Do Son CISA has issued an advisory for a critical flaw in Daikin Security Gateway devices that could allow attackers to bypass authentication and gain full access.
A new vulnerability (CVE-2025-58754) in the Axios library could allow attackers to crash Node.js processes via crafted data: URIs, leading to a denial-of-service.
CISA adds a critical deserialization flaw in Dassault Systèmes DELMIA Apriso (CVE-2025-5086) to its KEV catalog, with active exploitation confirmed.
Okta Threat Intelligence uncovers VoidProxy, a dangerous new Phishing-as-a-Service (PhaaS) platform that uses Adversary-in-the-Middle attacks to bypass MFA.
A local privilege escalation flaw in PyInstaller (CVE-2025-59042) could let attackers execute code. Check if your apps are at risk.
A new report reveals a Chinese APT group compromised a Philippine military company with a fileless malware framework called EggStreme, which uses DLL sideloading for stealth.
AhnLab has uncovered BlackNevas, a new ransomware group with strong encryption. The group is attacking businesses and critical infrastructure across the globe.
A new report reveals a ToneShell backdoor from Mustang Panda. The malware targets Myanmar and uses anti-analysis tricks to evade detection.
Zscaler has uncovered kkRAT, a new malware targeting Chinese-speaking users. The RAT steals crypto, hijacks clipboards, and uses RMM tools for covert, long-term control.
A critical Angular SSR vulnerability (CVE-2025-59052) could expose user data. Learn about the flaw, affected versions, and how to protect your application.
Meta is expanding its "Community Notes" program, allowing all users to participate in rating notes as it shifts to a community-driven integrity model.
Sony's new PlayStation Family App gives parents a mobile solution to manage playtime, spending, and content on their children's consoles.
cybernewswire
London, United Kingdom, 11th September 2025, CyberNewsWire
Microsoft has eliminated fees for individual developers publishing apps to the Microsoft Store. The move aims to create a more inclusive and accessible platform.
Microsoft is reportedly integrating Anthropic's Claude into Office 365 Copilot, a move to enhance features and reduce its reliance on OpenAI.
A new report reveals CyberVolk ransomware, a pro-Russian strain that encrypts data with an unrecoverable flaw. Its decryption key is useless, making recovery impossible.
CERT/CC warns of critical flaws in Sunshine for Windows, including unquoted service path and DLL hijacking, that allow local attackers to escalate privileges.
AdaptixC2, a new open-source hacking tool, is being abused by threat actors. The stealthy framework has been used in attacks, with some loaders likely AI-generated.
A high-severity DoS flaw (CVE-2025-8696) in Stork UI allows unauthenticated attackers to crash the server with excessive data, leading to resource exhaustion.
A new macOS backdoor, ChillyHell, bypassed Apple's notarization process for years, remaining undetected while being used for espionage and brute-force attacks.
Australian authorities issue an urgent alert on a critical SonicWall SSL VPN flaw actively exploited by Akira ransomware, urging immediate patching.
A ransomware attack on a major Brazilian healthcare software provider exposes over 94,000 sensitive patient files, highlighting a new cyber threat.