Hackers Leverage Malicious PyPI Package to Attack Users and Steal Cryptocurrency Details

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A dangerous malware campaign has surfaced targeting cryptocurrency users through a deceptive Python package hosted on the PyPI repository. The threat actors disguised their malicious code within a fake spell-checking …

New EtherHiding Attack Uses Web-Based Attacks to Deliver Malware and Rotate Payloads

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new threat known as EtherHiding is reshaping how malware spreads through the internet. Unlike older methods that rely on traditional servers to deliver harmful code, this attack uses blockchain …

ToddyCat APT Accessing Organizations Internal Communications of Employees at Target Companies

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The ToddyCat APT group has developed new ways to access corporate email communications at target organizations. Email remains the main way companies handle business communications, whether through their own servers …

Zapier’s NPM Account Hacked and Multiple Packages Infected with Self-propogating Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A massive supply chain attack targeting the NPM accounts of automation giant Zapier and the Ethereum Name Service (ENS). Identified by Aikido Security, the campaign is being orchestrated by the …

Threats Actors Leverage Python-based Malware to Inject Process into a Legitimate Windows Binary

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity researchers have uncovered a sophisticated Python-based malware that employs process injection techniques to hide inside legitimate Windows binaries. This threat represents a new evolution in fileless attack strategies, combining …

Hackers Replace ‘m’ with ‘rn’ in Microsoft(.)com to Steal Users’ Login Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated phishing campaign is currently leveraging a subtle typographical trick to bypass user vigilance, deceiving victims into handing over sensitive login credentials. Attackers utilize the domain “rnicrosoft.com” to impersonate …

vLLM Vulnerability Enables Remote Code Execution Via Malicious Payloads

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical memory corruption vulnerability in vLLM versions 0.10.2 and later allows attackers to achieve remote code execution through the Completions API endpoint by sending maliciously crafted prompt embeddings. The …

Beware of North Korean Fake Job Platform Targeting U.S. Based AI-Developers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated recruitment scam linked to North Korea has emerged, targeting American artificial intelligence developers, software engineers, and cryptocurrency professionals through an elaborate fake job platform. Validin security researchers have …

DeepSeek-R1 Makes Code for Prompts With Severe Security Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A concerning vulnerability in DeepSeek-R1, a Chinese-developed artificial intelligence coding assistant. When the AI model encounters politically sensitive topics related to the Chinese Communist Party, it produces code with severe …

Wireshark Vulnerabilities Let Attackers Crash by Injecting a Malformed Packet

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Wireshark Foundation has rolled out a crucial security update for its widely used network protocol analyzer, addressing multiple vulnerabilities that could lead to denial-of-service conditions. The latest release, version …