How to Solve Alert Overload in Your SOC 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Your SOC generates thousands of alerts daily. Many of them are low-priority, repetitive, or false positives. On paper, this looks like a technical problem. In reality, it’s a business problem.  Every Alert Costs  When analysts are buried under thousands of notifications, they spend more time triaging noise than responding to real incidents. The result: slower reaction times, missed threats, staff burnout, and ballooning operational costs.  Every wasted minute translates into a weaker security posture, …

Seraphic Becomes the First and Only Secure Enterprise Browser Solution to Protect Electron-Based Applications

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Tel Aviv, Israel, November 19th, 2025, CyberNewsWire Seraphic, the leader in enterprise browser security (SEB) and AI enablement, today announced native protection for Electron-based applications such as ChatGPT desktop, Teams, Slack, and more, becoming the first and only browser security …

Hackers Actively Exploiting 7-Zip RCE Vulnerability in the Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers have begun actively exploiting a critical remote code execution (RCE) vulnerability in the popular file archiver 7-Zip, putting millions of users at risk of malware infection and system compromise. The flaw, tracked as CVE-2025-11001, stems from improper handling of …

Sysmon – Go-to Tool for IT Admins, Security Pros, and Threat Hunters Coming to Windows

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft is bringing native Sysmon functionality directly into Windows, eliminating the need for manual deployment and separate downloads. Starting next year, Windows 11 and Windows Server 2025 will include System Monitor (Sysmon) capabilities, transforming how security teams detect threats and investigate incidents. …

Chinese PlushDaemon Hackers use EdgeStepper Tool to Hijack Legitimate Updates and Redirect to Malicious Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A China-aligned threat group known as PlushDaemon has been weaponizing a sophisticated attack method to infiltrate networks across multiple regions since 2018. The group’s primary strategy involves intercepting legitimate software updates by deploying a specialized tool called EdgeStepper, which acts …

Massive Hacking Operation WrtHug Compromises Thousands of ASUS Routers Worldwide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated cyber campaign known as Operation WrtHug has hijacked tens of thousands of ASUS WRT routers globally, turning them into potential espionage tools for suspected China-linked hackers. SecurityScorecard’s STRIKE team, in collaboration with ASUS, revealed the operation on November …

Hackers Using Leverage Tuoni C2 Framework Tool to Stealthily Deliver In-Memory Payloads

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new wave of cyberattacks has emerged using the Tuoni Command and Control (C2) framework, a sophisticated tool that allows threat actors to deploy malicious payloads directly into system memory. This technique helps attackers avoid detection by traditional security solutions …

Microsoft Investigating Copilot Issue On Processing Files 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has launched an investigation into a widespread issue affecting Microsoft Copilot in Microsoft 365, where users are experiencing significant limitations when performing actions on files. The technology giant confirmed the incident via official Microsoft 365 Status channels, assigning the …

Destructive Akira Ransomware Attack with a Single Click on CAPTCHA in Malicious Website

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A global data storage and infrastructure company fell victim to a severe ransomware attack orchestrated by Howling Scorpius, the group responsible for distributing Akira ransomware. The incident began with what appeared to be a routine security check on a compromised …

New Nova Stealer Attacking macOS Users by Swapping Legitimate Apps to Steal Cryptocurrency Wallet Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new malware campaign targeting macOS users has emerged with a dangerous focus on cryptocurrency wallet theft. The malware, called Nova Stealer, uses a clever approach to trick victims by replacing genuine cryptocurrency applications with fake versions that steal wallet …