New Domain-fronting Attack Uses Google Meet, YouTube, Chrome and GCP to Tunnel Traffic

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Organizations commonly allow traffic to core services like Google Meet, YouTube, Chrome update servers, and Google Cloud Platform (GCP) to ensure uninterrupted operations.  A newly demonstrated domain fronting technique weaponizes this trust to establish covert command-and-control (C2) channels, enabling attackers …

Gcore Radar Report Reveals 41% Surge in DDoS Attack Volumes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Luxembourg, Luxembourg, September 25th, 2025, CyberNewsWire Gcore, the global edge AI, cloud, network, and security solutions provider, today announced the findings of its Q1-Q2 2025 Radar report into DDoS attack trends. DDoS attacks have reached unprecedented scale and disruption in …

New Russian Disinformation Campaign Targeting Upcoming Moldova’s Elections

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

On the eve of Moldova’s parliamentary elections scheduled for September 28, 2025, cybersecurity researchers have uncovered a sophisticated Russian-backed disinformation campaign designed to undermine public confidence in Moldova’s pro-European leadership. The campaign began surfacing in April 2025, when analysts first …

Hackers Exploiting Hikvision Camera Vulnerability to Access Sensitive Information

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in Hikvision security cameras, first disclosed in 2017, is being actively exploited by hackers to gain unauthorized access to sensitive information. SANS researchers observed a recent surge in malicious activity targeting a specific flaw, identified as CVE-2017-7921, …

BMC Firmware Vulnerabilities Allow Attackers to Bypass Signature Verification Features

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Critical vulnerabilities discovered in Supermicro Baseboard Management Controller (BMC) firmware have exposed a troubling pattern where inadequate security fixes create new attack vectors, allowing sophisticated adversaries to bypass signature verification mechanisms and maintain persistent control over enterprise server infrastructure. These …

Linux Kernel ksmbd Vulnerability Allows Remote Attackers to Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A severe vulnerability in the Linux kernel’s ksmbd SMB server implementation has been disclosed, potentially allowing authenticated remote attackers to execute arbitrary code on affected systems.  The vulnerability, tracked as CVE-2025-38561 and assigned a CVSS score of 8.5, represents a …

Banking Trojans Attacking Android Users Mimic as Government and Legitimate Payment Apps

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated cybercriminal campaign has emerged targeting Indonesian and Vietnamese Android users with banking trojans disguised as legitimate government identity applications and payment services. The malicious operation, active since approximately August 2024, employs advanced evasion techniques to deliver variants of …

Critical DNN Platform Vulnerability Let Attackers Execute Malicious Scripts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical stored cross-site scripting vulnerability has emerged in the popular DotNetNuke (DNN) Platform, threatening websites powered by this widely-used content management system. The vulnerability, tracked as CVE-2025-59545 with a severity score of 9.1 out of 10, affects all DNN …

Malicious SVGs in Phishing Campaigns: How to Detect Hidden Redirects and Payloads

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Phishing campaigns are getting harder to spot, sometimes hiding in files you’d never suspect. ANY.RUN’s cybersecurity analysts recently uncovered one such case: a malicious SVG disguised as a PDF, hosted on a legitimate domain and packed with hidden redirects. By …

Cisco IOS 0-Day RCE Vulnerability Actively Exploited in the Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco has disclosed a zero-day vulnerability, CVE-2025-20352, in its widely used IOS and IOS XE software, confirming it is being actively exploited in the wild. The flaw exists in the Simple Network Management Protocol (SNMP) subsystem and can allow a …