News

Cyber Security News
cybersecuritynews.com > qilin-ransomware-kill-edr > amp

Qilin Ransomware Uses Malicious DLL to Kill Almost Every Vendor's EDR Solutions

11+ hour, 29+ min ago  (549+ words) Qilin ransomware group is deploying a sophisticated, multi-stage infection chain via a malicious msimg32.dll that can disable over 300 endpoint detection and response (EDR) drivers from virtually every major security vendor. As organizations increasingly rely on EDR solutions, which offer far…...

Cyber Security News
cybersecuritynews.com > best-digital-forensic-tools

Top 20 Best Digital Forensic Tools in 2026

21+ hour, 42+ min ago  (1527+ words) Digital forensic tools are specialized software designed to analyze, recover, and investigate data from digital devices. They help uncover crucial evidence in cybercrime investigations and legal proceedings. They offer features like data carving, metadata analysis, and file recovery, enabling investigators…...

Cyber Security News
cybersecuritynews.com > new-akira-lookalike-ransomware-campaign

New Akira Lookalike Ransomware Campaign Targeting Windows Users in South America

10+ hour, 59+ min ago  (650+ words) A new and dangerous ransomware campaign has surfaced across South America, targeting Windows users with a carefully crafted strain that closely imitates the well-known Akira ransomware. While the two may appear nearly identical on the surface, this new threat is…...

Cyber Security News
cybersecuritynews.com > hackers-clone-cert-ua-site

Hackers Clone CERT-UA Site to Trick Victims Into Installing Go-Based RAT

10+ hour, 57+ min ago  (536+ words) A threat group recently set up a convincing fake version of Ukraine's official cybersecurity authority website to trick targets into downloading a dangerous remote access tool. The campaign, now tracked under the identifier UAC-0255, relied on a mix of phishing…...

Cyber Security News
cybersecuritynews.com > hackers-abuse-docx-rtf-js-and-python-in-boeing-rfq

Hackers Abuse DOCX, RTF, JS, and Python in Stealthy Boeing RFQ Malware Campaign

12+ hour, 18+ min ago  (606+ words) A seemingly routine procurement email has become the entry point for a sophisticated six-stage malware attack targeting industrial suppliers and procurement teams. The campaign, tracked as NKFZ5966PURCHASE, disguises itself as a Boeing Request for Quotation (RFQ) from a person named "Joyce…...

Cyber Security News
cybersecuritynews.com > openssh-10-3-release

OpenSSH 10.3 Fixes Shell Injection and Multiple SSH Security Issues

12+ hour, 17+ min ago  (332+ words) The OpenSSH project released version 10.3 and 10.3p1 on April 2, 2026, addressing a shell injection vulnerability and introducing several security-hardening changes that administrators should review before upgrading. The flaw was reported by a researcher identified as "rabbit." OpenSSH developers note that exposing these…...

Cyber Security News
cybersecuritynews.com > zap-ptk-add-on

New ZAP PTK Add-On Maps Browser Security Findings as Native Alert Into ZAP

15+ hour, 44+ min ago  (451+ words) The Zed Attack Proxy (ZAP) team has rolled out version 0.3.0 of the OWASP PenTest Kit (PTK) add-on, introducing a transformative workflow upgrade for application security testing. This new release bridges the critical gap between traditional proxy-level scanning and modern client-side…...

Cyber Security News
cybersecuritynews.com > cisco-smart-software-manager-vulnerability

Cisco Smart Software Manager Vulnerability Let Attackers Execute Arbitrary Commands

16+ hour, 59+ min ago  (386+ words) Cisco has issued an urgent security warning regarding a critical vulnerability in its Smart Software Manager On-Prem (SSM On-Prem) platform. Enterprise organizations widely use this tool to manage their Cisco software licenses locally. Tracked as CVE-2026-20160, the flaw carries a…...

Cyber Security News
cybersecuritynews.com > cisco-imc-vulnerability-2

Critical Cisco IMC Vulnerability Let Attackers Bypass Authentication

19+ hour, 45+ min ago  (352+ words) Cisco has recently disclosed a critical security flaw affecting its Integrated Management Controller (IMC), prompting the release of urgent software updates. The vulnerability, officially tracked as CVE-2026-20093, has been assigned a critical Base CVSS score of 9.8, indicating the highest level of…...

Cyber Security News
cybersecuritynews.com > nginx-ui-backup-restore-vulnerability

Public PoC Exploit Released for Nginx-UI Backup Restore Vulnerability

1+ day, 42+ min ago  (433+ words) A critical security flaw has been disclosed in the Nginx-UI backup restore mechanism, tracked as CVE-2026-33026. This vulnerability allows threat actors to tamper with encrypted backup archives and inject malicious configurations during the restoration process. With a public Proof-of-Concept (PoC)…...