CyberNews

Ransomware gangs have been terrorizing organizations for years, but recently they’ve set their sights on a new target: backups. These critical recovery points are meant to provide a safety net in case of an attack, but if attackers can erase them, the pressure to pay a ransom grows exponentially. The devastating effects of this tactic … Read more

A Critical Vulnerability Hits SonicWall’s SMA1000 Appliances, Leaving Thousands Exposed SonicWall has issued an emergency patch for its SMA1000 series of security appliances, addressing a critical flaw that allows attackers to remotely execute arbitrary code on affected devices. The vulnerability, rated CVSS 10.0, is considered one of the most severe types of flaws due to … Read more

A devastating wave of malware infections has hit the npm ecosystem, with eight malicious packages being downloaded over 40,000 times. These packages, masquerading as legitimate software development tools, have been found to deliver two notorious pieces of malware: Overlord RAT (Remote Access Tool) and a stealer, designed to siphon sensitive data from unsuspecting users’ systems. … Read more

Attackers have exploited vulnerabilities in three domain registries, successfully obtaining SSL certificates for Google domains. The impacted registries are those responsible for .gh (Ghana), .sl (Sierra Leone), and .as (American Samoa). This breach has significant implications for Google’s secure certificate infrastructure and its users. The attackers’ approach was to compromise the registrars’ systems, allowing them … Read more

Cryptomining Campaign Exploits Exposed AI Servers with Unconventional Malware Technique A sophisticated cryptomining campaign has been targeting exposed AI services, compromising over 3,400 servers and using an unusual method to retrieve command-and-control (C2) addresses. The malware, named PoeLLM, leverages a poem hosted on GitHub to extract keywords that are then used to generate C2 addresses. … Read more

Microsoft is taking another step towards bolstering the security of its Outlook email service by blocking a type of attachment that can be exploited by malicious actors. Starting next month, .msix and .msixbundle attachments will no longer be allowed in Outlook Web and the new Outlook Windows client, as these file types have been abused … Read more

A massive malware outbreak has infected over 3,400 servers worldwide, expanding a notorious crypto mining botnet. The PoeLLM (Poisoned Elastic Load Balancer and Linux Malware) malware has been spreading rapidly since its discovery in August, targeting data centers and cloud providers to harness their processing power for illicit cryptocurrency mining. The affected servers are scattered … Read more

A critical vulnerability in a widely used Windows utility has left millions of users exposed to remote code execution attacks, with no patch available yet. The flaw, identified as CVE-2026-1234, affects LMCache, a tool that maps network shares and provides access to remote files on local machines. With the vulnerability unpatched, attackers can exploit it … Read more

A Prolific Hacker Gang’s Extortion Plot Foiled, But Questions Remain About Sensitive Data Stolen from Boeing Spin-off The global aerospace company Boeing has been at the center of a cybersecurity storm after it was revealed that a notorious hacker gang, ShinyHunters, had been attempting to extort sensitive information from one of its former subsidiaries. The … Read more

A Cryptomining Campaign Targets Exposed AI Servers with Uncommon Malware Technique A sophisticated cryptomining campaign has been discovered targeting exposed AI services, exploiting a unique method to spread malware and compromising thousands of servers worldwide. The PoeLLM malware, which has been active since at least April, uses an unusual technique to retrieve command-and-control (C2) addresses … Read more