Dark Web Travel Agencies Offering Cheap Travel Deals to Steal Credit Card Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The rise of clandestine “travel agencies” on darknet forums has reshaped the cyber-crime landscape, morphing traditional card-skimming into a full-fledged service economy that sells half-priced flights, five-star hotels, and even yacht charters. What unsuspecting buyers see as a bargain is …

Exclusive! Threat Intelligence That Powers Best SOCs Worldwide Is Now Free  

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Quality threat intelligence has traditionally been the domain of enterprise-level budgets and premium subscriptions. The kind of fresh, actionable data that transforms how SOCs operate has remained frustratingly out of reach for many organizations. Until now.  A Game-Changing Opportunity For …

CISA Warns of Interlock Ransomware With Double Extortion Tactics Attacking Windows and Linux Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cybersecurity and Infrastructure Security Agency (CISA), FBI, Department of Health and Human Services, and Multi-State Information Sharing and Analysis Center have issued an urgent joint advisory warning of escalating attacks by the Interlock ransomware group, which has been targeting …

Threat Actors Allegedly Selling macOS 0-day LPE Exploit on Hacker Forums

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A threat actor known as “skart7” is allegedly offering a zero-day Local Privilege Escalation (LPE) exploit targeting Apple’s macOS operating system for sale on a prominent hacker forum.  This development represents a significant security concern for macOS users, particularly those …

Iran’s Cyber Actors Attacking Global Airlines to Exfiltrate Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The breach of Tehran-based security contractor Amnban has ripped the cover off a multi-year espionage program that quietly burrowed into airline reservation systems across Africa, Europe, and the Middle East. Internal documents and screen-captured videos obtained by investigatory journalist Nariman …

Apache Jena Vulnerability Leads to Arbitrary File Access or Manipulation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apache Jena has disclosed two significant security vulnerabilities affecting versions through 5.4.0, prompting an immediate upgrade recommendation to version 5.5.0.  Both CVE-2025-49656 and CVE-2025-50151, announced on July 21, 2025, represent important severity flaws that exploit administrative access to compromise server …

UK Confirms Ban of Ransomware Payments to Public and Critical National Infrastructure Sectors

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The UK government has announced comprehensive measures to tackle ransomware attacks, with public sector organizations and critical national infrastructure operators facing an outright ban on paying ransom demands to cyber criminals.  This landmark decision, supported by nearly three-quarters of consultation …

ETQ Reliance RCE Vulnerability Enables Full SYSTEM Access Just by Typing a Single Space

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A significant vulnerability in ETQ Reliance quality management software allows attackers to gain full administrative access by simply adding a single space character to a login attempt.  The flaw, tracked as CVE-2025-34143, represents one of the most unusual authentication bypass …

New Scanner Released to Detect SharePoint Servers Vulnerable to 0-Day Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An open-source scanning tool has been released to identify SharePoint servers vulnerable to the critical zero-day exploit CVE-2025-53770.  The newly published scanner, available on GitHub, enables organizations to rapidly assess their SharePoint infrastructure for this unauthenticated Remote Code Execution vulnerability …

Critical Sophos Firewall Vulnerabilities Enables pre-auth Remote Code Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Multiple security vulnerabilities affecting Sophos firewall products, with two enabling pre-authentication remote code execution that could allow attackers to compromise systems without valid credentials.  The vulnerabilities, tracked as CVE-2025-6704, CVE-2025-7624, CVE-2025-7382, CVE-2024-13974, and CVE-2024-13973, impact various configurations of Sophos Firewall …