Threat Actors Leverage RMM Tools to Deploy Medusa & DragonForce Ransomware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated wave of ransomware attacks targeting UK organizations has emerged in 2025, exploiting vulnerabilities in the widely-used SimpleHelp Remote Monitoring and Management platform. Two prominent ransomware groups, Medusa and DragonForce, have weaponized three critical vulnerabilities (CVE-2024-57726, CVE-2024-57727, and CVE-2024-57728) …

Threat Actors Actively Hacking Websites to Inject Malicious Links and Boost their SEO

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals are increasingly targeting websites to inject malicious links and boost their search engine optimization rankings through sophisticated blackhat SEO tactics. This campaign primarily focuses on online casino spam, which has become the most prevalent type of spam content affecting …

Italian Adviser Becomes Latest Target in Expanding Paragon Graphite Spyware Surveillance Case

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Francesco Nicodemo, a prominent political communications strategist and former Democratic Party communications director, has been identified as a new target in the expanding Paragon spyware surveillance campaign. The revelation marks a concerning escalation in the scope of sophisticated digital espionage …

APT Groups Attacking Construction Industry Networks to Steal RDP, SSH and Citrix Logins

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The construction industry has emerged as a lucrative target for advanced persistent threat groups and organized cybercriminal networks seeking unauthorized access to corporate systems. State-sponsored APT groups from China, Russia, Iran, and North Korea are increasingly focusing their operations on …

Chinese Cybersecurity Firm Data Breach Exposes State-Sponsored Hackers Cyber Weapons and Target List

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In early November 2025, Knownsec, one of China’s largest cybersecurity firms with direct government ties, experienced a catastrophic data breach that exposed over 12,000 classified documents. The incident revealed the scale and sophistication of state-sponsored cyber operations, including detailed information …

OWASP Top 10 2025 – Revised Version Released With Two New Categories

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Open Web Application Security Project (OWASP) has unveiled the 2025 edition of its flagship OWASP Top 10 2025, marking the eighth installment and introducing significant updates to address evolving software security threats. Released on November 6, 2025, this revised …

Incident Response Team (ShieldForce) Partners with AccuKnox for Zero Trust CNAPP in Latin America

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Menlo Park, CA, USA, November 10th, 2025, CyberNewsWire AccuKnox, a leader in Zero Trust Cloud-Native Application Protection Platforms (CNAPP), announced a strategic partnership with Incident Response Team SA DE CV (ShieldForce) and DeepRoot Technologies, a global cybersecurity service provider and managed …

Critical Vulnerability in Popular NPM Library Exposes AI and NLP Apps to Remote Code Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical security flaw has been discovered in the widely used npm package expr-eval, potentially exposing AI and natural language processing applications to remote code execution attacks. The vulnerability, tracked as CVE-2025-12735, allows attackers to execute arbitrary system commands through maliciously …

LangGraph Vulnerability Allows Malicious Python Code Execution During Deserialization

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical remote code execution vulnerability has been discovered in LangGraph’s checkpoint serialization system. The flaw CVE-2025-64439 affects versions of langgraph-checkpoint before 3.0. It allows attackers to execute arbitrary Python code when untrusted data is deserialized. The vulnerability resides in …

Fired Intel Engineer Stolen 18,000 Files, Many of which Were Classified as “Top Secret”

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Intel has filed a federal lawsuit against a former employee accused of downloading thousands of classified documents shortly after being terminated, raising serious concerns about corporate data security and insider threats. Jinfeng Luo, a software developer who has worked at …