News

New WinRAR zero-day PC vulnerability exploited by hackers — What you need to know

A concerning zero-day vulnerability in WinRAR (CVE-2025-8088) allows hackers to hijack your PC. Users are advised to update ...
Computer Weekly7h

Eight critical RCE flaws make Microsoft’s latest Patch Tuesday list

No fewer than eight critical flaws that could allow a threat actor to achieve remote code execution (RCE) on a targeted system are listed in Microsoft’s August Patch Tuesday update, which once again ...
JD Supra1d

CISA Releases Malware Analysis Report for Microsoft SharePoint Vulnerabilities

Threat actors continue to exploit ToolShell to gain unauthorized access to on-premises SharePoint servers. On August 6, 2025, the Cybersecurity ...
Erie News Now3d

Microsoft Releases Emergency SharePoint Patches to Counter Critical Zero-Day Exploits

Microsoft’s security advisory emphasizes that the emergency patches provide “more robust protections” compared to earlier fixes. CVE-2025-53770 offers enhanced security beyond the CVE-2025-49704 ...
Jersey Evening Post3d

Jersey Cyber Security Centre warns businesses about “ToolShell” attacks

ISLAND businesses are being urged to avoid relying on old systems – potentially leaving themselves open to a new type of digital attack that exploits a vulnerability in Microsoft software. The Jersey ...
Security Boulevard4d

Cybersecurity Snapshot: CISA Analyzes Malware Used in SharePoint Attacks, as U.K. Boosts Cyber Assessment Framework

Check out what CISA found after it dissected malware from the latest SharePoint hacks. Plus, the U.K.’s cyber agency is overhauling its cyber framework to keep pace as threats escalate. In addition, ...

Financially motivated cluster a key player in ToolShell exploitation

Researchers from Palo Alto Networks detail ransomware deployment and malicious backdoors in a campaign against Microsoft ...

CISA releases malware analysis for Sharepoint Server attack

CISA has published a malware analysis report with compromise indicators and Sigma rules for "ToolShell" attacks targeting ...

AI-driven attacks, zero-days and cybercrime syndicates top Secureframe threat report

A new report out today from compliance automation platform provider Secureframe Inc. details the most dangerous cyberthreats of 2025 so far, with artificial intelligence-enhanced attacks, zero-day ...
The Hacker News5d

Microsoft Discloses Exchange Server Flaw Enabling Silent Cloud Access in Hybrid Setups

"In an Exchange hybrid deployment, an attacker who first gains administrative access to an on-premises Exchange server could ...
Homeland Security Today5d

CISA Releases Malware Analysis Report Associated with Microsoft SharePoint Vulnerabilities

CISA has published a Malware Analysis Report (MAR) with analysis and associated detection signatures on files related to Microsoft SharePoint vulnerabilities ...