Phantom Stealer Attacking Users to Steal Sensitive Data like Passwords, Browser Cookies, Credit Card Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Phantom Stealer version 3.5 has emerged as a serious threat to users worldwide, capable of extracting sensitive information including passwords, browser cookies, credit card details, and cryptocurrency wallet data. This …

Critical Apache Commons Text Vulnerability Enables Remote Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly disclosed security flaw in Apache Commons Text, tracked as CVE-2025-46295, has been identified as a remote code execution (RCE) vulnerability. That could allow attackers to compromise systems using vulnerable versions of …

Hackers Exploiting SonicWall SMA1000 0-day Vulnerability to Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers have discovered a critical privilege escalation vulnerability in SonicWall’s SMA1000 appliance that attackers are actively exploiting to gain unauthorized administrative access. The vulnerability, tracked as CVE-2025-40602, affects the …

Let’s Encrypt Unveils New “Generation Y” Root and 45-Day Certificates

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Let’s Encrypt, the nonprofit certificate authority powering free TLS/SSL certificates for millions of websites, announced sweeping updates to its issuance policies. The changes introduce a new “Generation Y” root hierarchy, …

Kimwolf Android Botnet Hijacked 1.8 Million Android Devices Worldwide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A massive botnet targeting Android devices has emerged as one of the most significant threats in the cybersecurity landscape today. Named Kimwolf, this sophisticated malware has compromised approximately 1.8 million …

Security Measures at NOWPayments: What Businesses Need to Know

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

When businesses start accepting crypto payments, security is often one of the first concerns. This is completely understandable. Crypto works differently from traditional payments, and many people want to know …

NAKIVO v11.1 Introduces Stronger Protection for Virtual Environments 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Enterprise-Grade Disaster Recovery and MSP Capabilities Now Available  NAKIVO, a leading provider of data protection solutions, has released NAKIVO Backup & Replication v11.1, marking a significant leap forward in protecting virtual …

Hackers Actively Attacking Cisco and Palo Alto Networks VPN Gateways to Gain Login Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors launched a coordinated brute-force campaign against enterprise VPN gateways, hammering Palo Alto Networks GlobalProtect portals and Cisco SSL VPN endpoints with millions of automated login attempts in mid-December …

Microsoft 365 Services Including Teams, Outlook and Copilot Outage Hits Users in Japan and China

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Thousands of users in Japan and China faced widespread access and sign-in disruptions to Microsoft 365 and Copilot services early Thursday, stemming from a critical routing issue in the company’s …

Kimsuky Hackers Attacking Users via Weaponized QR Code to Deliver Malicious Mobile App

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The North Korean state-linked threat group Kimsuky has expanded its attack methods by distributing a dangerous mobile malware through weaponized QR codes, targeting users through sophisticated phishing sites that imitate …