Monday, May 4, 2026
HomeCyber News

Cyber News

Job Offers Become Traps – Cybercriminals Steal Over $264 Million in 2024

As the cost-of-living crisis deepens, millions have turned to side hustles and remote work in search of financial relief. But cybercriminals are preying on that desperation, orchestrating a surge of employment scams that netted over $264 million in 2024 alone, according to recent FBI...

SAP’s July 2025 Patch Day Addresses 27 Vulnerabilities, Including 7 Critical Issues

SAP released a comprehensive security update on July 8, 2025, addressing 27 new vulnerabilities across its enterprise software portfolio, with seven classified as critical requiring immediate attention. The July 2025 Patch Day also included updates to three previously released security notes, reflecting SAP's ongoing...

macOS SMBClient Vulnerabilities Enables RCE and Kernel Crash

A critical vulnerabilities in macOS SMBClient that could allow remote attackers to execute arbitrary code and crash systems through kernel-level exploits. The vulnerabilities affect the SMB filesystem client used by macOS to mount remote file shares, representing a significant security risk for Mac users...

Beware – Fraudsters Mimic DWP to Harvest Credit Card Info in Latest Phishing Scam

A sophisticated phishing campaign targeting UK residents has been gaining momentum since late May, with a sharp increase in activity observed throughout June. Cybercriminals are impersonating the Department for Work and Pensions (DWP) and sending convincing SMS messages that urge recipients to claim their...

CISA Alerts to Active Exploitation of PHPMailer Command Injection Vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding a critical command injection vulnerability in PHPMailer (CVE-2016-10033) that has been actively exploited in the wild. This vulnerability, now included in CISA's Known Exploited Vulnerabilities (KEV) catalog, poses significant risks to...

Exploitation of Critical Vulnerabilities in KIA Infotainment Systems via Malicious PNG File

A series of critical vulnerabilities in KIA's infotainment systems that allow attackers to inject malicious code through seemingly harmless PNG image files, potentially compromising thousands of vehicles worldwide. The research, presented at Hardwear.io USA on May 30, 2025, revealed that KIA's infotainment systems run on...