Cyber Security News

Network security for Software as a Service (SaaS) requires a combination of rules, procedures, and technologies to ensure the confidentiality, integrity, and availability of SaaS-provided data and services. As-a-Service Security (SaaS) refers to a cloud-based methodology for delivering security services over the Internet, specifically in the context of network security. Businesses increasingly use security services […]

The post Best Network Security Vendors for SaaS – 2026 appeared first on Cyber Security News.

Attackers have successfully infiltrated n8n’s community node ecosystem using a malicious npm package disguised as a legitimate Google Ads integration tool. The attack reveals a critical vulnerability in how workflow automation platforms handle third-party integrations and user credentials. The malicious package, named n8n-nodes-hfgjf-irtuinvcm-lasdqewriit, tricked developers into entering their Google Ads OAuth credentials through a seemingly […]

The post Hackers Infiltrated n8n’s Community Node Ecosystem With a Weaponized npm Package appeared first on Cyber Security News.

A stealthy flaw in Telegram’s mobile clients that lets attackers unmask users’ real IP addresses with a single click, even those hiding behind proxies. Dubbed a “one-click IP leak,” the vulnerability turns seemingly innocuous username links into potent tracking weapons. The issue hinges on Telegram’s automatic proxy validation mechanism. When users encounter a disguised proxy […]

The post Telegram Exposes Real Users IP Addresses, Bypassing Proxies on Android and iOS in 1-click appeared first on Cyber Security News.

InvisibleJS, a new open-source tool that conceals JavaScript code using invisible zero-width Unicode characters, raises alarms about potential misuse in malware campaigns. InvisibleJS, hosted on GitHub by developer With alias oscarmine, employs steganography to embed source code into seemingly blank files. The process converts JavaScript into binary strings, mapping 0s to Zero Width Space (U+200B) […]

The post InvisibleJS Tool Hides Executable ES Modules in Empty Files Using Zero-Width Steganography appeared first on Cyber Security News.

VirusTotal has released YARA-X version 1.11.0, introducing an important new feature designed to improve rule reliability and reduce false negatives in malware detection. The latest update introduces hash-function warnings that help security researchers catch common mistakes when writing YARA detection rules. YARA-X is a malware detection engine widely used by cybersecurity professionals to identify malicious files. […]

The post YARA-X 1.11.0 Released With a New Hash Function Warnings appeared first on Cyber Security News.

Google announced Monday it’s integrating its Gemini AI model into Gmail, introducing features that transform the email service into a proactive personal assistant for its 3 billion users. The company is launching AI Overviews, a feature that synthesizes long email threads into concise summaries of key points. Users can also ask their inbox natural-language questions, such […]

The post Google is Integrating Gemini AI with Gmail to Transform it into a Proactive Personal Assistant appeared first on Cyber Security News.

Threat actor HawkSec claims to be auctioning a Discord dataset comprising 78,541,207 files. The collection, organized into messages, voice sessions, actions, and servers, stems from an abandoned OSINT/CSINT project spanning several months. HawkSec promoted the dataset in their Discord server, titled “Hello Hawks Community,” announcing availability for purchase via designated channels. Files purportedly cover public […]

The post Threat actors Allegedly Claim Discord Dataset Containing 78,541,207 Files appeared first on Cyber Security News.

A critical XML external entity (XXE) injection vulnerability has been discovered in Apache Struts 2, potentially exposing millions of applications to data theft and server compromise. The vulnerability, tracked as CVE-2025-68493, affects multiple versions of the widely used framework and requires immediate action from developers and system administrators. Vulnerability Overview The security flaw exists in the […]

The post Critical Apache Struts 2 Vulnerability Allow Attackers to Steal Sensitive Data appeared first on Cyber Security News.

The cybersecurity landscape is experiencing a major shift in how attackers operate. Threat actors have moved away from traditional hunting methods like phishing emails and cold outreach. Instead, they are now creating sophisticated traps designed to make high-value targets walk directly into their schemes. This new approach, called “inbound” social engineering, is currently focusing on […]

The post Web3 Developer Environments Targeted by Social Engineering Campaign Leveraging Fake Interview Software appeared first on Cyber Security News.

India faces an unprecedented surge in mobile malware attacks, with a staggering 38% increase in threats compared to the previous year, according to the latest findings from the Zscaler ThreatLabz 2025 Mobile, IoT, and OT Threat Report. The country has solidified its position as the global epicenter for mobile attacks, accounting for 26% of all […]

The post India Continues to Be the Top Target for Mobile Attacks with 38% Increase in Threats appeared first on Cyber Security News.

The surge in Electronic Health Records (EHRs), telemedicine, and interconnected medical devices has forged a intricate healthcare ecosystem ripe for cyber exploitation. Robust network security solutions are non-negotiable to shield sensitive patient data from advanced threats. Healthcare-focused providers deliver multi-layered protections including IDS/IPS, end-to-end encryption, zero-trust access controls, and proactive vulnerability management powered by threat […]

The post 10 Best Network Security Providers for Healthcare Industry in 2026 appeared first on Cyber Security News.

DDoS attacks overwhelm targeted servers, services, or networks with massive Internet traffic floods, disrupting normal operations. HTTP DDoS incidents rose 15% quarter-over-quarter despite a 35% annual decline, signaling persistent volatility. AppTrana Cloud WAAP (WAF) thwarts DDoS and bots via built-in cleaners and AI-driven auto-mitigation—dynamically adjusting based on host, IP, URI, and geography for unwavering availability. […]

The post Top 10 Best DDoS Protection Tools & Services – 2026 appeared first on Cyber Security News.

IT managers must strategically select network security solutions to fortify digital infrastructure against intensifying 2026 threats. Industry leaders like Perimeter 81, Palo Alto Networks, Cisco, Rapid7, Fortinet, Sophos, Trend Micro, CrowdStrike, Check Point, and IBM Security deliver diverse capabilities, from cloud-native defenses to endpoint safeguards. These platforms deploy advanced firewalls to filter traffic, allowing legitimate […]

The post Top 10 Best Network Security Solutions for IT Managers – 2026 appeared first on Cyber Security News.

Critical vulnerabilities in InputPlumber, a Linux input device utility used in SteamOS, could allow attackers to inject UI inputs and cause denial-of-service conditions on affected systems. The SUSE researchers tracked as CVE-2025-66005 and CVE-2025-14338, which affect InputPlumber versions before v0.69.0 and stem from inadequate D-Bus authorization mechanisms. InputPlumber combines Linux input devices into virtual input devices and runs […]

The post Critical InputPlumber Vulnerabilities Allows UI Input Injection and Denial-of-Service appeared first on Cyber Security News.

Everest hacking group has allegedly claimed a major breach of Nissan Motor Co., Ltd., raising fresh concerns about data security at large automotive manufacturers. According to early reports, the cybercrime group says it exfiltrated around 900 GB of sensitive data from the Japanese carmaker, a volume that suggests broad access to internal systems and repositories. […]

The post Everest Hacking Group Allegedly Claims Breach of Nissan Motors appeared first on Cyber Security News.

A severe global buffer overflow vulnerability has been discovered in the zlib untgz utility version 1.3.1.2. Allowing attackers to corrupt memory and potentially execute malicious code through specially crafted command-line input.​ The security flaw resides in the TGZfname() function of the untgz utility, where an unbounded strcpy() call processes user-supplied archive names without any length […]

The post Critical Zlib Vulnerability Let Attackers Trigger Buffer Overflow by Invoking untgz appeared first on Cyber Security News.

X has suspended the iconic @twitter handle on its platform, replacing its profile with a standard notice stating the account violates rules. Screenshots of the suspension screen began circulating widely late last week, igniting discussions about the platform’s rebranding efforts. The @twitter account had remained inactive since before Elon Musk’s 2022 acquisition of the platform, […]

The post X Suspended Twitter Account for Violation of Rules appeared first on Cyber Security News.

A recent investigation has exposed the technical foundation of underground carding operations, revealing 28 unique IP addresses and 85 domains actively hosting illegal marketplaces where stolen credit card data is bought and sold. These platforms operate as sophisticated e-commerce sites for financial fraud, enabling criminals to trade stolen payment information ranging from $5 to $150 […]

The post New Research Uncovers 28 Unique IP Addresses and 85 Domains Hosting Carding Markets appeared first on Cyber Security News.

The world of cybercrime has taken a dangerous turn as pig butchering scams now operate as turnkey services, lowering entry barriers for bad actors worldwide. The “Penguin” operation represents a growing marketplace that provides everything scammers need to launch large-scale fraud campaigns, from stolen personal data to ready-made fraud templates. This service-based model mirrors other […]

The post New ‘Penguin’ Pig Butchering as a Service Selling PII, Stolen Accounts and Fraud Kits appeared first on Cyber Security News.

Security researcher TwoSevenOneT, known for EDR evasion tools like EDR-Freeze and EDR-Redir, unveiled EDRStartupHinder this week. The tool blocks antivirus and EDR services at startup by redirecting critical System32 DLLs via Windows Bindlink, demonstrated on Windows Defender in Windows 11 25H2.​ Antivirus and EDR services operate like standard Windows services but with enhanced protection from […]

The post New EDRStartupHinder Tool blocks antivirus and EDR services at startup on Windows 11 25H2 Defender appeared first on Cyber Security News.