Microsoft Teams to Introduce External Domains Anomalies Report for Enhanced Security

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft plans to enhance the administrative features of its Teams collaboration platform with a significant new security function to monitor external communications. Scheduled for rollout in February 2026, the “External Domains Anomalies Report” is designed to help IT administrators proactively …

New ClickFix Attacks as macOS Infostealer Leverages Official ChatGPT Website by Piggybacking

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new malicious campaign is targeting macOS users via a novel attack that exploits ChatGPT’s official website. The attackers are using a technique called ClickFix to spread the AMOS infostealer by posting fake installation guides on the legitimate chatgpt.com domain. …

Hackers Leveraging LLM Shared Chats to Steal Your Passwords and Crypto

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new malware campaign has emerged that exploits legitimate AI platforms to deliver malicious code directly to unsuspecting users. Threat actors are using sponsored Google search results to redirect users searching for common macOS troubleshooting tips, such as “how to …

New “SOAPwn” .NET Vulnerabilities Expose Barracuda, Ivanti and Microsoft Appliances to RCE Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

New research into legacy .NET Framework SOAP client code has uncovered “SOAPwn,” a class of vulnerabilities. That can be weaponized for remote code execution (RCE) across multiple enterprise products. Including Barracuda Service Center RMM, Ivanti Endpoint Manager, Umbraco CMS 8, …

Critical Vulnerability in Multiple India-Based CCTV Cameras Let Attackers Video and Account Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A severe security vulnerability affecting multiple India-based CCTV camera manufacturers has been disclosed. Potentially allowing attackers to access video feeds and steal account credentials without authentication. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an alert on December 9, …

GitLab Patches Multiple Vulnerabilities that Allows Attackers to Trigger XSS and DoS Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Critical security patches on December 10, 2025, addressing ten significant vulnerabilities across its Community Edition and Enterprise Edition platforms. GitLab has released updated versions 18.6.2, 18.5.4, and 18.4.6 to address multiple high-severity security issues. High-Severity Threats Identified Four vulnerabilities received …

High-Severity Jenkins Vulnerability Allows Unauthenticated DoS via HTTP CLI

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Patches released by Jenkins address a significant denial-of-service (DoS) vulnerability affecting millions of organizations. That rely on the popular automation server for continuous integration and deployment pipelines. A high-severity vulnerability in Jenkins versions 2.540 and earlier (LTS 2.528.2 and earlier). …

Threat Actors Leverage ChatGPT to Attack Mac Devices With AMOS InfoStealer

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new AMOS InfoStealer campaign is abusing trust in ChatGPT to infect Mac devices under the guise of simple troubleshooting help. Victims search for a fix to a sound problem, click a sponsored ChatGPT result, and are shown what looks …

Hackers Infiltrate VS Code Marketplace with 19 Malicious Extensions Posing as PNG File

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers have uncovered a significant threat targeting developers through the VS Code Marketplace. A coordinated campaign involving 19 malicious extensions has been actively infiltrating the platform, with the attack remaining undetected since February 2025. These deceptive extensions carry hidden …

Windows Defender Firewall Service Vulnerability Let Attackers Disclose Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical information disclosure vulnerability in Windows Defender Firewall Service, which could allow authorized attackers to access sensitive heap memory on affected systems. The vulnerability, tracked as CVE-2025-62468, was assigned an Important severity rating and released on December 9, 2025. …