EY Data Leak – Massive 4TB SQL Server Backup Exposed Publicly on Microsoft Azure

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A massive 4TB SQL Server backup file belonging to global accounting giant Ernst & Young (EY) was discovered publicly accessible on Microsoft Azure. The exposure, uncovered by cybersecurity firm Neo Security during a routine asset mapping exercise, highlights how even …

Huge Surge in Fake Investment Platforms Mimic Forex Exchanges Steal Logins

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Fraudulent investment platforms impersonating cryptocurrency and forex exchanges have emerged as the predominant method used by financially motivated cybercriminals to defraud victims across Asia and beyond. These sophisticated scam operations deploy advanced social engineering tactics to manipulate victims into transferring …

Microsoft DNS Outage Disrupts Azure and Microsoft 365 Services Worldwide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft reported a DNS-related outage on October 29, 2025, affecting access to key services, including Microsoft Azure and Microsoft 365. The issue surfaced around 9:37 PM GMT+5:30, leaving users unable to reach the Microsoft 365 admin center and experiencing widespread …

New TEE.fail Attack Breaks Trusted Environments to Exfiltrate Secrets from Intel and AMD DDR5 Environments

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A groundbreaking security vulnerability has emerged that fundamentally challenges the integrity of modern trusted execution environments across Intel and AMD server platforms. Researchers from Georgia Tech, Purdue University, and van Schaik LLC have unveiled TEE.fail, a sophisticated attack methodology that …

Sweet Security Brings Runtime-CNAPP Power to Windows

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Tel Aviv, Israel, October 29th, 2025, CyberNewsWire Sweet Security Brings Runtime-CNAPP Power to Windows Sweet Security, a leader in Runtime Cloud and AI security solutions, today announced an extension of its Runtime CNAPP sensor to include Windows environments. With this …

AWS US-EAST-1 Region Experiences Delays in EC2 Instance Deployments

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Amazon Web Services encountered significant operational challenges in its US-EAST-1 region on October 28, 2025, with elevated latencies affecting EC2 instance launches and cascading issues across container orchestration services. The disruption, which began earlier in the day, impacted multiple AWS …

WordPress Plugin Vulnerability Exposes 7 Million Sites to XSS Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical cross-site scripting (XSS) vulnerability has been discovered in the popular LiteSpeed Cache plugin for WordPress, affecting millions of websites worldwide. The vulnerability, tracked as CVE-2025-12450, poses a significant risk to site visitors and administrators alike. The LiteSpeed Cache …

Hikvision Exploiter – An Automated Exploitation Toolkit Targeting Hikvision IP Cameras

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new open-source tool called HikvisionExploiter has emerged, designed to automate attacks on vulnerable Hikvision IP cameras. Released on GitHub in mid-2024 but gaining renewed attention amid 2025’s surge in camera exploits, this Python-based utility targets unauthenticated endpoints in cameras …

10 Malicious npm Packages with Auto-Run Feature on Install Deploys Multi-Stage Credential Harvester

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The npm ecosystem faces a sophisticated new threat as ten malicious packages have emerged, each designed to automatically execute during installation and deploy a comprehensive credential harvesting operation. This attack campaign represents a significant evolution in supply chain compromises, combining …

PoC Exploit Released for BIND 9 Vulnerability that Let Attackers Forge DNS Records

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A public exploit code demonstrating how attackers could exploit CVE-2025-40778, a critical vulnerability in BIND 9 that enables DNS cache poisoning. The Internet Systems Consortium (ISC) initially disclosed this flaw on October 22, revealing a dangerous weakness in the world’s …