Top 20 Cybersecurity International News
2025-06-14 09:58:53
Here's a summary of top cybersecurity news:
- Discord Invite Link Hijacking: A new campaign exploits Discord's invite system to deliver the Skuld stealer and AsyncRAT trojan.
Source: thehackernews.com - JSFireTruck JavaScript Malware: Over 269,000 websites were infected in one month with malicious JavaScript injections obfuscated using JSFuck.
Source: thehackernews.com - SimpleHelp Flaws Exploited: Ransomware gangs are exploiting unpatched SimpleHelp RMM flaws to target victims with double extortion.
Source: thehackernews.com - Apple Zero-Click Flaw: A now-patched security flaw in Apple's Messages app was exploited to spy on journalists using Paragon spyware.
Source: thehackernews.com - WordPress Sites as Weapons: VexTrio and affiliates run a global scam network distributing malicious content through compromised WordPress sites.
Source: thehackernews.com - TokenBreak Attack: A novel attack technique called TokenBreak bypasses AI moderation with single-character text changes.
Source: thehackernews.com - Microsoft 365 Copilot Vulnerability: A zero-click AI vulnerability, EchoLeak, exposes Microsoft 365 Copilot data without user interaction.
Source: thehackernews.com - TeamFiltration Tool: Over 80,000 Microsoft Entra ID accounts targeted using the open-source TeamFiltration tool in account takeover campaigns.
Source: thehackernews.com - IBM QRadar SIEM Vulnerability: A critical XSS vulnerability in IBM's QRadar SIEM platform allows authenticated users to execute malicious Javascript code.
Source: cybersecuritynews.com - WAF Vulnerability: A WAF vulnerability in Akamai, Cloudflare, and Imperva affected 40% of Fortune 100 companies.
Source: cybersecuritynews.com - Kali Linux 2025.2 Release: Kali Linux 2025.2 Released: Smartwatch Wi-Fi Injection, Android Radio, and Hacking Tools.
Source: cybersecuritynews.com - AI-Powered Vishing Simulation: Arsen Launches AI-Powered Vishing Simulation to Help Organizations Combat Voice Phishing at Scale.
Source: cybersecuritynews.com - Microsoft 365 Authentication Issues: Microsoft 365 Authentication Issues Disrupt User Access Across Multiple Regions.
Source: cybersecuritynews.com - SmartAttack Steals Data: New SmartAttack Steals Sensitive Data From Air-Gapped Systems via Smartwatches.
Source: cybersecuritynews.com - NC, Georgia Government Cyberattacks: Government offices in North Carolina and Georgia disrupted by cyberattacks.
Source: therecord.media - FIN7-Linked Infrastructure: GrayAlpha Unmasked: New FIN7-Linked Infrastructure, PowerNet Loader, and Fake Update Attacks.
Source: www.recordedfuture.com - Medical Software Data Breach: Medical software maker Episource data breach leaks thousands of patients' private health info.
Source: www.comparitech.com - Spring Framework Flaw: Spring Framework Flaw Enables Remote File Disclosure via “Content‑Disposition” Header.
Source: gbhackers.com - Microsoft Defender Spoofing Flaw: Microsoft Defender Spoofing Flaw Enables Privilege Escalation and AD Access.
Source: gbhackers.com - GitHub Device Code Flow Phishing: Developers Beware - Sophisticated Phishing Scams Exploit GitHub Device Code Flow to Hijack Tokens.
Source: gbhackers.com