Lessons from Oracle E-Business Suite Hack That Allegedly Compromises Nearly 30 Organizations Worldwide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated cyberattack targeting Oracle E-Business Suite (EBS) customers has exposed critical vulnerabilities in enterprise resource planning systems, compromising an estimated 100 organizations worldwide between July and October 2025. The …

New Malware Via WhatsApp Exfiltrate Contacts to Attack Server and Deploys Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Trustwave SpiderLabs researchers have identified a sophisticated banking trojan called Eternidade Stealer that spreads through WhatsApp hijacking and social engineering tactics. The malware, written in Delphi, represents a significant evolution …

GenAI Makes it Easier for Cybercriminals to Successfully Lure Victims into Scams

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals are rapidly embracing generative AI to transform the way they operate scams, making fraud operations faster, more convincing, and dramatically easier to scale. According to recent research, what once …

Threat Actors Allegedly Selling Microsoft Office 0-Day RCE Vulnerability on Hacking Forums

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A threat actor known as Zeroplayer has reportedly listed a zero-day remote code execution (RCE) vulnerability, combined with a sandbox escape, targeting Microsoft Office and Windows systems for sale on …

Threat Actors Pioneering a New Operational Model That Combines Digital and Physical Threats

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Nation-state actors are fundamentally changing how they conduct military operations. The boundary between digital attacks and physical warfare is disappearing rapidly. Instead of treating cybersecurity and military operations as separate …

Critical N-able N-central Vulnerabilities Allow attacker to interact with legacy APIs and read sensitive files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

N-able’s N-central remote management and monitoring (RMM) platform faces critical security risks following the discovery of multiple vulnerabilities. According to Horizon3.ai, it allows unauthenticated attackers to bypass authentication, access legacy …

Critical Twonky Server Vulnerabilities Let Attackers Bypass Authentication

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Twonky Server version 8.5.2 contains two critical authentication bypass vulnerabilities that allow unauthenticated attackers to gain full administrative access to the media server software. Rapid7 discovered that the vulnerabilities can …

Researchers Disclosed Analysis of Rhadamanthys Loader’s Anti-Sandboxing and Anti-AV Emulation Features

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Rhadamanthys has emerged as one of the most dangerous stealer malware programs since its first appearance in 2022. This advanced threat continues to challenge security teams with its ability to …

NSA Issues Guidance for ISPs and Network Defenders to Combat Malicious Activity

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The National Security Agency (NSA), in collaboration with the Cybersecurity and Infrastructure Security Agency (CISA), the FBI, and multiple international partners, has released a comprehensive cybersecurity information sheet titled “Bulletproof …

Ollama Vulnerabilities Let Attackers Execute Arbitrary Code by Parsing of Malicious Model Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A severe vulnerability in Ollama, one of GitHub’s most popular open-source projects, with over 155,000 stars. The flaw enables attackers to execute arbitrary code on systems running vulnerable versions of …