SonicWall Confirms State-Sponsored Hackers Behind the Massive Firewall Backup Breach

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SonicWall, a global cybersecurity company, confirmed that state-sponsored hackers were behind a recent incident involving unauthorized access to firewall backup files. The breach began in early September, when the company detected suspicious activity involving the download of backup firewall configuration …

Critical RCE Vulnerabilities in Claude Desktop Let Attackers Execute Malicious Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical remote code execution (RCE) flaw in three official extensions for Anthropic’s Claude Desktop. These vulnerabilities, affecting the Chrome, iMessage, and Apple Notes connectors, stem from unsanitized command injection and carry a high severity score of CVSS 8.9. Published …

Hyundai AutoEver Confirms Data Breach Exposing Users’ Personal Information and SSNs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hyundai AutoEver America has disclosed a significant data breach that compromised sensitive personal information of customers, including Social Security numbers and driver’s license details. The cybersecurity incident highlights growing concerns about data protection in the automotive technology sector.​ Hyundai AutoEver …

Cybersecurity Forecast 2026 – Google Warns Threat Actors Use AI to Enhance Speed and Effectiveness

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The cybersecurity landscape stands at a critical inflection point as organizations prepare for unprecedented challenges in 2026. Google Cloud researchers have released their annual Cybersecurity Forecast, revealing a stark reality: threat actors are transitioning from experimenting with advanced technologies to …

NGate Malware Enables Unauthorized Cash Withdrawals at ATMs Using Victims’ Payment Cards

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated Android-based NFC relay attack dubbed NGate has emerged as a serious threat to banking security across Poland, targeting financial institutions and their customers through coordinated social engineering and technical exploitation. Cert.PL analysts identified new malware samples in recent …

CISA Warns of Gladinet CentreStack and Triofox Files Vulnerability Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cybersecurity and Infrastructure Security Agency has issued a critical warning regarding a newly identified vulnerability affecting Gladinet CentreStack and Triofox platforms. The flaw, tracked as CVE-2025-11371, exposes sensitive system files and directories to unauthorized external access, potentially compromising organizations …

Chrome Emergency Update to Patch Multiple Vulnerabilities that Enable Remote Code Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has rolled out an urgent security patch for its Chrome browser, addressing five vulnerabilities that could enable attackers to execute malicious code remotely. The update, version 142.0.7444.134/.135 for Windows, 142.0.7444.135 for macOS, and 142.0.7444.134 for Linux, targets critical flaws …

Cloudflare Scrubs Aisuru Botnet from Top Domains List

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

For the past week, domains associated with the massive Aisuru botnet have repeatedly usurped Amazon, Apple, Google and Microsoft in Cloudflare’s public ranking of the most frequently requested websites. Cloudflare responded by redacting Aisuru domain names from their top websites …

Ransomware Attack on European Organizations Surge as Hackers Leveraging AI-Tools for Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

European organizations are facing an unprecedented wave of ransomware attacks as cybercriminals increasingly integrate artificial intelligence tools into their operations. Since January 2024, big game hunting threat actors have named approximately 2,100 Europe-based victims on more than 100 dedicated leak …

Windows Cloud Files Mini Filter Driver Vulnerability Exploited to Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A privilege escalation flaw in Windows Cloud Files Mini Filter Driver has been discovered, allowing local attackers to bypass file write protections and inject malicious code into system processes. Security researchers have uncovered CVE-2025-55680, a high-severity privilege-escalation vulnerability in the …