EvilTokens Hides Its Attack Flow in the Browser, Exposing Static Analysis Gaps  

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 24, 2026 EvilTokens  EvilTokens is drawing attention in phishing investigations for abusing Microsoft Device Code authentication and hiding key parts of its attack flow from static URL analysis.    In a recent analysis, the phishing page was found encrypted in the initial HTML response and …

Hackers Exploiting Cisco Catalyst SD-WAN Manager 0-Day Flaw to Gain Root-Level Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 24, 2026 A sophisticated threat actor is actively targeting SD-WAN infrastructure at a major service provider. The campaign culminated in the exploitation of a zero-day privilege escalation vulnerability, now tracked as CVE-2026-20245 (CVSS 7.8), in Cisco Catalyst SD-WAN Manager, …

Authorities Disrupt Password-Stealing Malware StealC Infrastructure in Global Operation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 24, 2026 Europol and law enforcement partners across multiple countries have dealt a significant blow to the cybercriminal ecosystems powering StealC, Amadey, and SocGholish malware, three widely deployed tools in the modern “cybercrime-as-a-service” supply chain. Announced as part of …

Fake Income Tax Assessment Notice Delivers RAT-Like Malware to Windows Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 24, 2026 Cybercriminals are now using fake government tax notices to push dangerous malware onto Windows computers, and the tactic is proving alarmingly effective. A newly uncovered campaign targets users in India by impersonating the Income Tax Department, tricking …

PoC Exploit Released for Microsoft Exchange Server Elevation of Privilege Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 24, 2026 A public proof-of-concept exploit is now available for CVE-2026-45504, a high‑severity server-side request forgery vulnerability in Microsoft Exchange Server that enables privilege escalation via arbitrary file reads. The flaw affects on‑premises Exchange Server 2016 and 2019, including …

Laravel Livewire Applications Compromised to Steal Credentials Exploiting RCE Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 24, 2026 A large-scale cyber campaign targeting Laravel Livewire applications has been uncovered, with attackers exploiting a critical remote code execution (RCE) flaw to steal sensitive credentials from thousands of systems worldwide. Security researchers at Imperva first observed the …

White House Orders Federal Agencies to Migrate Systems to Post-Quantum Cryptography

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The White House has issued a major executive order directing U.S. federal civilian agencies to migrate high‑value systems to post‑quantum cryptography (PQC), with firm deadlines of 2030 for key establishment and 2031 for digital signatures. The order, titled “Securing the …

PoC Exploit Released for libssh2 Remote Code Execution Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 24, 2026 A public proof-of-concept (PoC) exploit for the critical libssh2 remote code execution vulnerability tracked as CVE-2026-55200 is now available, significantly increasing the risk of real‑world attacks against unpatched systems. The flaw affects libssh2 versions up to and …

Browser-in-the-Browser Kit Uses Fake Software Errors to Deliver Malware Installers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 24, 2026 A newly identified attack campaign is using a sophisticated Browser-in-the-Browser (BitB) kit to trick users into downloading malware disguised as legitimate software installers. The technique combines convincing fake browser pop-ups with fabricated error messages to manipulate victims …

GhostShell Malware Uses mTLS Implant and Telegram Dead-Drop to Target Ukrainian Drone Operations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 24, 2026 A newly identified malware cluster known as GhostShell has been found actively targeting Ukraine’s drone operations and its broader defense supply chain. The campaign uses a sophisticated combination of techniques, including a mutual TLS implant and a …