Mustang Panda With SnakeDisk USB Worm and Toneshell Backdoor Seeking to Penetrate Air-Gap Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The cybersecurity landscape witnessed a significant escalation in July 2025 when the China-aligned threat actor Hive0154, commonly known as Mustang Panda, deployed sophisticated new malware variants designed to breach air-gapped …

New Red Teaming Tool “Red AI Range” Discovers, Analyzes, and Mitigates AI Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Red AI Range (RAR), an open-source AI red teaming platform, is transforming the way security professionals assess and harden AI systems.  Designed to simulate realistic attack scenarios, RAR streamlines the …

New SEO Poisoning Attacking Windows Users With Weaponized Software Sites

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In August 2025, security researchers uncovered a sophisticated SEO poisoning campaign targeting Chinese-speaking Windows users. By manipulating search result rankings with tailored SEO plugins and registering lookalike domains, attackers successfully …

Top 10 Best Endpoint Protection Solutions For MSPs/MSSPs in 2025

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In the complex and rapidly evolving world of cybersecurity, Managed Service Providers (MSPs) and Managed Security Service Providers (MSSPs) stand as the crucial first line of defense for a diverse …

Microsoft Confirms 900+ XSS Vulnerabilities Found in IT Services, Ranging from Low Impact to Zero-Click

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Of all the vulnerabilities that plague modern applications, Cross-Site Scripting (XSS) is one of the oldest and most persistent. Despite being a known threat for over two decades, XSS continues …

Critical LangChainGo Vulnerability Let Attackers Access Sensitive Files by Injecting Malicious Prompts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A high-severity vulnerability was identified in LangChainGo, the Go implementation of the popular LLM orchestration framework LangChain.  Tracked as CVE-2025-9556, this flaw allows unauthenticated attackers to perform arbitrary file reads …

Actors Behind AppSuite-PDF and PDF Editor Used 26 Code-Signing Certificates to Make Software Appear Legitimate

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers have uncovered a sophisticated malware campaign spanning seven years, where threat actors behind AppSuite-PDF and PDF Editor applications systematically abused code-signing certificates to legitimize their malicious software. The …

IBM QRadar SIEM Vulnerability Let Attackers Perform Unauthorized Actions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical permission misconfiguration in the IBM QRadar Security Information and Event Management (SIEM) platform could allow local privileged users to manipulate configuration files without authorization.  Tracked as CVE-2025-0164, the flaw stems …

Great Firewall of China’s Sensitive Data of Over 500GB+ Leaked Online

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Great Firewall of China (GFW) suffered its largest-ever internal data breach. More than 500 GB of sensitive material—including source code, work logs, configuration files, and internal communications—was exfiltrated and …

DarkCloud Stealer Attacking Financial Companies With Weaponized RAR Attachments

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

DarkCloud Stealer has recently emerged as a potent threat targeting financial organizations through convincing phishing campaigns. Adversaries employ weaponized RAR attachments masquerading as legitimate documents to deliver a multi-stage JavaScript-based …