Saturday, May 2, 2026
HomeCyber News

Cyber News

Remote Command Execution Unleashed – Hackers Deploy APK Malware via 607 Malicious Domains

Cybersecurity researchers at PreCrime Labs, the threat research division of BforeAI, have uncovered a massive malicious campaign involving 607 domains that are actively distributing fake Telegram Messenger applications. The sophisticated operation, primarily targeting Chinese-speaking users, leverages advanced Android vulnerabilities to enable remote command execution...

Ransomware Attack Targets Russian Vodka Maker Beluga

Russian premium vodka producer NovaBev Group, the parent company behind the prestigious Beluga brand, has fallen victim to a sophisticated ransomware attack that disrupted its operations and temporarily affected the availability of key services. The unprecedented cyberattack, which occurred on July 14, 2025, represents...

New ‘Daemon Ex Plist’ Exploit Grants Hackers Root Access on macOS

A critical vulnerability in macOS that allows attackers to escalate privileges and gain root access through a vulnerability in the system's service management mechanism. The exploit, dubbed "Daemon Ex Plist," targets Apple's launch daemon configuration files and has been found to affect numerous popular...

CISA Publishes 13 ICS Security Alerts on Vulnerabilities and Exploits

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a comprehensive set of Industrial Control Systems (ICS) advisories on July 17, 2025, addressing critical security vulnerabilities across multiple vendor platforms. These advisories represent a significant effort to protect critical infrastructure by providing timely information...

Critical Lenovo Vantage Flaws Enable SYSTEM User Privilege Escalation for Attackers

Security researchers at Atredis Partners have disclosed three critical vulnerabilities in Lenovo Vantage, a pre-installed management platform found on millions of Lenovo laptops worldwide. The flaws, tracked as CVE-2025-6230, CVE-2025-6231, and CVE-2025-6232, enable attackers to escalate privileges to SYSTEM-level access, potentially compromising entire systems....

Hackers Exploit Signal App Clone Vulnerability to Steal Passwords

A critical security vulnerability in TeleMessageTM SGNL, an enterprise messaging system designed to mirror Signal's secure communication features, has been actively exploited by cybercriminals since its disclosure in May 2025. The vulnerability, designated CVE-2025-48927, affects government agencies and enterprises using the platform to archive...