CyberSecurity News

Adobe released patches addressing over a dozen security flaws across various products, including Photoshop, Illustrator for iPad, Animate, Substance 3D Stager, and Substance 3D Designer.

Cybercriminals are impersonating CrowdStrike recruiters to lure job seekers into downloading malware under the guise of job offers. Victims receive phishing emails directing them to a fake CrowdStrike website, where they are tricked into installing a malicious app that deploys XMRig, a cryptominer used to mine Monero cryptocurrency.

Researchers have uncovered new variants of the "Banshee macOS Stealer", which initially bypassed antivirus detection due to its use of a unique string encryption technique mimicking Apple’s XProtect antivirus engine.

A sophisticated credit card skimmer malware has been discovered targeting WordPress checkout pages by silently injecting malicious JavaScript into the WordPress database's wp_options table.

Medusind, a Florida-based medical and dental billing solutions provider, revealed a data breach affecting over 360,000 individuals, discovered on December 29, 2023.

Veracode, a software code analysis firm based in Burlington, Massachusetts, has acquired key assets from Phylum, a Colorado-based startup specializing in software supply chain security.

A research team has introduced ART4SQLi, a new adaptive random testing method designed to improve SQL injection (SQLi) vulnerability detection efficiency in penetration testing.

Nikki-Universal Co. Ltd., a leading chemical manufacturer, suffered a ransomware attack on December 22, 2024, resulting in the encryption of its data and the exfiltration of 761.8 GB of sensitive files.

The rapid growth of mobile applications has created opportunities for threat actors to exploit users, as seen in the emergence of FireScam malware targeting Android devices, cybersecurity researchers at Cyfirma report.

Richmond University Medical Center in Staten Island, New York, confirmed that a ransomware attack in May 2023 led to a data breach affecting over 670,000 individuals.

SquareX, a pioneer in Browser Detection and Response (BDR) solutions, has issued a warning about OAuth-based phishing attacks targeting Chrome extension developers, exposing users to session hijacking and data theft.

Cybercriminals who hacked Rhode Island’s RIBridges system, which supports health and benefits programs, have released stolen data on the dark web, prompting the state to encourage residents to protect their personal information.