Kenyan Filmmakers Installed With FlexiSPY Spyware That Monitors Messages and Social Media

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Four Kenyan filmmakers became victims of sophisticated surveillance when FlexiSPY spyware was covertly installed on their devices while in police custody, according to forensic analysis conducted by the University of …

New EggStreme Malware With Fileless Capabilities Leverages DLL Sideloading to Execute Payloads

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A previously unknown advanced persistent threat (APT) group has unleashed a new fileless malware framework, dubbed EggStreme, in a highly targeted espionage campaign against strategic organizations. Emerging in early 2024, …

kkRAT Employs Network Communication Protocol to Steal Clipboard Contents

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In early May 2025, cybersecurity researchers began tracking a novel Remote Access Trojan (RAT) targeting Chinese-speaking users via phishing sites hosted on GitHub Pages. Masked as legitimate installers for popular …

Cornwell Quality Tools Data Breach – 100,000 Users Data Was Compromised

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cornwell Quality Tools has disclosed a significant data breach that compromised the sensitive information of nearly 104,000 individuals. The incident involved unauthorized access to the company’s network, resulting in the …

PoisonSeed Threat Actor Registering New Domains in Attempt to Compromise Enterprise Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In recent months, cybersecurity researchers have observed a surge in malicious domain registrations linked to an emerging e-crime group known as PoisonSeed. First identified in April 2025, this actor has …

CoreDNS Vulnerability Let Attackers Pin DNS Cache And Deny Service Updates

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A significant vulnerability has been discovered in CoreDNS that could allow attackers to disrupt services by pinning DNS cache entries, effectively creating a denial of service for updates. The flaw, …

ChillyHell macOS Malware Profiles Compromised Machines and Maintain Persistence with 3 Methods

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ChillyHell first surfaced on public malware repositories in early May 2025, although its developer-signed notarization dates back to 2021. This modular backdoor has eluded detection by major antivirus vendors despite …

Palo Alto Networks User-ID Credential Agent Vulnerability Exposes password In Cleartext

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly disclosed vulnerability in Palo Alto Networks’ User-ID Credential Agent for Windows, identified as CVE-2025-4235, could expose a service account’s password in cleartext under certain non-standard configurations. This flaw …

New Attack Technique That Enables Attackers To Exfiltrate Git Credentials In Argocd

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly disclosed attack technique enables authenticated users within the popular GitOps tool ArgoCD to exfiltrate powerful Git credentials. The method, discovered by the cybersecurity research group Future Sight, exploits …