Cyber News

Proof-of-Concept Released for Apache Tomcat CVE-2025-31650 Denial-of-Service Vulnerability

A new proof-of-concept exploit targeting CVE-2025-31650 in Apache Tomcat versions 10.1.10-10.1.39 has been publicly released, demonstrating a critical HTTP/2 priority header vulnerability…

11 months ago

Glitch-Hosted Phishing Campaign Hits 830 Organizations Using Telegram and Fake CAPTCHAs

Netskope Threat Labs tracked an alarming surge in phishing activity leveraging the Glitch web app platform. Attackers exploited Glitch’s free…

11 months ago

Chaos RAT Evolves To Target Both Linux And Windows, Stealing Sensitive Data

Cybersecurity experts have recently identified a surge in attacks leveraging new, advanced variants of the open-source remote administration tool known…

11 months ago

CISA Publishes Tactics, Techniques, and Indicators for Defending Against Play Ransomware

On June 4, 2025, the U.S. Cybersecurity and Infrastructure Security Agency (CISA), in partnership with the FBI and the Australian…

11 months ago

Russian Hacker Black Owl Targets Critical Industries To Steal Financial Data

A new cyber threat has emerged on the global stage as the Russian hacker collective known as Black Owl aggressively…

11 months ago

Haozi’s Phishing Toolkit Steals Over $280,000 Through Plug-and-Play Attacks

Phishing-as-a-Service (PhaaS) has entered a new era in 2025, exemplified by Haozi a highly automated, subscription based phishing platform that…

11 months ago

Researchers Discover Critical NetMRI Bugs Enabling Full Administrative Access

Security researchers have disclosed a series of critical vulnerabilities in Infoblox’s NetMRI network automation and configuration management virtual appliance (version…

11 months ago

UNC6040 APT Group Steals Salesforce Data Without Exploiting Any Known Vulnerabilities

A recent wave of cyberattacks by the financially motivated UNC6040 threat group has sent shockwaves across the enterprise landscape not…

11 months ago

Coinbase Breach Involves Bribed Overseas Support Agents Stealing Customer Data

Coinbase, one of the world’s leading cryptocurrency exchanges, has revealed a significant security breach stemming from a sophisticated insider threat.…

11 months ago

Cybercriminals Use Clever HTML Technique to Bait Outlook Users into Dangerous Clicks

A lesser-known but highly effective cyberattack method has resurfaced, targeting unsuspecting users through a sophisticated manipulation of HTML in phishing…

11 months ago