BodySnatcher Vulnerability: Unauthenticated Attackers Can Impersonate Any ServiceNow User A critical security flaw, designated as CVE-2025-12420 and dubbed BodySnatcher, has been identified in ServiceNow’s Virtual […]
Archives
New Kerberos Exploit Uses DNS CNAME to Bypass Security, Microsoft Issues Partial Patch
Critical Kerberos Relay Attack Exploits DNS CNAME to Bypass Security Measures A significant vulnerability has been identified in Windows Kerberos authentication, exposing Active Directory environments […]
GhostPoster Malware: 17 Malicious Extensions Compromise Over 840,000 Users
GhostPoster Malware Campaign: 17 Malicious Browser Extensions Compromise Over 840,000 Users A sophisticated cyberattack campaign, dubbed GhostPoster, has been uncovered, involving 17 malicious browser extensions […]
Vulnerabilities in Xiaomi Redmi Buds Expose Users to Data Breaches and Service Disruptions
Critical Vulnerabilities in Xiaomi’s Redmi Buds Expose Users to Data Breaches and Service Disruptions Recent security analyses have identified significant vulnerabilities within the firmware of […]
Malicious CrashFix Browser Extension Exploits Crashes for Malware Deployment via Fake Ad Blocker
CrashFix: Malicious Browser Extensions Crashing Browsers to Deploy Malware Cybersecurity experts have uncovered a sophisticated malware campaign, dubbed CrashFix, that employs a novel tactic: intentionally […]
Critical Windows SMB Vulnerability CVE-2025-33073 Puts Active Directory at Risk of System Compromise
Critical Windows SMB Client Vulnerability Threatens Active Directory Security A critical vulnerability in the Windows Server Message Block (SMB) client has been identified, posing a […]
Researchers Hijack Hacker Network via DNS Flaw, Expose Massive Push-Notification Scam
Researchers Infiltrate Hacker Network via DNS Misconfiguration In a recent investigation, cybersecurity experts uncovered a deceptive push-notification campaign exploiting browser notifications to inundate Android users […]
PDFSIDER Malware Evades Antivirus, Enables Covert Control Over Windows Systems
PDFSIDER Malware: The Stealthy Backdoor Evading Antivirus and EDR Systems In the ever-evolving landscape of cyber threats, a new adversary has emerged: PDFSIDER. This sophisticated […]
Malicious Chrome Extensions Target Enterprise HR, ERP Platforms; Over 2,300 Installations Detected
Coordinated Malicious Chrome Extensions Compromise Enterprise HR and ERP Systems A sophisticated cyber threat has emerged, involving five malicious Chrome extensions designed to infiltrate and […]
CIRO Data Breach Exposes Info of 750,000 Canadian Investors in Phishing Attack
CIRO Data Breach Exposes Sensitive Information of 750,000 Canadian Investors In a significant cybersecurity incident, the Canadian Investment Regulatory Organization (CIRO) has confirmed that approximately […]