Cybersecurity News - Page 65

The group used a dual-driver strategy in the campaign, deploying a known vulnerable Zemana driver for Windows 7, and the WatchDog driver for newer Windows 10 and 11 systems.

The attackers used tampered update mechanisms, phishing websites, and cloud-based infrastructure to deploy malware and steal sensitive data.

The attackers used Velociraptor, typically employed in digital forensics and incident response, to gain control of compromised systems.

The campaign aims to trick users into authorizing attacker-controlled devices via Microsoft’s device code authentication process.

The flaw, tracked as CVE-2025-55177, affects certain versions of WhatsApp for iOS and macOS.

In brief: FreePBX zero-day, Citrix releases updates to fix an actively exploited flaw, the Salt Typhoon APT officially linked to Chinese companies, and more.

Using known flaws, attackers gained access to networks, altered security settings, created covert tunnels, and deployed custom tools to steal communications data.

Hackers are abusing ScreenConnect to launch follow-up attacks, such as stealing accounts and spreading phishing emails across organizations.

PromptLock dynamically crafts its attack logic using hard-coded prompts fed into the AI model.

There are no workarounds, so users are strongly advised to upgrade immediately.