Latest Cybersecurity News and Articles

Malicious Screen Connect Campaign Abuses AI-Themed Lures for Xworm Delivery

A recent investigation uncovered a deceptive malware campaign leveraging fake AI-themed content to distribute a malicious ScreenConnect installer. This installer is pre-configured to deliver the Xworm malware.

ScamAgent shows how AI could power the next wave of scam calls

A new AI-driven framework named ScamAgent demonstrates how LLMs can be weaponized to conduct highly convincing scam calls. This system leverages multi-turn conversations and text-to-speech (TTS) synthesis to bypass traditional AI safety guardrails.

Google Big Sleep AI Tool Finds Critical Chrome Vulnerability

Google has patched a critical vulnerability (CVE-2025-9478) in the Chrome browser. The flaw, a use-after-free issue in the ANGLE graphics library, could allow attackers to execute malicious code via crafted web content.

TransUnion says hackers stole 4.4 million customers’ personal information

A significant data breach has impacted TransUnion, one of the largest credit reporting agencies in the United States, compromising the personal information of over 4.4 million individuals.

GitLab security advisory (AV25-549)

GitLab has issued a security advisory (AV25-549) on August 28, 2025, following the disclosure of multiple vulnerabilities on August 27, 2025. These vulnerabilities affect both GitLab Community Edition (CE) and Enterprise Edition (EE).

TAOTH Campaign Exploits End-of-Support Software to Target Traditional Chinese Users and Dissidents

The TAOTH campaign is a targeted cyber-espionage operation exploiting end-of-support software and spear-phishing to deploy multiple malware families - TOSHIS, DESFY, GTELAM, and C6DOOR.

Passwordstate dev urges users to patch auth bypass vulnerability

Click Studios has issued an urgent advisory for users of its Passwordstate password manager to patch a high-severity authentication bypass vulnerability. Passwordstate is used by over 370,000 IT professionals across 29,000 organizations globally.

The Salvation Army notifies victims of data breach that leaked Social Security numbers

The Salvation Army has disclosed a data breach incident from May 2025, attributed to the Chaos ransomware group. The breach resulted in the unauthorized access and exfiltration of sensitive personal data.

ShadowSilk Campaign Targets Central Asian Governments

A series of cyberattacks against government organizations in Central Asia and the Asia-Pacific has been linked to a threat cluster known as ShadowSilk, according to new research by Group-IB.

Hundreds of Swedish municipalities impacted by suspected ransomware attack on IT supplier

A suspected ransomware attack on Miljödata, a Swedish software provider used for managing sick leave and similar HR reports, is believed to have impacted around 200 of the country’s municipal governments.

Defend Against Threats with Cyber Fusion

Cyware is the leading provider of cyber fusion solutions that power threat intelligence sharing , end-to-end automation and 360-degree threat response.

Trending Tags