OneFlip – New Attack Flips a Single Bit in Neural Networks for Stealthily Backdoor on AI Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In August 2025, researchers at George Mason University published a groundbreaking study at the 34th USENIX Security Symposium, introducing OneFlip, an inference-time backdoor attack that flips just one bit in …

PoC Exploit Released for Chrome 0-Day Vulnerability Exploited in the Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has disclosed a critical zero-day vulnerability in the V8 JavaScript engine used by Chrome, tracked as CVE-2025-5419.  Before a patch could be rolled out to all users, proof-of-concept (PoC) …

WinRAR 0-Day Vulnerabilities Exploited in Wild by Hackers – Detailed Case Study

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The cybersecurity landscape has been significantly impacted by the discovery and active exploitation of two critical zero-day vulnerabilities in WinRAR, one of the world’s most widely used file compression utilities.  …

French Retailer Auchan Cyberattack  – Thousands of Customers Personal Data Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Major French retail chain Auchan announced on August 21, 2025, that it suffered a significant cybersecurity incident resulting in the unauthorized access and theft of personal data from “several hundred …

X/Twitter The Most Aggressive Social Media App Collecting Users Location Information

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A comprehensive analysis of the top 10 social media platforms reveals that X (formerly Twitter) stands out as the most invasive collector of user location information, gathering both precise and …

Malicious Bing Ads deploy Weaponized PuTTY to Exploit Kerberos and Attack Active Directory services

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A malvertising campaign using sponsored results on Microsoft’s search platform delivered a weaponized PuTTY that established persistence, enabled hands-on keyboard control, and executed Kerberoasting to target Active Directory service accounts. …

Threat Actors Adapting Android Droppers Even to Deploy Simple Malware to Stay Future-Proof

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Android droppers have evolved from niche installers for heavyweight banking Trojans into universal delivery frameworks, capable of deploying even rudimentary spyware or SMS stealers. Initially, droppers served banking malware families …

Chinese UNC6384 Hackers Leverages Valid Code Signing Certificates to Evade Detection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A stealthy espionage campaign emerged in early 2025 targeting diplomats and government entities in Southeast Asia and beyond. At the heart of this operation lies STATICPLUGIN, a downloader meticulously disguised …

CISA Warns of Citrix RCE and Privilege Escalation Vulnerabilities Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CISA has issued a critical alert regarding three newly identified vulnerabilities being actively exploited by threat actors. On August 25, 2025, CISA added these high-risk Common Vulnerabilities and Exposures (CVEs) …

Hackers Actively Scanning to Exploit Microsoft Remote Desktop Protocol Services From 30,000+ IPs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A massive coordinated scanning campaign targeting Microsoft Remote Desktop Protocol (RDP) services, with threat actors deploying over 30,000 unique IP addresses to probe for vulnerabilities in Microsoft RD Web Access …