npm ‘is’ Package With 2.8M Weekly Downloads Weaponized to Attack Developers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The latest wave of npm-centric phishing has taken a darker turn with the hijack of the ubiquitous is utility, a module pulled 2.8 million times every week. On 19 July 2025 attackers, armed with stolen maintainer credentials, slipped malicious versions …

Linux 6.16 Released – Optimized for Better Performance and Networking

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Linux Foundation has officially released Linux kernel 6.16 on July 27, 2025, marking another milestone in open-source operating system development.  Released by Linus Torvalds, this version focuses on stability improvements and networking enhancements while maintaining the project’s commitment to …

Telegram Based Raven Stealer Malware Steals Login Credentials, Payment Data and Autofill Information

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The commodity infostealer landscape has a new entrant in Raven Stealer, a compact Delphi/C++ binary that hijacks Telegram’s bot API to spirit away victims’ browser secrets. First seen in mid-July 2025 on a GitHub repository operated by the self-styled ZeroTrace …

10 Best Virtual Machine (VM) Monitoring Tools in 2025

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

VM (Virtual Machine) monitoring tools are essential for maintaining the performance, availability, and security of virtualized environments. These tools provide real-time visibility into VM health and performance, enabling administrators to track key metrics such as CPU usage, memory utilization, disk …

CISA Warns of PaperCut RCE Vulnerability Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CISA has issued an urgent warning regarding a critical vulnerability in PaperCut NG/MF print management software that threat actors are actively exploiting in ransomware campaigns.  The vulnerability, tracked as CVE-2023-2533, represents a significant security risk to organizations worldwide using the …

Apple’s New Containerization Feature Allows Kali Linux Integration on macOS

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apple quietly slipped a game-changing developer feature into its WWDC 25 announcements: a native containerization stack that lets Macs run Open Container Initiative (OCI) images inside ultra-lightweight virtual machines. In practice, that means you can launch a full Kali Linux …

10 Best Anti-Phishing Tools in 2025

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anti-phishing tools are essential cybersecurity solutions designed to detect and prevent phishing attacks. These tools identify and block malicious emails, websites, and messages that attempt to deceive users into disclosing sensitive information such as passwords, credit card numbers, and personal …

Critical macOS ‘Sploitlight’ Vulnerability Let Attackers Steal Private Data of Files Bypassing TCC

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical macOS vulnerability enables attackers to bypass Transparency, Consent, and Control (TCC) protections and steal sensitive user data, including files from protected directories and Apple Intelligence caches.  The vulnerability, dubbed “Sploitlight,” exploits Spotlight plugins to access normally protected information …

Hackers Attacking IIS Servers With New Web Shell Script to Gain Complete Remotely Control

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity researchers have uncovered a sophisticated web shell attack targeting Microsoft Internet Information Services (IIS) servers, allowing threat actors to achieve complete remote control over compromised systems. The malicious script, identified as “UpdateChecker.aspx,” represents a significant escalation in web shell …

GitHub Outage Disrupts Core Services Globally for Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GitHub experienced a widespread outage on July 28, 2025, affecting millions of developers and organizations reliant on its services. The incident, which impacted API requests, issue tracking, and pull requests, highlighted the vulnerabilities in cloud-based collaboration tools essential for software …