New .NET Malware Hides Lokibot Malware within PNG/BMP Files to Evade Detection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity threats continue to evolve with sophisticated evasion methods. A new .NET-based malware loader has emerged that demonstrates an advanced approach to concealing the notorious Lokibot trojan within image files. …

New Sneaky 2FA Phishing Kit with BitB Technique Attacking Users to Steal Microsoft Account Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Sneaky2FA phishing service has recently added a dangerous new capability to its toolkit that makes stealing Microsoft account credentials even easier for attackers. Push Security analysts and researchers have …

Microsoft Integrated Azure Firewall With AI-powered Security Copilot

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has enhanced its cloud security capabilities by integrating Azure Firewall with Security Copilot, an AI-powered security solution designed to help security teams work faster and more efficiently. This integration …

Critical SolarWinds Serv-U Vulnerabilities Let Attackers Execute Malicious Code Remotely as Admin

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SolarWinds has released security patches addressing three critical remote code execution vulnerabilities in Serv-U that could allow attackers with administrative privileges to execute arbitrary code on affected systems. The vulnerabilities …

Microsoft Threat Intelligence Briefing Agent Now Integrated With the Defender Portal

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft unveiled significant enhancements to threat intelligence at Ignite 2025, bringing the Threat Intelligence Briefing Agent directly into the Defender portal. This integration marks a pivotal shift in how security …

Malicious ‘Free’ VPN Extension with 9 Million Installs Hijacks User Traffic and Steals Browsing Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A deceptive browser campaign has exposed millions of users to extensive surveillance through seemingly innocent VPN extensions. Chrome extensions marketed as “Free Unlimited VPN” services accumulated over 9 million installations …

WhatsApp Vulnerability Exposes 3.5 Billion Users’ Phone Numbers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical security flaw in WhatsApp has allowed researchers to expose the phone numbers of 3.5 billion users, marking one of the most significant data leaks ever documented. This vulnerability, …

New FortiWeb 0-Day Command Injection Vulnerability Exploited in the Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Fortinet has released an urgent security advisory addressing a newly discovered zero-day vulnerability, CVE-2025-58034, in its FortiWeb web application firewall platform, after evidence emerged of active exploitation in the wild. …

Cloudflare Discloses Technical Details Behind Massive Outage that Breaks the Internet

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cloudflare published a comprehensive report detailing the causes of a major network failure that disrupted global internet traffic for several hours, affecting millions of users and various services. The outage, …

SecurityMetrics Wins “Data Leak Detection Solution of the Year” in 2025 CyberSecurity Breakthrough Awards Program

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Orem, United States, November 18th, 2025, CyberNewsWire SecurityMetrics, a leading innovator in compliance and cybersecurity, today announced that its Shopping Cart Inspect (SCI) solutions has been selected as winner of …