allowing attackers to access sensitive information. The vulnerability, identified as CVE-2024-11053, affects curl versions 6.5 through 8.11.0 and could lead to the exposure of passwords …

“Password Era is Ending” Microsoft to Delete 1 Billion Password to Replace “Passkey”

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a significant turn towards a passwordless future, Microsoft has announced groundbreaking strides in adopting passkeys, a secure and user-friendly alternative to traditional passwords. With an alarming increase in password-related cyberattacks rising to 7,000 blocked password attacks per second and …

Top 15 Firewall Management Tools in 2025

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Firewall management tools are essential for maintaining network security by monitoring and controlling incoming and outgoing traffic based on predetermined security rules. They help protect against unauthorized access and cyber threats, ensuring the integrity of sensitive data. These tools offer …

10 Best Web Scanners for Website Security In 2025

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The world is moving towards digitalization from small to large, and every business has a website running to showcase its services. In addition to providing services, they keep user data in their databases, including cookies and personal information provided during …

30,000 Devices in Germany Discovered with Pre-installed Malware “Badbox”

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Federal Office for Information Security (BSI) in Germany has taken decisive action against a wave of malware-infected digital picture frames and media players connected to the Internet. Known as BadBox, this malware was discovered pre-installed on up to 30,000 …

CISA Warns of Cleo 0-Day Vulnerability Exploited by Ransomware Gangs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about a critical vulnerability in Cleo’s file transfer software being actively exploited by ransomware gangs. The vulnerability, initially identified as CVE-2024-50623, affects Cleo Harmony, VLTrader, and LexiCom products, …

New HeartCrypt Packer-as-a-Service (PaaS) Protecting Malware From Antivirus

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new packer-as-a-service (PaaS) called HeartCrypt has emerged as a powerful tool for malware operators to evade antivirus detection. Developed in July 2023 and launched in February 2024, HeartCrypt has quickly gained traction in the cybercrime underground, being used to …