information security news

Authentication bypass CVE-2025-22230 impacts VMware Windows ToolsAuthentication bypass CVE-2025-22230 impacts VMware Windows Tools

Authentication bypass CVE-2025-22230 impacts VMware Windows Tools

Broadcom addressed a high-severity authentication bypass vulnerability, tracked as CVE-2025-22230, in VMware Tools for Windows. Broadcom released security updates to…

4 weeks ago
Android malware campaigns use .NET MAUI to evade detectionAndroid malware campaigns use .NET MAUI to evade detection

Android malware campaigns use .NET MAUI to evade detection

Researchers warn of a new Android malware that uses .NET MAUI to mimic legit services and evade detection. McAfee researchers…

4 weeks ago
Astral Foods, South Africa’s largest poultry producer, lost over $1M due to a cyberattackAstral Foods, South Africa’s largest poultry producer, lost over $1M due to a cyberattack

Astral Foods, South Africa’s largest poultry producer, lost over $1M due to a cyberattack

Astral Foods, South Africa’s largest poultry producer, lost over $1M due to a cyberattack disrupting deliveries and impacting operations. Astral…

4 weeks ago
Chinese APT Weaver Ant infiltrated a telco in Asia for over four yearsChinese APT Weaver Ant infiltrated a telco in Asia for over four years

Chinese APT Weaver Ant infiltrated a telco in Asia for over four years

China-linked APT Weaver Ant infiltrated the network of a telecommunications services provider for over four years.  The China-linked threat actor…

1 month ago
Medusa ransomware uses malicious Windows driver ABYSSWORKER to disable security toolsMedusa ransomware uses malicious Windows driver ABYSSWORKER to disable security tools

Medusa ransomware uses malicious Windows driver ABYSSWORKER to disable security tools

Medusa ransomware uses a malicious Windows driver ABYSSWORKER to disable security tools, making detection and mitigation more difficult. Elastic Security…

1 month ago
Attackers can bypass middleware auth checks by exploiting critical Next.js flaw<gwmw style="display:none;"></gwmw><gwmw style="display:none;"></gwmw>Attackers can bypass middleware auth checks by exploiting critical Next.js flaw<gwmw style="display:none;"></gwmw><gwmw style="display:none;"></gwmw>

Attackers can bypass middleware auth checks by exploiting critical Next.js flaw<gwmw style="display:none;"></gwmw><gwmw style="display:none;"></gwmw>

A critical flaw in the Next.js React framework could be exploited to bypass authorization checks under certain conditions. Maintainers of…

1 month ago
FBI warns of malicious free online document converters spreading malware<gwmw style="display: none; background-color: transparent;"></gwmw>FBI warns of malicious free online document converters spreading malware<gwmw style="display: none; background-color: transparent;"></gwmw>

FBI warns of malicious free online document converters spreading malware<gwmw style="display: none; background-color: transparent;"></gwmw>

The FBI warns of a significant increase in scams involving free online document converters to infect users with malware. The…

1 month ago
Cloak ransomware group hacked the Virginia Attorney General’s OfficeCloak ransomware group hacked the Virginia Attorney General’s Office

Cloak ransomware group hacked the Virginia Attorney General’s Office

The Cloak ransomware group claims responsibility for a cyberattack on the Virginia Attorney General’s Office that occurred in February. The…

1 month ago
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 38SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 38

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 38

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Decrypting…

1 month ago
Security Affairs newsletter Round 516 by Pierluigi Paganini – INTERNATIONAL EDITION<gwmw style="display:none;"></gwmw>Security Affairs newsletter Round 516 by Pierluigi Paganini – INTERNATIONAL EDITION<gwmw style="display:none;"></gwmw>

Security Affairs newsletter Round 516 by Pierluigi Paganini – INTERNATIONAL EDITION<gwmw style="display:none;"></gwmw>

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free…

1 month ago