Microsoft Store on the web now allows users to create multi-app installation packages on Windows 11, streamlining the setup process by enabling simultaneous installation of multiple applications. Currently, the feature supports selecting up to 16 apps from a curated list, primarily benefiting new PC configurations. #MicrosoftStore #Windows11
Category: Cyber Security News
CISA warns that threat actors are exploiting a critical remote command execution vulnerability in CentOS Web Panel (CWP), impacting all versions before 0.9.8.1204. Organizations, especially federal entities, are urged to apply security updates or cease using the affected product by November 25. #CWP #CVE-2025-48703 #KEV
Critical vulnerabilities in Microsoft Teams enable attackers to manipulate messages, spoof notifications, and impersonate users, including executives. These flaws facilitate sophisticated social engineering attacks, such as business email compromise and identity spoofing. #MicrosoftTeams #CVE-2024-38197…
Cisco Talos disclosed multiple vulnerabilities in Dell BSAFE, Fade In, and TruffleHog, all of which have been patched by the vendors. These vulnerabilities include out-of-bounds writes, use-after-free, and arbitrary code execution risks that could impact affected systems. #DellBSAFE #FadeIn #TruffleHog…
This article discusses a critical vulnerability in Survision’s License Plate Recognition (LPR) cameras where missing authentication allows unauthorized remote access, with a high CVSS score. Organizations should update firmware and enhance security measures to mitigate potential exploitation risks. #Survision #LicensePlateRecognition #CVE-2025-12108…
Radiometrics VizAir devices are vulnerable to multiple critical security flaws that could allow remote attackers to manipulate weather data and disrupt airport operations. Cybercriminals could exploit these vulnerabilities to mislead air traffic control, cause hazardous flight conditions, and extract sensitive meteorological information. #VizAir #CVE-2025-61945 #CVE-2025-54863 #CycloneThreat…
Authorities across France, Belgium, and Cyprus successfully dismantled a crypto money laundering ring involved in stealing over €600 million through fake investment sites. The operation involved arrests, seizures of cash, crypto, and bank funds, highlighting international cooperation in tackling crypto-related fraud. #Eurojust #CryptoLaundering…
Cybersecurity researchers have identified critical vulnerabilities in OpenAI’s ChatGPT, allowing malicious actors to manipulate the AI through prompt injections, memory poisoning, and safety bypasses. These exploits demonstrate the increasing attack surface as AI models integrate with external tools, emphasizing the importance of robust safety mechanisms. #OpenAIGPT4 #PromptInjection…
Google has uncovered PROMPTFLUX, an experimental VB Script malware that uses AI-driven self-modification to evade detection and establish persistence. Threat actors globally are increasingly leveraging large language models like Gemini to develop sophisticated, adaptive cyber tools for espionage, data theft, and malware development. #PROMPTFLUX #Gemini #AIthreats…
State-backed hackers are deploying malware that uses large language models to dynamically generate malicious scripts, enhancing their ability to evade detection. This development marks a significant advancement towards more autonomous and adaptive malware, with threat actors already experimenting with AI-driven tactics. #PROMPTFLUX #PROMPTSTEAL #FROZENLAKE #BlueDelta #AIthreats…
European law enforcement successfully dismantled a large-scale credit card fraud and money laundering ring operating across multiple countries, utilizing fake online subscriptions and stolen data. The investigation uncovered extensive misuse of German payment infrastructure, shell companies, and virtual accounts, with ongoing efforts to evaluate seized data. #CreditCardFraud #MoneyLaundering…
House Democrats are predicted to be less supportive of renewing Section 702 of the FISA in 2026 due to shifting political dynamics. Despite its importance for national security, concerns over privacy and data collection are influencing the debate. #FISA #Section702 #NationalSecurity…
Flare, a threat exposure management provider, has raised nearly $70 million to enhance its platform and expand its market presence. The company uses AI and machine learning to gather cybersecurity intelligence from the web, helping organizations prevent threats like ransomware and data breaches. #Flare #ThreatExposureManagement…
The webinar offers an in-depth analysis of the Scattered Spider cybercrime group’s tactics, targeting various industries worldwide. Attendees will learn practical strategies, including identity threat detection, to mitigate such sophisticated attacks. #ScatteredSpider #HelpDeskBlindSpot…
Google’s Threat Intelligence Group has identified emerging AI-driven methods used by malware and threat actors, including experimental and in-the-wild threats like PromptLock, PromptFlux, FruitShell, PromptSteal, and QuietVault. These developments highlight the increasing sophistication and autonomy of malicious AI applications, with nation-states also leveraging AI for cyber operations. #PromptLock #PromptFlux #FruitShell #PromptSteal…