Kali Linux version 2025.4 introduces new hacking tools, desktop environment enhancements, and Wayland support, making it a robust option for cybersecurity experts. The update also features Kali NetHunter improvements and the preview of Wifipumpkin3 for network attacks. #KaliLinux #NetHunter #Wayland #Wifipumpkin3
Category: Cyber Security News
A malicious torrent for Leonardo DiCaprio’s ‘One Battle After Another’ embeds PowerShell malware loaders within subtitle files, leading to infection with Agent Tesla RAT. This complex attack chain highlights the risks of pirated movie files and sophisticated malware delivery methods. #AgentTesla #PowerShell #PiracyThreats
A major data breach at Coupang exposed the personal information of 33.7 million customers, linked to a former employee with unauthorized system access. The incident led to police investigations, a CEO resignation, and increased phishing attacks targeting the affected population. #Coupang #DataBreach
Attackers are exploiting a zero-day vulnerability (CVE-2025-8110) in Gogs, a self-hosted Git service, leading to widespread infections. Researchers advise immediate mitigation measures while a fix is developed, as active exploitation continues. #Gogs #CVE20258110…
Johnson Controls has identified critical vulnerabilities affecting several versions of their iSTAR Ultra series and edge door controllers, which could allow remote attackers to take full control of the devices via OS Command Injection. Organizations should prioritize firmware updates and implement network security measures to mitigate these risks. #JohnsonControls #OSCommandInjection…
This article details a vulnerability in Grassroots DICOM (GDCM) versions up to 3.0.24, which can cause application crashes and denial-of-service by exploiting out-of-bounds write issues when parsing malicious DICOM files. Mitigation involves updating affected software and following cybersecurity best practices. #CVE-2025-11266 #GrassrootsDICOM…
This alert highlights a critical DLL hijacking vulnerability in Varex Imaging’s Panoramic Dental Imaging Software, which could allow standard users to gain SYSTEM privileges. Mitigation includes deploying a software patch and implementing network security measures. #VarexImaging #CVE202422774…
Cybersecurity researchers have uncovered four new sophisticated phishing kits—BlackForce, GhostFrame, InboxPrime AI, and Spiderman—that enable large-scale credential theft and mimic legitimate websites. These kits use advanced evasion, automation, and targeting techniques to bypass security measures and target various sectors, including banking and corporate accounts. #BlackForce #GhostFrame…
Cybersecurity researchers have uncovered a new campaign utilizing GitHub repositories to distribute PyStoreRAT, a modular JavaScript-based Remote Access Trojan. The campaign employs legitimate-looking development tools to stealthily deliver malware capable of system profiling, data theft, and remote command execution. #PyStoreRAT #SetcodeRat…
A ransomware attack on Pierce County Library System compromised the personal information of over 340,000 individuals, including sensitive data of employees and patrons. The INC ransomware gang claimed responsibility, highlighting the increasing vulnerability of library systems to cyber threats. #INC #PierceCountyLibrary…
Canada’s privacy commissioner has launched an investigation into Toronto-area billboards that use facial detection technology to analyze age and gender for targeted advertising. The controversy centers around privacy concerns and the legality of processing such data under Canadian privacy laws. #FacialDetection #TorontoBillboards…
Hamas-affiliated hacking group Ashen Lepus continues persistent espionage using advanced malware called AshTag to target Middle Eastern government and diplomatic entities. Their activities have remained active post-ceasefire, focusing on stealing sensitive documents, especially related to Turkey and Palestinian political affairs. #AshenLepus #AshTag #HamasCyberGroup #MiddleEastThreats…
Huntress warns of ongoing attacks exploiting a cryptography flaw in Gladinet CentreStack, allowing hackers to retrieve keys and execute remote code via deserialization. Organizations are urged to update to the latest software versions and review indicators of compromise. #Gladinet #CentreStack #RemoteCodeExecution…
This week’s cybersecurity roundup highlights emerging threats such as the PromptPwnd attack exploiting AI models and the US Pentagon’s push towards post-quantum cryptography. It also covers international efforts to combat GPU smuggling, industry investments, and malware targeting Android devices. #PromptPwnd #SaltTyphoon…
A new Android malware called DroidLock uses ransomware-like overlays to lock devices, wipe data, and maliciously control victims’ phones remotely. Targeting Spanish Android users through phishing, it can capture screen activity, steal sensitive information, and exploit device permissions for persistent malicious control. #DroidLock #AndroidPhishing…