Authorities Disrupt Password-Stealing Malware StealC Infrastructure in Global Operation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 24, 2026 Europol and law enforcement partners across multiple countries have dealt a significant blow to the cybercriminal ecosystems powering StealC, Amadey, and SocGholish malware, three widely deployed tools in the modern “cybercrime-as-a-service” supply chain. Announced as part of …

Fake Income Tax Assessment Notice Delivers RAT-Like Malware to Windows Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 24, 2026 Cybercriminals are now using fake government tax notices to push dangerous malware onto Windows computers, and the tactic is proving alarmingly effective. A newly uncovered campaign targets users in India by impersonating the Income Tax Department, tricking …

PoC Exploit Released for Microsoft Exchange Server Elevation of Privilege Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 24, 2026 A public proof-of-concept exploit is now available for CVE-2026-45504, a high‑severity server-side request forgery vulnerability in Microsoft Exchange Server that enables privilege escalation via arbitrary file reads. The flaw affects on‑premises Exchange Server 2016 and 2019, including …

Laravel Livewire Applications Compromised to Steal Credentials Exploiting RCE Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 24, 2026 A large-scale cyber campaign targeting Laravel Livewire applications has been uncovered, with attackers exploiting a critical remote code execution (RCE) flaw to steal sensitive credentials from thousands of systems worldwide. Security researchers at Imperva first observed the …

White House Orders Federal Agencies to Migrate Systems to Post-Quantum Cryptography

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The White House has issued a major executive order directing U.S. federal civilian agencies to migrate high‑value systems to post‑quantum cryptography (PQC), with firm deadlines of 2030 for key establishment and 2031 for digital signatures. The order, titled “Securing the …

PoC Exploit Released for libssh2 Remote Code Execution Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 24, 2026 A public proof-of-concept (PoC) exploit for the critical libssh2 remote code execution vulnerability tracked as CVE-2026-55200 is now available, significantly increasing the risk of real‑world attacks against unpatched systems. The flaw affects libssh2 versions up to and …

Browser-in-the-Browser Kit Uses Fake Software Errors to Deliver Malware Installers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 24, 2026 A newly identified attack campaign is using a sophisticated Browser-in-the-Browser (BitB) kit to trick users into downloading malware disguised as legitimate software installers. The technique combines convincing fake browser pop-ups with fabricated error messages to manipulate victims …

GhostShell Malware Uses mTLS Implant and Telegram Dead-Drop to Target Ukrainian Drone Operations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 24, 2026 A newly identified malware cluster known as GhostShell has been found actively targeting Ukraine’s drone operations and its broader defense supply chain. The campaign uses a sophisticated combination of techniques, including a mutual TLS implant and a …

Red-Team AI Tool Vulnerabilities Let Attackers Exfiltrate API Keys and Compromise Operators’ Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 24, 2026 A first-of-its-kind security analysis of 12 widely deployed agentic offensive-security tools reveals critical architectural flaws that allow adversaries to steal LLM API keys, establish persistent footholds, and achieve full host compromise even inside sandboxed containers. Security researchers …

Hackers Exploit Unpatched SharePoint Servers to Deploy Ransomware and Custom Backdoors

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 24, 2026 Unpatched on-premises SharePoint servers have become a prime target for sophisticated threat actors using known security flaws to break in, plant ransomware, and leave behind hidden backdoors. These are not opportunistic smash-and-grab operations. They are calculated, multi-stage …