28,000+ Microsoft Exchange Servers Vulnerable to CVE-2025-53786 Exposed Online

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Over 28,000 unpatched Microsoft Exchange servers are exposed on the public internet and remain vulnerable to a critical security flaw designated CVE-2025-53786, according to new scanning data released on August …

CastleBot Malware-as-a-Service Deploys Range of Payloads Linked to Ransomware Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated new malware framework named CastleBot has emerged as a significant threat to cybersecurity, operating as a Malware-as-a-Service (MaaS) platform that enables cybercriminals to deploy diverse malicious payloads ranging …

New Windows-Based DarkCloud Stealer Attacking Computers to Steal Login Credentials and Financial Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated new variant of the DarkCloud information stealer has emerged in the cyberthreat landscape, targeting Windows users through carefully crafted phishing campaigns designed to harvest sensitive credentials and financial …

Axis Camera Server Vulnerabilities Exposes Thousands of Organizations to Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Critical security flaws in Axis Communications’ surveillance infrastructure have left over 6,500 organizations worldwide vulnerable to sophisticated cyberattacks, with potential impacts spanning government agencies, educational institutions, and Fortune 500 companies. …

VexTrio TDS System Developing Several Malicious Apps Mimic as VPNs to Publish in Google Play and App Store

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The notorious VexTrio traffic distribution system (TDS) has expanded its cybercriminal operations beyond traditional web-based scams to include the development and distribution of malicious mobile applications designed to masquerade as …

US Confirms Shutdown of BlackSuit Ransomware That Hacked Over 450 Organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

U.S. authorities have announced the successful dismantling of the BlackSuit ransomware operation, a notorious group linked to attacks on more than 450 organizations worldwide. The operation, led by Immigration and …

PyPI Released Advisory to Prevent ZIP Parser Confusion Attacks on Python Package Installers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In recent months, security researchers have uncovered a novel attack vector targeting Python package installers through ambiguities in the ZIP archive format. By exploiting discrepancies between local file headers and …

Columbia University Data Breach – Hackers Stolen 870,000 Individuals Personal and Financial Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Columbia University has disclosed a major cybersecurity incident where an unauthorized third party accessed and extracted a significant volume of personal and financial data. The breach, which affects a vast …

RubyGems Malware Attack Weaponizes 60+ Packages to Steal Credentials from Social Media and Marketing Tools

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors began slipping malicious code into legitimate RubyGems packages, disguising infostealers as social media automation tools in early 2023. Over the past two years, attackers operating under aliases such …