Cyber Security News Live

LAS VEGAS — At the DEF CON 33 security conference, researchers Yair and Shahak Morag of SafeBreach Labs unveiled a new class of denial-of-service (DoS) attacks, dubbed the "Win-DoS Epidemic." The duo presented their findings, which include four new...

Darknet markets, operating beyond the reach of traditional payment processors and legal systems, rely on escrow systems to secure cryptocurrency transactions between buyers and vendors.  These systems, using multisignature wallets and automated release mechanisms, aim to ensure transaction security and...

The cybersecurity landscape is fundamentally transforming as organizations turn to automating security operations to keep pace with an ever-increasing volume of threats. Traditional Security Operations Centers (SOCs), once the backbone of enterprise cybersecurity defense, are evolving into sophisticated, AI-powered environments...

Coinbase Global, Inc., one of the world’s largest crypto exchanges, disclosed a major cybersecurity incident in a Form 8-K filing with the U.S. Securities and Exchange Commission (SEC) on May 14, 2025. The breach, orchestrated by an unknown...

A sophisticated new phishing toolkit named "SessionShark" has been specifically designed to circumvent Microsoft Office 365's multi-factor authentication (MFA) protections. SessionShark is being marketed on underground forums as a turnkey phishing-as-a-service (PhaaS) solution. It enables even low-skilled threat actors to...

A federal whistleblower "Daniel Berulis", A senior DevSecOps architect has allegedly sent a affidavit document of a U.S DOGE significant data breach at the National Labor Relations Board (NLRB), claiming that personnel from the Department of Government Efficiency (DOGE)...

A critical vulnerability in the USB-audio driver, which could lead to out-of-bounds memory reads, has been addressed by a recent patch to the Linux kernel, authored by Takashi Iwai of SUSE. The USB-audio driver in the Linux kernel has...

Commvault, a global leader in enterprise data protection and management solutions, has urgently patched a high-severity webserver vulnerability that enables attackers to compromise systems by creating and executing malicious webshells.  The flaw affects multiple versions of Commvault’s software across Linux...

The cryptocurrency industry faced another challenging year in 2024, as hacking incidents reached new heights, with $2.2 billion in digital assets stolen. This marks a 21.07% year-over-year (YoY) increase, reinforcing concerns about the vulnerabilities of the rapidly growing sector....

The cybersecurity research team at ANY.RUN, leveraging their Interactive Sandbox and Threat Intelligence Lookup tools, has uncovered and analyzed a range of emerging threats throughout December 2024. The team highlighted fascinating trends and vital insights into the evolving threat...