Cavalry Werewolf APT Hackers Attacking Multiple Industries with FoalShell and StallionRAT

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated threat campaign has emerged targeting Russia’s public sector and critical industries between May and August 2025. The Cavalry Werewolf APT group, also known as YoroTrooper and Silent Lynx, …

Threat Actors Leverage npm Ecosystem to Deliver AdaptixC2 Post-Exploitation Framework

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The emergence of the AdaptixC2 post-exploitation framework in 2025 marked a significant milestone in the evolution of attacker toolsets targeting open-source supply chains. Positioning itself as a formidable alternative to …

Pakistani Threat Actors Targeting Indian Govt. With Email Mimic as ‘NIC eEmail Services’

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated phishing campaign orchestrated by Pakistan-linked threat actors has been discovered targeting Indian government entities by impersonating the National Informatics Centre’s email services. The operation, attributed to APT36, also …

How Threat Intelligence Can Save Money and Resources for Businesses

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity is not just about defense; it is about protecting profits. Organizations without modern threat intelligence (TI) face escalating breach costs, wasted resources, and operational inefficiencies that hit the bottom …

Microsoft Confirms Recent Updates Cause Login Issues on Windows 11 24H2, 25H2, and Windows Server 2025

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has acknowledged a significant authentication problem affecting users of recent Windows versions, stemming from security enhancements in updates released since late August 2025. The company detailed how these updates …

Meta Launches New Tools to Protect Messenger and WhatsApp Users from Scammers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Meta announced innovative tools on Tuesday to shield users of Messenger and WhatsApp from scammers. The updates, revealed during Cybersecurity Awareness Month, aim to detect suspicious activity in real-time and …

CISA Warns of Apple macOS, iOS, tvOS, Safari, and watchOS Vulnerability Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority alert about a critical vulnerability in multiple Apple products. Tracked as CVE-2022-48503, this unspecified issue in the JavaScriptCore engine …

Apache Syncope Groovy RCE Vulnerability Let Attackers Inject Malicious Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apache Syncope, an open-source identity management system, has been found vulnerable to remote code execution (RCE) through its Groovy scripting feature, as detailed in CVE-2025-57738. This flaw affects versions prior …

Better Auth API keys Vulnerability Let Attackers Create Privileged Credentials For Arbitrary Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A severe vulnerability in the popular better-auth library’s API keys plugin enables attackers to generate privileged credentials for any user without authentication. Dubbed CVE-2025-61928, the issue affects better-auth, a TypeScript …

Microsoft 365 Copilot Prompt Injection Vulnerability Allows Attackers to Exfiltrate Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated vulnerability in Microsoft 365 Copilot (M365 Copilot) that allows attackers to steal sensitive tenant data, including recent emails, through indirect prompt injection attacks. The flaw, detailed in a …