New Phishing Attack Targeting iPhone Owners Who’ve Lost Their Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new phishing campaign is targeting iPhone owners who have lost their devices, exploiting their hope of recovery to steal Apple ID credentials. The National Cyber Security Centre (NCSC) has received multiple reports of cases where victims received text messages …

Chinese National Jailed for Laundering Over £5 Billion by Defrauding Over 128,000 Victims

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Chinese national has been sentenced to over 11 years in prison following one of the most significant cryptocurrency fraud investigations in history. Zhimin Qian, 47, received an 11-year and eight-month sentence for possessing and transferring criminal property under the …

Lite XL Text editor Vulnerability Let Attackers Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A vulnerability has been discovered in Lite XL, a lightweight text editor, that could allow attackers to execute arbitrary code on affected systems. Carnegie Mellon University experts identified CVE-2025-12120, which affects Lite XL versions 2.1.8 and earlier. The flaw exists …

ThreatBook Peer-Recognized as a Strong Performer in the 2025 Gartner® Peer Insights™ Voice of the Customer for Network Detection and Response — for the Third Consecutive Year

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recognition we believe underscores global customer trust and proven product excellence for security teams evaluating NDR solutions. ThreatBook, a global leader in threat intelligence-based cybersecurity solutions, today announced that for its Threat Detection Platform (TDP), it has been recognized as a Strong …

Massive Phishing Attack Impersonate as Travel Brands Attacking Users with 4,300 Malicious Domains

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A large phishing campaign has been targeting travelers worldwide, using more than 4,300 fake domains to steal payment card information. The operation focuses on people planning vacations or about to check into hotels by sending fake booking confirmation emails that …

Citrix NetScaler ADC and Gateway Vulnerability Enables Cross-Site Scripting Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cloud Software Group has disclosed a cross-site scripting (XSS) vulnerability affecting NetScaler ADC and NetScaler Gateway products. Tracked as CVE-2025-12101, the flaw allows attackers to inject malicious scripts into web pages viewed by users, potentially leading to session hijacking, data …

Why your Business Need Live Threat Intel from 15k SOCs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity leaders now face an impossible equation: you need intelligence that’s comprehensive enough to protect your organisation, fresh enough to stop emerging threats, and manageable enough that your team doesn’t drown in false positives. Most solutions force you to choose. Some prove you don’t have to.  The Intelligence Paradox: …

Beware of Malicious Steam Cleanup Tool Attack Windows Machines to Deploy Backdoor Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated backdoor malware campaign has emerged targeting Windows users through a weaponized version of SteamCleaner, a legitimate open-source utility designed to clean junk files from the Steam gaming platform. The malware establishes persistent access to compromised systems by deploying …

Multiple Apache OpenOffice Vulnerabilities Leads to Memory Corruption and Unauthorized Content Loading

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apache OpenOffice has released version 4.1.16, addressing seven critical security vulnerabilities that enable unauthorized remote document loading and memory corruption attacks. These flaws represent a significant security risk to users of the popular open-source office suite. The most severe vulnerabilities …

GitHub Copilot and Visual Studio Vulnerabilities Allow Attacker to Bypass Security Feature

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has disclosed two critical security vulnerabilities in GitHub Copilot and Visual Studio that could allow attackers to bypass essential security features. Both vulnerabilities were released on November 11, 2025, and have been assigned an Important severity rating. Path Traversal …