News

The Hacker News3d
Hackers Exploit SharePoint Zero-Day Since July 7 to Steal Keys, Maintain Persistent Access
Active SharePoint exploits since July 7 target governments and tech firms globally, risking key theft and persistent access.
SharePoint vulnerability with 9.8 severity rating under exploit across globe
The vulnerability, tracked as CVE-2025-53770, carries a severity rating of 9.8 out of a possible 10. It gives unauthenticated ...
The Hacker News2d
CISA Orders Urgent Patching After Chinese Hackers Exploit SharePoint Flaws in Live Attacks
CISA flags Microsoft SharePoint flaws under active attack by Chinese hackers. U.S. agencies must patch by July 23 ...
Hackers Are Finding New Ways to Hide Malware in DNS Records
Newly published research shows that the domain name system—a fundamental part of the web—can be exploited to hide malicious ...
Microsoft releases emergency patches for SharePoint RCE flaws exploited in attacks
Microsoft has released emergency SharePoint security updates for two zero-day vulnerabilities tracked as CVE-2025-53770 and CVE-2025-53771 that have compromised services worldwide in "ToolShell" ...
Hackers exploit a blind spot by hiding malware inside DNS records
Researchers have known for almost a decade that threat actors sometimes use DNS records to host malicious PowerShell scripts.
SecurityWeek3d
Iranian APT Targets Android Users With New Variants of DCHSpy Spyware
Iranian APT MuddyWater has been using new versions of the DCHSpy Android surveillance tool since the beginning of the ...
HealthcareInfoSecurity4d
File Transfer Flaw Blamed in Health Breach Affecting 233,000
A Connecticut-based firm that provides print and electronic document management services to health plans has reported to ...
Cybernews3d
Massive SharePoint zero-day exploit threatens thousands of companies
Hackers are actively exploiting a critical SharePoint zero-day vulnerability to compromise dozens of servers and steal ...
Interlock ransomware adopts new FileFix attack to push malware
Hackers have adopted the new technique called 'FileFix' in Interlock ransomware attacks to drop a remote access trojan (RAT) ...
Microsoft4d
Disrupting active exploitation of on-premises SharePoint vulnerabilities
Microsoft has observed two named Chinese nation-state actors, Linen Typhoon and Violet Typhoon, exploiting vulnerabilities ...
Wired29d
AI Agents Are Getting Better at Writing Code—and Hacking It as Well
AI Agents Are Getting Better at Writing Code—and Hacking It as Well One of the best bug-hunters in the world is an AI tool called Xbow, just one of many signs of the coming age of cybersecurity ...