APT36 Hackers Attacking Indian Government Entities to Steal Login Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated phishing campaign attributed to the Pakistan-linked APT36 group has emerged as a serious threat to Indian government infrastructure. First detected in early August 2025, this operation leverages typo-squatted domains designed to mimic official government login portals. When unsuspecting …

North Korean Hackers Weaponizing NPM Packages to Steal Cryptocurrency and Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated North Korean cryptocurrency theft campaign has resurfaced with renewed vigor, weaponizing twelve malicious NPM packages to target developers and steal digital assets. The campaign, which represents a significant escalation in supply chain attacks, exploits the trust developers place …

Cisco Hacked – Attackers Stole Profile Details of Users Registered on Cisco.com

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco has confirmed it was the target of a cyberattack where a malicious actor successfully stole the basic profile information of an undisclosed number of users registered on Cisco.com. The technology giant revealed that the breach occurred after an employee …

Kimsuky APT Hackers Weaponizing LNK Files to Deploy Reflective Malware Bypassing Windows Defender

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

North Korean state-sponsored cyber-espionage group Kimsuky has unveiled a sophisticated new campaign targeting South Korean entities through malicious Windows shortcut (LNK) files, demonstrating the group’s continued evolution in stealth and precision. The campaign combines tailored social engineering with advanced malware …

SonicWall Warns of Escalating Cyberattacks Targeting Gen 7 Firewalls in Last 72 Hours

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SonicWall has issued an urgent security advisory following a significant increase in cyber incidents targeting its Gen 7 SonicWall firewalls over the past 72 hours. The company is actively investigating a wave of attacks that appear to be focused on …

Hackers Can Steal IIS Machine Keys by Exploiting SharePoint Deserialization Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated attack method where hackers are exploiting a deserialization vulnerability in SharePoint to steal Internet Information Services (IIS) Machine Keys. This enables attackers to bypass security measures, forge trusted data, and ultimately achieve persistent Remote Code Execution (RCE) on …

Famous Chollima APT Hackers Attacking Job Seekers and Organization to Deploy JavaScript Based Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

North Korean-linked Famous Chollima APT group has emerged as a sophisticated threat actor, orchestrating targeted campaigns against job seekers and organizations through deceptive recruitment processes. Active since December 2022, this advanced persistent threat has developed an intricate multi-stage attack methodology …

Fashion Giant Chanel Hacked in Wave of Salesforce Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

French luxury fashion house Chanel has become the latest victim in a sophisticated cybercrime campaign targeting major corporations through their Salesforce customer relationship management systems. The company confirmed on July 25, 2025, that unauthorized threat actors had breached a database …

Critical Android System Component Vulnerability Allows Remote Code Execution Without User Interaction

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google released its August 2025 Android Security Bulletin on August 4, revealing a critical vulnerability that poses significant risks to Android device users worldwide.  The most severe flaw, designated CVE-2025-48530, affects the core System component and could enable remote code …

New Android Malware Mimics as SBI Card, Axis Bank Apps to Steal Users Financial Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated new Android malware campaign has emerged targeting Indian banking customers through convincing impersonations of popular financial applications. The malicious software masquerades as legitimate apps from major Indian financial institutions, including SBI Card, Axis Bank, Indusind Bank, ICICI, and …