US Confirms Shutdown of BlackSuit Ransomware That Hacked Over 450 Organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

U.S. authorities have announced the successful dismantling of the BlackSuit ransomware operation, a notorious group linked to attacks on more than 450 organizations worldwide. The operation, led by Immigration and …

PyPI Released Advisory to Prevent ZIP Parser Confusion Attacks on Python Package Installers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In recent months, security researchers have uncovered a novel attack vector targeting Python package installers through ambiguities in the ZIP archive format. By exploiting discrepancies between local file headers and …

Columbia University Data Breach – Hackers Stolen 870,000 Individuals Personal and Financial Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Columbia University has disclosed a major cybersecurity incident where an unauthorized third party accessed and extracted a significant volume of personal and financial data. The breach, which affects a vast …

RubyGems Malware Attack Weaponizes 60+ Packages to Steal Credentials from Social Media and Marketing Tools

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors began slipping malicious code into legitimate RubyGems packages, disguising infostealers as social media automation tools in early 2023. Over the past two years, attackers operating under aliases such …

Windows User Account Control Bypassed Using Character Editor to Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated new technique that exploits the Windows Private Character Editor to bypass User Account Control (UAC) and achieve privilege escalation without user intervention, raising significant concerns for system administrators …

Threat Actors Weaponize Malicious Gopackages to Deliver Obfuscated Remote Payloads

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity researchers have uncovered a sophisticated malware campaign targeting the Go ecosystem through eleven malicious packages that employ advanced obfuscation techniques to deliver second-stage payloads. The campaign demonstrates a concerning …

ECScape: Exploiting ECS Protocol on EC2 to Exfiltrate Cross-Task IAM and Execution Role Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated technique dubbed “ECScape” that allows malicious containers running on Amazon Elastic Container Service (ECS) to steal AWS credentials from other containers sharing the same EC2 instance. The discovery …

Biggest Ever GreedyBear Attack With 650 Hacking Tools Stolen $1 Million from Victims

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated cybercriminal operation known as GreedyBear has orchestrated one of the most extensive cryptocurrency theft campaigns to date, deploying over 650 malicious tools across multiple attack vectors to steal …

ChatGPT-5 Released: What’s New With the Next-Generation AI Agent

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenAI has officially launched ChatGPT-5, a new generation of its AI agent that introduces a sophisticated, unified system designed to be faster, more intelligent, and significantly more useful for real-world …

CISA Releases Emergency Advisory Urges Feds to Patch Exchange Server Vulnerability by Monday

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CISA has issued an emergency advisory directing all Federal Civilian Executive Branch agencies to mitigate a newly disclosed Microsoft Exchange urgently hybrid-joined vulnerability, tracked as CVE-2025-53786, by 9:00 AM EDT …