Azure Active Directory Vulnerability Exposes Credentials and Enables Attackers to Deploy Malicious Apps

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical security vulnerability has emerged in Azure Active Directory (Azure AD) configurations that exposes sensitive application credentials, providing attackers with unprecedented access to cloud environments.  This vulnerability centers around the exposure of appsettings.json files containing ClientId and ClientSecret credentials, …

28 Years of Nmap – From Simple Port Scanner to Comprehensive Network Security Suite

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Nmap has remained at the forefront of network discovery and security assessment for nearly three decades. Originally introduced on September 1, 1997, in Phrack magazine as a modest, 2,000-line Linux-only port scanner, Nmap has since matured into a sprawling toolkit …

Zscaler Confirms Data Breach – Hackers Compromised Salesforce Instance and Stole Customer Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity company Zscaler has confirmed it fell victim to a widespread supply-chain attack that exposed customer contact information through compromised Salesforce credentials linked to marketing platform Salesloft Drift. The breach, disclosed on August 31, 2025, stems from a larger campaign …

The Ongoing Fallout from a Breach at AI Chatbot Maker Salesloft

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

The recent mass-theft of authentication tokens from Salesloft, whose AI chatbot is used by a broad swath of corporate America to convert customer interaction into Salesforce leads, has left many companies racing to invalidate the stolen credentials before hackers can …

Wireshark 4.4.9 Released With Fix For Critical Bugs and Updated Protocol Support

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Wireshark team has rolled out version 4.4.9, a maintenance release for the world’s most popular network protocol analyzer. This update focuses on stability and reliability, delivering a series of important bug fixes and enhancing support for several existing protocols. …

Hackers Reportedly Demand Google Fire Two Employees, Threaten Data Leak

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A group claiming to be a coalition of hackers has reportedly issued an ultimatum to Google, threatening to release the company’s databases unless two of its employees are terminated. The demand, which appeared in a Telegram post, specifically named Austin …

SIM Swapping Attacks on the Rise – How eSIM can Make SIM Swapping Harder

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The telecommunications landscape is facing an unprecedented crisis as SIM swapping attacks surge to alarming levels, with the United Kingdom alone reporting a staggering 1,055% increase in incidents during 2024, jumping from just 289 cases in 2023 to nearly 3,000 …

Microsoft Urges OEM Manufacturers to Fix Windows 11 USB-C Notification issues

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft is issuing a direct call to its hardware partners, urging original equipment manufacturers (OEMs) to address configuration issues that prevent crucial USB-C troubleshooting notifications from functioning correctly in Windows 11. These built-in alerts are designed to enhance user experience …

Microsoft To Mandate MFA for Accounts Signing In to the Azure Portal

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a significant security move, Microsoft announced on August 26, 2025, that it will require mandatory multifactor authentication (MFA) for all accounts signing in to the Azure portal and related administrative centers. The policy, first introduced in 2024, aims to …

Critical Next.js Framework Vulnerability Let Attackers Bypass Authorization

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly discovered critical security vulnerability in the Next.js framework, designated CVE-2025-29927, poses a significant threat to web applications by allowing malicious actors to completely bypass authorization mechanisms.  This vulnerability arises from improper handling of the x-middleware-subrequest header within Next.js …