Notepad++ Vulnerability Let Attackers Hijack Network Traffic to Install Malware via Updates

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The popular text editor Notepad++ has addressed a severe security weakness in its update mechanism that could allow attackers to hijack network traffic and push malicious executables to users under …

Gogs 0-Day Vulnerability Exploited in the Wild to Hack 700+ Instances

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical zero-day vulnerability in Gogs, a widely used self-hosted Git service, is currently being exploited in the wild. Designated as CVE-2025-8110, this flaw allows authenticated users to execute a …

1inch Named Exclusive Swap Provider at Launch for Ledger Multisig

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Road Town, British Virgin Islands, December 11th, 2025, CyberNewsWire 1inch, the leading DeFi ecosystem, has been selected as the exclusive swap provider at launch for Ledger Multisig, deepening the collaboration …

Microsoft Teams to Introduce External Domains Anomalies Report for Enhanced Security

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft plans to enhance the administrative features of its Teams collaboration platform with a significant new security function to monitor external communications. Scheduled for rollout in February 2026, the “External …

New ClickFix Attacks as macOS Infostealer Leverages Official ChatGPT Website by Piggybacking

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new malicious campaign is targeting macOS users via a novel attack that exploits ChatGPT’s official website. The attackers are using a technique called ClickFix to spread the AMOS infostealer …

Hackers Leveraging LLM Shared Chats to Steal Your Passwords and Crypto

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new malware campaign has emerged that exploits legitimate AI platforms to deliver malicious code directly to unsuspecting users. Threat actors are using sponsored Google search results to redirect users …

New “SOAPwn” .NET Vulnerabilities Expose Barracuda, Ivanti and Microsoft Appliances to RCE Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

New research into legacy .NET Framework SOAP client code has uncovered “SOAPwn,” a class of vulnerabilities. That can be weaponized for remote code execution (RCE) across multiple enterprise products. Including …

Critical Vulnerability in Multiple India-Based CCTV Cameras Let Attackers Video and Account Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A severe security vulnerability affecting multiple India-based CCTV camera manufacturers has been disclosed. Potentially allowing attackers to access video feeds and steal account credentials without authentication. The U.S. Cybersecurity and …

GitLab Patches Multiple Vulnerabilities that Allows Attackers to Trigger XSS and DoS Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Critical security patches on December 10, 2025, addressing ten significant vulnerabilities across its Community Edition and Enterprise Edition platforms. GitLab has released updated versions 18.6.2, 18.5.4, and 18.4.6 to address …

High-Severity Jenkins Vulnerability Allows Unauthenticated DoS via HTTP CLI

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Patches released by Jenkins address a significant denial-of-service (DoS) vulnerability affecting millions of organizations. That rely on the popular automation server for continuous integration and deployment pipelines. A high-severity vulnerability …