- Attackers Abuse Velociraptor Forensic Tool to Deploy Visual Studio Code for C2 Tunnelingby info@thehackernews.com (The Hacker News) on 30/08/2025 at 12:06
Cybersecurity researchers have called attention to a cyber attack in which unknown threat actors deployed an open-source endpoint monitoring and digital forensic tool called Velociraptor, illustrating ongoing abuse of legitimate software for malicious purposes. "In this incident, the threat actor used the tool to download and execute Visual Studio Code with the likely intention of creating a
- WhatsApp Issues Emergency Update for Zero-Click Exploit Targeting iOS and macOS Devicesby info@thehackernews.com (The Hacker News) on 30/08/2025 at 04:36
WhatsApp has addressed a security vulnerability in its messaging apps for Apple iOS and macOS that it said may have been exploited in the wild in conjunction with a recently disclosed Apple flaw in targeted zero-day attacks. The vulnerability, CVE-2025-55177 (CVSS score: 8.0), relates to a case of insufficient authorization of linked device synchronization messages. Internal researchers on the
- Researchers Warn of Sitecore Exploit Chain Linking Cache Poisoning and Remote Code Executionby info@thehackernews.com (The Hacker News) on 29/08/2025 at 17:22
Three new security vulnerabilities have been disclosed in the Sitecore Experience Platform that could be exploited to achieve information disclosure and remote code execution. The flaws, per watchTowr Labs, are listed below - CVE-2025-53693 - HTML cache poisoning through unsafe reflections CVE-2025-53691 - Remote code execution (RCE) through insecure deserialization CVE-2025-53694 -
- Webinar: Learn How to Unite Dev, Sec, and Ops Teams With One Shared Playbookby info@thehackernews.com (The Hacker News) on 29/08/2025 at 15:42
Picture this: Your team rolls out some new code, thinking everything's fine. But hidden in there is a tiny flaw that explodes into a huge problem once it hits the cloud. Next thing you know, hackers are in, and your company is dealing with a mess that costs millions. Scary, right? In 2025, the average data breach hits businesses with a whopping $4.44 million bill globally. And guess what? A big
- Amazon Disrupts APT29 Watering Hole Campaign Abusing Microsoft Device Code Authenticationby info@thehackernews.com (The Hacker News) on 29/08/2025 at 13:22
Amazon on Friday said it flagged and disrupted what it described as an opportunistic watering hole campaign orchestrated by the Russia-linked APT29 actors as part of their intelligence gathering efforts. The campaign used "compromised websites to redirect visitors to malicious infrastructure designed to trick users into authorizing attacker-controlled devices through Microsoft's device code