Cyber News

Google has officially released Chrome 132 to the stable channel, bringing critical security updates and feature enhancements to users on Windows, macOS, and Linux. The update, version 132.0.6834.83/84, will be rolled out gradually over the coming days and weeks....

Microsoft has disclosed a significant security vulnerability in its Windows Line Printer Daemon (LPD) service, tracked as CVE-2025-21224. This flaw could allow attackers to execute remote code on affected systems, posing a serious risk to organizations relying on the...

Microsoft has disclosed a significant vulnerability in its Windows Remote Desktop Gateway (RD Gateway) that could allow attackers to exploit a race condition, resulting in a denial-of-service (DoS) attack. The flaw, identified as CVE-2025-21225, was addressed in the company's January...

OneBlood, a major blood donation nonprofit serving the southeastern United States, has confirmed a significant data breach resulting from a ransomware attack that occurred in July 2024. The organization, which provides blood to over 250 hospitals across Florida, Georgia,...

Researchers have conducted a detailed study on the capabilities of ZAP (Zed Attack Proxy), an open-source tool widely used for identifying vulnerabilities in web applications. The study, led by experts from National Tsing Hua University and the Industrial Technology...

Cybercriminals are increasingly leveraging YouTube's vast platform to distribute malware, bypassing traditional antivirus detections and exploiting users' trust in the popular video-sharing site. Security researchers have uncovered a sophisticated campaign where threat actors are hijacking YouTube channels and using them...

Researchers analyzed new versions of the Banshee macOS Stealer sample that initially evaded detection by most antivirus engines, as analysis revealed that the malware employed a unique string encryption technique.  The encryption method was identical to that used by Apple's...

IBM disclosed a significant vulnerability in its watsonx.ai platform, potentially exposing users to cross-site scripting (XSS) attacks. The vulnerability, identified as CVE-2024-49785, affects both IBM watsonx.ai on Cloud Pak for Data and standalone IBM watsonx.ai installations. The security flaw allows...

Security researchers have successfully hacked Apple's proprietary ACE3 USB-C controller. This chip, introduced with the iPhone 15 and iPhone 15 Pro, represents a significant leap in USB-C technology, handling power delivery and acting as a sophisticated microcontroller with access...

A critical security vulnerability in Ivanti Connect Secure VPN appliances has left 2,048 instances worldwide exposed to potential exploitation, with the United States hosting the highest number of vulnerable systems. The vulnerability tracked as CVE-2025-0282, has been actively exploited since...