Threat Actors Weaponizes Judicial Documents to Deliver PureHVNC RAT

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Between August and October 2025, a sophisticated phishing campaign has emerged targeting Colombian and Spanish-speaking users through deceptive emails masquerading as official communications from Colombia’s Attorney General’s office. The campaign …

Emerging Cyber Threats Featuring QR Codes ClickFix and LOLBins Challenging SOC Defenses

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity experts at ANY.RUN recently unveiled alarming trends in how attackers are exploiting everyday technologies to bypass security operations centers (SOCs). They dissected tactics like QR code phishing, ClickFix social …

New Gentlemen’s RaaS Advertised on Hacking Forums Targeting Windows, Linux and ESXi Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly discovered ransomware-as-a-service platform called Gentlemen’s RaaS has recently emerged on underground hacking forums, offering threat actors a sophisticated cross-platform attack capability. The service, advertised by the threat actor …

EY Data Leak – Massive 4TB SQL Server Backup Exposed Publicly on Microsoft Azure

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A massive 4TB SQL Server backup file belonging to global accounting giant Ernst & Young (EY) was discovered publicly accessible on Microsoft Azure. The exposure, uncovered by cybersecurity firm Neo …

Huge Surge in Fake Investment Platforms Mimic Forex Exchanges Steal Logins

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Fraudulent investment platforms impersonating cryptocurrency and forex exchanges have emerged as the predominant method used by financially motivated cybercriminals to defraud victims across Asia and beyond. These sophisticated scam operations …

Microsoft DNS Outage Disrupts Azure and Microsoft 365 Services Worldwide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft reported a DNS-related outage on October 29, 2025, affecting access to key services, including Microsoft Azure and Microsoft 365. The issue surfaced around 9:37 PM GMT+5:30, leaving users unable …

New TEE.fail Attack Breaks Trusted Environments to Exfiltrate Secrets from Intel and AMD DDR5 Environments

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A groundbreaking security vulnerability has emerged that fundamentally challenges the integrity of modern trusted execution environments across Intel and AMD server platforms. Researchers from Georgia Tech, Purdue University, and van …

AWS US-EAST-1 Region Experiences Delays in EC2 Instance Deployments

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Amazon Web Services encountered significant operational challenges in its US-EAST-1 region on October 28, 2025, with elevated latencies affecting EC2 instance launches and cascading issues across container orchestration services. The …

WordPress Plugin Vulnerability Exposes 7 Million Sites to XSS Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical cross-site scripting (XSS) vulnerability has been discovered in the popular LiteSpeed Cache plugin for WordPress, affecting millions of websites worldwide. The vulnerability, tracked as CVE-2025-12450, poses a significant …