New Large-Scale Phishing Attacks Targets Hotelier Via Ads to Gain Access to Property Management Tools

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A novel phishing campaign emerged in late August 2025 that specifically targeted hoteliers and vacation rental managers through malicious search engine advertisements. Rather than relying on mass email blasts or social media lures, attackers purchased sponsored ads on platforms such …

MediaTek Security Update – Patch for Multiple Vulnerabilities Across Chipsets

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

MediaTek today published a critical security bulletin addressing several vulnerabilities across its latest modem chipsets, urging device OEMs to deploy updates immediately.  The bulletin, issued two months after confidential OEM notification, confirms that no known in-the-wild exploits have been detected …

Salesforce Releases Forensic Investigation Guide Following Chain of Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Salesforce today unveiled its comprehensive Forensic Investigation Guide, equipping organizations with best practices, log analysis techniques, and automation workflows to detect and respond to sophisticated security breaches rapidly.  To reconstruct attack timelines and assess data exposure, the guide emphasizes three …

Hackers Leverage Built-in MacOS Protection Features to Deploy Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

macOS has long been recognized for its robust, integrated security stack, but cybercriminals are finding ways to weaponize these very defenses.  Recent incidents show attackers exploit Keychain, SIP, TCC, Gatekeeper, File Quarantine, XProtect, and XProtect Remediator to stealthily deliver malicious …

Hackers Abuse Legitimate Email Marketing Platforms to Disguise Malicious Links

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals are increasingly exploiting legitimate email marketing platforms to launch sophisticated phishing campaigns, leveraging the trusted reputation of these services to bypass security filters and deceive victims. This emerging threat vector represents a significant evolution in phishing tactics, where attackers …

Food Delivery Robots Can Be Hacked to Deliver Meals to Your Table Instead of the Intended Customers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

You may have seen them in restaurants, cat-faced robots gliding between tables, delivering plates of food. These robots, many of them made by Pudu Robotics, the world’s largest commercial service robotics company, are part of a growing fleet of automated …

Hackers Registering Domains to Launch Cyberattack Targeting 2026 FIFA World Cup Tournament

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers have observed an unprecedented surge in domain registrations in recent months, closely tied to the upcoming 2026 FIFA World Cup tournament. These domains, often masquerading as legitimate ticketing portals, merchandise outlets, or live-stream platforms, serve as precursors to …

Beware of Fraudulent Scholarship Apps Attacking Students in Defarud Campaign

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated Android malware campaign has emerged in recent months, targeting students in Bangladesh by masquerading as legitimate scholarship applications. Disguised under the guise of the Bangladesh Education Board, these fraudulent apps promise financial aid and entice unsuspecting users to …

IBM Watsonx Vulnerability Let Attackers Inject Malicious SQl Queries

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

IBM published a security bulletin disclosing a serious Blind SQL injection vulnerability in its IBM Watsonx Orchestrate Cartridge for IBM Cloud Pak for Data, assigned CVE-2025-0165.  With a CVSS 3.1 base score of 7.6, this flaw could allow remote attackers …

Apple Hints That iPhone 17 Is to Eliminate the Physical SIM Card

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apple appears to be laying the groundwork to remove the physical SIM card slot from its upcoming iPhone 17 models in more countries, with a significant push anticipated across the European Union. The move aligns with the company’s long-term strategy …