Category: Cyber Security
-
Attackers are actively exploiting a newly uncovered WinRAR zero-day flaw to deliver multiple malware strains. The attacks, linked to the Russia-aligned RomCom group, used specially crafted RAR archives to plant malicious files in sensitive system locations. How the Exploit Worked The vulnerability, tracked as CVE-2025-8088, is a path traversal flaw in WinRAR for Windows. Attackers…
-
The Microsoft Exchange servers unprotected situation has taken a critical turn. Nearly 29,000 servers remain unpatched even as CISA’s emergency deadline fast approaches. Widespread Risk Before Deadline As of early Monday, public scans detected approximately 29,000 unpatched Microsoft Exchange servers exposed to the internet. These servers are vulnerable to a severe flaw—CVE‑2025‑53786—that could allow attackers…
-
The U.S. Federal Judiciary cyberattack has triggered urgent security measures across the nation’s court system. Officials confirmed the attack targeted critical digital infrastructure, prompting a rapid review of security protocols and the deployment of enhanced protective systems. Attack Disrupts Court Operations The cyberattack disrupted several internal systems used to manage case filings, court schedules, and…
-
The Emerson Guevara TikTok threats case has sparked serious concern about the role of social media in spreading violent rhetoric. U.S. federal prosecutors have charged Guevara with making explicit threats against public officials through a series of TikTok videos. Violent Messages Posted Online According to court filings, Guevara used TikTok to post multiple videos targeting…
-
Researchers uncovered a large-scale RubyGems credential-stealing campaign targeting developers with malicious packages disguised as useful automation tools. Attackers achieved over 275,000 downloads since the campaign began in March 2023, exposing thousands of users to serious data theft risks. Sixty Malicious Gems Discovered Security researchers identified sixty malicious RubyGems packages uploaded by threat actors using aliases…
-
Google Finance AI upgrades are rolling out in the U.S., turning the traditional financial dashboard into a dynamic AI-powered platform. Users can now ask detailed finance questions, explore technical charts, and stay updated with real-time market news—all while toggling between the new and classic interfaces. Conversational AI Answers Your Financial Research With these Google Finance…
-
A newly discovered WinRAR zero-day flaw has been exploited in active phishing campaigns by the RomCom hacking group. The vulnerability allows attackers to execute malicious files automatically at system startup. Security experts warn users to update immediately to avoid compromise. RomCom Hackers Weaponize WinRAR Vulnerability Security researchers from ESET revealed that the flaw, tracked as…
-
Microsoft has issued urgent Microsoft Exchange patching advice in response to a high-severity vulnerability that threatens hybrid Exchange deployments. The flaw, tracked as CVE-2025-53786, could let attackers escalate privileges from on-premises servers into connected Microsoft 365 environments. The Cybersecurity and Infrastructure Security Agency (CISA) has backed Microsoft’s warning, issuing an emergency directive for immediate action.…
-
In a major cybersecurity breach, the Jamco Aerospace ransomware attack has put sensitive supplier data at risk. Jamco Aerospace, a key parts manufacturer for the U.S. Navy, Boeing, and others, faces a potential leak after the Play ransomware group claimed responsibility for the compromise. Who Is Jamco Aerospace? Jamco Aerospace Inc. operates as a precision…
-
Hackers are now exploiting forgotten Google storage buckets, reclaiming abandoned cloud addresses to inject malware or steal data. Google has issued strong warnings to developers, highlighting the growing danger of dangling bucket attacks. What Are Dangling Bucket Attacks? Dangling bucket attacks occur when a storage bucket is deleted, but references to its name remain in…