New Malware-as-a-service Leveraging Adobe-themed Domain to Attack Windows Users Using .bat File

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A criminal service is hiding behind a website that appears to offer Adobe Acrobat Reader. The site, acrobatreaderonline.com, is not a document service. Instead, it appears to expose an operator panel for building and managing attacks against Windows users. The …

Iran-Linked Hackers Force UK Power Plant Offline in Unprecedented Four-Day Cyberattack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A cyberattack attributed to hackers linked to Iran forced a British power plant offline for four consecutive days last month, marking what officials describe as the first successful attack of its kind against UK energy infrastructure. The incident, first reported …

Weekly Cyber Security Newsletter Bulletin – Entra ID RCE, Claude Code Ransomware, T-Mobile Cable, Azure Credential Theft +20 Stories

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

This week’s bulletin captures a cybersecurity landscape increasingly shaped by artificial intelligence, both as a weapon and a shield. A ransomware affiliate weaponized Claude Code to autonomously steal LDAP credentials, backdoor VPNs, and exfiltrate SQL databases, while a separate criminal …

Microsoft Windows 11 App Pushes Bing as Default Search in Chrome, Firefox and Brave

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has built a dedicated Windows 11 app that exists to put Bing in front of users who already chose another search engine. The utility, Microsoft Recommended Search Settings, arrives as a standalone 22.2 MB installer named MicrosoftSettings.exe. It is …

What specifically allowed the agent to reach a real company’s systems during testing? 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Wayne Anderson, Managing Director, Cybersecurity and Digital Innovation, BDO USA. First and foremost, the technical “walls” were reduced during the testing experience. One of the questions that many organizations have asked is, “Why wasn’t this run in an AI testing …

What 45 Million wp2shell Exploit Attempts Reveal About the New Vulnerability Response Window

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The latest wp2shell vulnerability was one of the biggest WordPress security events in history. The critical vulnerability chain combined two flaws that allowed unauthenticated attackers to exploit vulnerable sites and ultimately execute malicious code remotely, potentially taking control of them. In the …

Grok Zero-Click Attack Steals Chat Data Using Encrypted Prompt Injection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly disclosed attack can turn a routine “summarize this page” request in xAI’s Grok web chat into a silent theft of the user’s name, coarse location, subscription tier, and the prompt history of the active conversation. Adversa AI said …

Claude Mythos 5 Now Available in Claude Security for Vulnerability Scanning

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anthropic has expanded access to its frontier AI cyber-defense capabilities by making Claude Mythos 5 available in Claude Security, enabling enterprise customers to scan codebases for vulnerabilities and receive AI-generated remediation guidance. The move is designed to give defenders stronger …

Microsoft Expands Mailbox Storage From 50 GB to 100 GB for Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has started expanding primary mailbox storage for Microsoft 365 Business Basic, Business Standard, and Business Premium users. Eligible users can now receive up to 100 GB of Exchange Online mailbox capacity, doubling the previous 50 GB entitlement. The change …

Scammers Use WhatsApp Groups to Coordinate Millions in Victim Trades and Pump Real Stocks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Scammers are using WhatsApp groups to turn ordinary investors into an unwitting buying force. The operation does not need a hacked trading account or a stolen card. Instead, it persuades people to place real trades through legitimate brokerages, then leaves …