Cybersecurity News - Page 57

The attackers used tampered update mechanisms, phishing websites, and cloud-based infrastructure to deploy malware and steal sensitive data.

The attackers used Velociraptor, typically employed in digital forensics and incident response, to gain control of compromised systems.

The campaign aims to trick users into authorizing attacker-controlled devices via Microsoft’s device code authentication process.

The flaw, tracked as CVE-2025-55177, affects certain versions of WhatsApp for iOS and macOS.

In brief: FreePBX zero-day, Citrix releases updates to fix an actively exploited flaw, the Salt Typhoon APT officially linked to Chinese companies, and more.

Using known flaws, attackers gained access to networks, altered security settings, created covert tunnels, and deployed custom tools to steal communications data.

Hackers are abusing ScreenConnect to launch follow-up attacks, such as stealing accounts and spreading phishing emails across organizations.

PromptLock dynamically crafts its attack logic using hard-coded prompts fed into the AI model.

There are no workarounds, so users are strongly advised to upgrade immediately.

The attackers were focused on harvesting credentials, specifically searching for AWS access keys, passwords, and Snowflake tokens.