Cybercriminals are actively exploiting a critical privilege escalation vulnerability (CVE-2025–8489) in the King Addons for Elementor plugin, leading to unauthorized administrator account creation on WordPress sites. Security providers like Wordfence have blocked over 48,400 attempts, urging website owners to update to patched versions. #CVE-2025–8489 #KingAddons #WordPressSecurity
Category: Cyber Security News
Marquis Software Solutions experienced a ransomware attack that compromised the personal data of over 400,000 customers across multiple US banks and credit unions. The breach exploited vulnerabilities in SonicWall firewalls and involved the Akira ransomware gang, highlighting the importance of robust cybersecurity measures. #SonicWall #AkiraRansomware
A critical security flaw in React Server Components has been disclosed, potentially allowing remote code execution if exploited. This vulnerability impacts multiple versions of React packages and Next.js, with a high CVSS score of 10.0. #ReactServerComponents #CVE-2025-55182 #Next.js #remoteCodeExecution…
Cyble researchers have uncovered a new Linux malware variant that merges Mirai-based DDoS capabilities with stealthy, fileless Monero cryptomining. This sophisticated hybrid attack allows threat actors to disrupt networks and simultaneously mine cryptocurrency while evading detection. #Mirai #XMRig…
A ransomware attack by Rhysida compromised parts of the Cleveland County Sheriff’s Office in Oklahoma, with the group demanding a ransom of 9 bitcoin. The incident is part of a broader trend of ransomware affecting US government agencies, with Rhysida claiming multiple attacks involving data theft and system encryption. #Rhysida #ClevelandCountySheriff…
Water Saci is evolving its malware delivery techniques by utilizing a layered infection chain involving HTML Applications and PDFs, primarily targeting Brazilian users through WhatsApp with sophisticated social engineering. The campaign also includes the use of AI to convert scripts from PowerShell to Python, increasing its stealth and resilience, while a…
A critical vulnerability in the WordPress plugin King Addons for Elementor has been actively exploited, allowing attackers to escalate privileges and potentially take control of affected websites. Site owners should update to the latest version and monitor for unusual activity to prevent malicious attacks. #CVE-2025-8489 #KingAddons #WordPressPlugins…
Microsoft has patched a critical Windows shortcut (LNK) file vulnerability (CVE-2025-9491) exploited since 2017 by various threat actors for remote code execution and espionage. Although Microsoft chose not to fully patch the flaw, it released a workaround to improve visibility of malicious commands in shortcut files. #CVE2025-9491 #LNKexploitation…
India has discontinued its plan to mandate pre-installation of the Sanchar Saathi app on new smartphones due to privacy concerns and industry pushback. The government claims the app aims to prevent fraud and theft, but critics worry it could give authorities access to users’ devices. #SancharSaathi #privacyconcerns…
The Edmonton Police Service has begun testing officer-worn body cameras with integrated facial recognition technology, focusing on suspects with outstanding warrants. The system is designed to aid investigations while emphasizing human verification and addressing privacy and accuracy concerns. #AxonEnterprise #FacialRecognitionTechnology…
The University of Phoenix, along with other educational institutions, has suffered a data breach through a flaw in the Oracle E-Business Suite software exploited by the Clop ransomware group. This incident highlights the vulnerability of large organizations relying on third-party platforms and the ongoing threat from cybercriminals targeting sensitive data. #OracleEBS…
Threat actors are actively exploiting a critical vulnerability in King Addons for Elementor, a popular WordPress plugin, leading to potential full-site compromises. Over 50,000 exploit attempts have been observed since threat actors began targeting the CVE-2025-8489 flaw. #KingAddons #WordPressVulnerabilities…
Niobium has successfully raised over $23 million in a funding round to advance its hardware accelerator for fully homomorphic encryption (FHE), which enhances data privacy and supports quantum-resistant security. The company aims to develop second-generation FHE platforms, focusing on production silicon architecture and ASICs to ensure secure, high-performance encrypted data processing….
Ransomware and supply chain attacks reached record levels in November, with ransomware groups increasingly leveraging supply chain vulnerabilities. The U.S. experienced the highest number of attacks, targeting critical sectors and exfiltrating sensitive data, emphasizing the need for enhanced cybersecurity measures. #Qilin #ACIRA #CL0P #SupplyChainVulnerabilities…
Three critical security flaws have been found in Picklescan, an open-source security utility for Python pickle files, which could enable attackers to bypass protections and execute malicious code. These vulnerabilities pose a significant threat to machine learning supply chains, especially when loading untrusted PyTorch models. #Picklescan #PyTorch #SupplyChainAttack…