WhatsApp Has Taken Down 6.8 Million Accounts Linked to Malicious Activities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WhatsApp has successfully dismantled 6.8 million accounts linked to fraudulent activities during the first half of 2024, representing a significant escalation in the platform’s fight against organized cybercrime.  The takedown …

New Active Directory Lateral Movement Techniques that Bypasses Authentication and Exfiltrate Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Sophisticated attack vectors unveiled that exploit hybrid Active Directory and Microsoft Entra ID environments, demonstrating how attackers can achieve complete tenant compromise through previously unknown lateral movement techniques. These methods, …

HeartCrypt-Packed EDR Killer Tools ‘AVKiller’ Actively Used in Ransomware Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity teams have confronted a rising threat from a novel “EDR killer” payload in recent months, commonly referred to as AVKiller, which has been observed disabling endpoint defenses to facilitate …

Nvidia Says No Backdoors, No Kill Switches, and No Spyware in its Chips

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Nvidia Corporation has issued a strong statement asserting that its graphics processing units (GPUs) contain no backdoors, kill switches, or spyware, directly addressing growing concerns from policymakers about potential hardware-based …

SocGholish Leverages Parrot and Keitaro TDS Systems to Push Fake Updates and Deliver Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated malware operation known as SocGholish has emerged as one of the internet’s most persistent and deceptive threats, masquerading as legitimate software updates to compromise unsuspecting users’ systems. The …

HashiCorp Vault 0-Day Vulnerabilities Let Attackers Execute Remote Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers uncovered a series of critical zero-day vulnerabilities in HashiCorp Vault in early August 2025, the widely adopted secrets management solution. These flaws, spanning authentication bypasses, policy enforcement inconsistencies, …

1.2 Million Healthcare Devices and Systems Data Leaked Online – Patient Records at Risk of Exposure

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Over 1.2 million internet-connected healthcare devices and systems with exposure that endanger patient data shown in new research by European cybersecurity company Modat. Global findings showing Top 10 Regions (most results are …

HTTP/1.1 Fatal Vulnerability Exposes Millions of Websites to Hostile Takeover

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in the HTTP/1.1 protocol threatens tens of millions of websites with potential hostile takeovers through sophisticated desynchronization attacks.  This fundamental flaw in the decades-old protocol creates extreme …

Gemini Exploited via Prompt Injection in Google Calendar Invite to Steal Emails, and Control Smart Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated attack method exploits Google’s Gemini AI assistant through seemingly innocent calendar invitations and emails.  The attack, dubbed “Targeted Promptware Attacks,” demonstrates how indirect prompt injection can compromise users’ …