Microsoft Confirms UAC Bug Breaks App Install On Windows 11 And 10 Versions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has officially acknowledged a significant bug in recent Windows security updates that is causing application installation and repair failures across multiple versions of Windows 10, Windows 11, and Windows …

Threat Actors Using Stealerium Malware to Attack Educational Organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Educational institutions have become prime targets in the escalating battle against commodity information stealers. First emerging in 2022 as an open-source project on GitHub, Stealerium was initially released “for educational …

Django Critical Vulnerability Let attackers Execute Malicious SQL Code on Web Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Django development team has issued critical security updates to address a high-severity vulnerability that could allow attackers to execute malicious SQL code on web servers using the popular framework. …

US Offers $10M Bounty For FSB Hackers Who Exploited Cisco Vulnerability To Attack Critical Infrastructure

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The United States government has announced a reward of up to $10 million for information leading to the identification or location of three Russian intelligence officers. The bounty, offered through …

Google Warns of Zero-Day Vulnerability in Sitecore Products Allowing Remote Code Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical zero-day vulnerability in several Sitecore products could allow attackers to execute code remotely. The vulnerability, identified as CVE-2025-53690, stems from a ViewState deserialization flaw and is being actively …

Chinese APT Hackers Exploit Router Vulnerabilities to Infiltrate Enterprise Environments

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Over the past several years, a concerted campaign by Chinese state-sponsored Advanced Persistent Threat (APT) groups has exploited critical vulnerabilities in enterprise-grade routers to establish long-term footholds within global telecommunications …

Threat Actors Attack PayPal Users in New Account Profile Set up Scam

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated phishing campaign targeting PayPal’s massive user base has emerged, utilizing deceptive “Set up your account profile” emails to compromise user accounts through an ingenious secondary user addition scheme. …

XWorm Malware With New Infection Chain Evade Detection Exploiting User and System Trust

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Emerging quietly in mid-2025, the XWorm backdoor has evolved into a deceptively sophisticated threat that preys on both user confidence and system conventions. Initial reports surfaced when organizations noted a …

New Namespace Reuse Vulnerability Allows Remote Code Execution in Microsoft Azure AI, Google Vertex AI, and Hugging Face

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity researchers have uncovered a critical vulnerability in the artificial intelligence supply chain that enables attackers to achieve remote code execution across major cloud platforms including Microsoft Azure AI Foundry, …

Mis-issued TLS Certificates for 1.1.1.1 DNS Service Enable Attackers to Decrypt Traffic

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The discovery of three improperly issued TLS certificates for 1.1.1.1, the popular public DNS service from Cloudflare, and the Asia Pacific Network Information Centre (APNIC). The certificates, which were issued …