Hackers Exploiting SAP NetWeaver Vulnerability to Deploy Auto-Color Linux Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated cyberattack targeting a US-based chemicals company has revealed the first observed pairing of SAP NetWeaver exploitation with Auto-Color malware, demonstrating how threat actors are leveraging critical vulnerabilities to …

Enterprise LLMs Under Risk: How Simple Prompts Can Lead to Major Breaches

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Enterprise applications integrating Large Language Models (LLMs) face unprecedented security vulnerabilities that can be exploited through deceptively simple prompt injection attacks.  Recent security assessments reveal that attackers can bypass authentication …

Microsoft Details Defence Techniques Against Indirect Prompt Injection Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has unveiled a comprehensive defense-in-depth strategy to combat indirect prompt injection attacks, one of the most significant security threats facing large language model (LLM) implementations in enterprise environments.  The …

Lionishackers Threat Actors Exfiltrating and Selling Corporate Databases on Dark Web

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A financially motivated threat actor known as Lionishackers has emerged as a significant player in the illicit marketplace for corporate data in recent months. Leveraging opportunistic targeting and a preference …

Chrome High-Severity Vulnerabilities Allows Memory Manipulation and Arbitrary Code Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has issued an urgent security update for its Chrome browser, patching several vulnerabilities, including a high-severity vulnerability that could allow attackers to manipulate memory and execute arbitrary code on …

Threat Actors Attacking Fans and Teams of Belgian Grand Prix With Phishing Campaigns

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals have launched a sophisticated multi-vector attack campaign targeting fans and teams ahead of the 2025 Belgian Grand Prix, scheduled for July 27 at the iconic Spa-Francorchamps circuit. The threat …

ArmouryLoader Bypassing System Security Protections and Inject Malicious Codes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ArmouryLoader burst onto the threat landscape in late 2024 after hijacking the export table of ASUS’s Armoury Crate utility, turning a trusted gaming companion into an initial entry point for …

Orange, France’s Leading Telecom Gaint Hit by Cyberattack – Internal Systems Affected

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

France’s leading telecommunications giant Orange confirmed on Monday that it detected a significant cyberattack targeting one of its information systems on Friday, July 25, 2025. The incident has resulted in …

Chinese Hackers Weaponizes Software Vulnerabilities to Compromise Their Targets

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Over the past year, a previously quiet Chinese threat cluster has surged onto incident-response dashboards worldwide, pivoting from single zero-day hits to an industrialized pipeline of weaponized vulnerabilities. First detected …