Hackers Upgraded ClickFix Attack With Cache Smuggling to Secretly Download Malicious Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity researchers have uncovered a sophisticated evolution of the ClickFix attack methodology, where threat actors are leveraging cache smuggling techniques to avoid traditional file download detection mechanisms. This innovative campaign …

New Polymorphic Python Malware Repeatedly Mutate its Appearance at Every Execution Time

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A recently discovered Python-based remote access trojan (RAT) exhibits unprecedented polymorphic behavior, altering its code signature each time it runs. First observed on VirusTotal, the sample, dubbed nirorat.py, initially scored …

Data-Leak Sites Hit an All-Time High With New Scattered Spider RaaS and LockBit 5.0

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The ransomware landscape witnessed unprecedented upheaval in Q3 2025 as cyberthreat actors ushered in a new era of aggression and sophistication. The quarter marked a pivotal moment with the emergence …

Chaos Emerges as Faster, Smarter, and More Dangerous Ransomware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In recent weeks, security teams worldwide have grappled with a new ransomware strain that has shattered expectations for speed and sophistication. First detected in late September 2025, this variant encrypts …

SquareX Shows AI Browsers Fall Prey to OAuth Attacks, Malware Downloads and Malicious Link Distribution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Palo Alto, California, October 9th, 2025, CyberNewsWire As AI Browsers rapidly gain adoption across enterprises, SquareX has released critical security research exposing major vulnerabilities that could allow attackers to exploit …

Lightship Security and the OpenSSL Corporation Submit OpenSSL 3.5.4 for FIPS 140-3 Validation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Newark, United States, October 9th, 2025, CyberNewsWire Lightship Security, an Applus+ Laboratories company and accredited cryptographic security test laboratory, and the OpenSSL Corporation, the co-maintainer of the OpenSSL Library, announce …

Hackers Exploit DFIR Tool ‘Velociraptor’ in Ransomware Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers at Cisco Talos have confirmed that ransomware operators are actively exploiting Velociraptor, an open-source digital forensics and incident response (DFIR) tool, in their attacks. This marks the first …

New Phishing Kit Automates Generation of ClickFix Attack Bypassing Security Measures

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The cybersecurity community has witnessed the rapid emergence of a novel phishing toolkit that automates the creation of “ClickFix” attack pages, enabling threat actors with minimal technical expertise to deploy …

SonicWall Confirms That Hackers Stole All Customers Firewall Configuration Backup Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SonicWall has confirmed that an unauthorized party accessed and stole the entire repository of customer firewall configuration backup files from its cloud service. The confirmation comes after the completion of …