New Veeam Themed Phishing Attack Using Weaponized Wav File to Attack users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated phishing campaign targeting organizations has emerged, exploiting the trusted reputation of Veeam Software through weaponized WAV audio files delivered via email. The attack represents an evolution in social …

New CrushFTP 0-Day Vulnerability Exploited in the Wild to Gain Access to Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical zero-day flaw in the CrushFTP managed file-transfer platform was confirmed after vendor and threat-intelligence sources confirmed active exploitation beginning on 18 July 2025 at 09:00 CST. Tracked as …

New QR Code Attack Via PDFs Evades Detection Systems and Harvest Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated phishing campaign dubbed “Scanception” has emerged as a significant threat to enterprise security, leveraging QR codes embedded in PDF attachments to bypass traditional email security measures and harvest …

Lumma Infostealer Steal All Data Stored in Browsers and Selling Them in Underground Markets as Logs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The cybersecurity landscape continues to face significant threats from sophisticated information stealers, with Lumma emerging as one of the most prevalent and dangerous malware families targeting both consumer and enterprise …

CISA Warns of Fortinet FortiWeb SQL Injection Vulnerability Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Fortinet FortiWeb vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation of the SQL injection flaw …

Google Sued BadBox 2.0 Malware Botnet Operators That Infects 10 Million+ Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has filed a lawsuit in New York federal court against the operators of the BadBox 2.0 botnet, marking a significant escalation in the tech giant’s fight against cybercriminal networks. …

New Wave of Crypto-Hijacking Infects 3,500+ Websites

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A stealth Monero-mining campaign has quietly compromised more than 3,500 websites by embedding an innocuous-looking JavaScript file called karma.js. The operation leverages WebAssembly, Web Workers, and WebSockets to siphon CPU …

Fancy Bear Hackers Attacking Governments, Military Entities With New Sophisticated Tools

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The notorious Russian cyberespionage group Fancy Bear, also known as APT28, has intensified its operations against governments and military entities worldwide using an arsenal of sophisticated new tools and techniques. …

Threat Actors Exploiting Ivanti Connect Secure Vulnerabilities to Deploy Cobalt Strike Beacon

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated malware campaign targeting Ivanti Connect Secure VPN devices has been actively exploiting critical vulnerabilities CVE-2025-0282 and CVE-2025-22457 since December 2024. The ongoing attacks demonstrate advanced persistent threat techniques, …

Sophos Intercept X for Windows Vulnerabilities Enable Arbitrary Code Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Three critical vulnerabilities in the Sophos Intercept X for Windows product family could allow local attackers to achieve arbitrary code execution with system-level privileges. Identified as CVE-2024-13972, CVE-2025-7433, and CVE-2025-7472, …