cyber news

deVixor: An Evolving Android Banking RAT with Ransomware Capabilities Targeting Iran

cyber news /

deVixor: An Evolving Android Banking RAT with Ransomware Capabilities Targeting Iran 2026-01-13 at 10:11 By rohansinhacyblecom Executive Summary deVixor is an actively developed Android banking malware campaign operating at scale, targeting Iranian users through phishing websites that masquerade as legitimate automotive businesses. Distributed as malicious APK files, deVixor has evolved from a basic SMS-harvesting threat […]

deVixor: An Evolving Android Banking RAT with Ransomware Capabilities Targeting Iran Read More »

Initial Access Sales Accelerated Across Australia and New Zealand in 2025

ANZ, cyber news, cybersecurity, Ransomware, Threat Actor, Threat Landscape Reports /

Initial Access Sales Accelerated Across Australia and New Zealand in 2025 2026-01-08 at 15:07 By Ashish Khaitan The cyber threat environment in Australia and New Zealand experienced a new escalation throughout 2025, driven by a surge in initial access sales, ransomware operations, and high-impact data breaches. According to our Threat Landscape Report Australia and New Zealand 2025, threat activity observed between January and November 2025 reveals a […]

Initial Access Sales Accelerated Across Australia and New Zealand in 2025 Read More »

The Week in Vulnerabilities: The Year Ends with an Alarming New Trend 

cyber news, vulnerability, vulnerability management /

The Week in Vulnerabilities: The Year Ends with an Alarming New Trend  2025-12-31 at 11:30 By Ashish Khaitan Cyble Vulnerability Intelligence researchers tracked 1,782 vulnerabilities in the last week, the third straight week that new vulnerabilities have been growing at twice their long-term rate.  Over 282 of the disclosed vulnerabilities already have a publicly available Proof-of-Concept (PoC), significantly increasing the likelihood of real-world attacks on those vulnerabilities.  A total of 207 vulnerabilities were rated as critical under the CVSS […]

The Week in Vulnerabilities: The Year Ends with an Alarming New Trend  Read More »

India Criminalizes Tampering with Telecommunication Identifiers and Unauthorized Radio Equipment Under the Telecommunications Act 

cyber news, cybercrime, cybersecurity, telecommunications /

India Criminalizes Tampering with Telecommunication Identifiers and Unauthorized Radio Equipment Under the Telecommunications Act  2025-12-19 at 10:38 By Ashish Khaitan The Indian government has introduced explicit legal provisions under subsection 42(3)(c) and subsection 42(3)(f) of the Telecommunications Act, 2023, formally classifying the tampering with telecommunication identifiers and the willful possession of radio equipment using unauthorized […]

India Criminalizes Tampering with Telecommunication Identifiers and Unauthorized Radio Equipment Under the Telecommunications Act  Read More »

Australia’s ACSC Releases Quantum Technology Primer for Cybersecurity Leaders 

ANZ, cyber news, cybersecurity /

Australia’s ACSC Releases Quantum Technology Primer for Cybersecurity Leaders  2025-12-17 at 15:44 By Ashish Khaitan The Australian Cyber Security Centre (ACSC) has published a new guide, Quantum Technology Primer: Overview, aimed at helping organizations understand the field of quantum technologies for cybersecurity. The publication is part of a bigger effort to raise awareness and preparedness […]

Australia’s ACSC Releases Quantum Technology Primer for Cybersecurity Leaders  Read More »

New NIS-2 Law in Germany Expands Cybersecurity Oversight and Introduces Heavy Fines 

cyber news, cybersecurity /

New NIS-2 Law in Germany Expands Cybersecurity Oversight and Introduces Heavy Fines  2025-12-11 at 16:26 By Ashish Khaitan Germany is taking decisive steps to strengthen its cybersecurity framework following the rise of digital threats. Last month, the Bundestag adopted the NIS-2 Implementation Act, translating the EU NIS-2 Directive (Directive (EU) 2022/2555) into national law. Published in […]

New NIS-2 Law in Germany Expands Cybersecurity Oversight and Introduces Heavy Fines  Read More »

Zero-Day to Zero-Hour: React2Shell (CVE-2025-55182) Becomes One of the Most Rapidly Weaponized RSC Vulnerability 

cyber news, vulnerability, vulnerability management /

Zero-Day to Zero-Hour: React2Shell (CVE-2025-55182) Becomes One of the Most Rapidly Weaponized RSC Vulnerability  2025-12-10 at 08:53 By Ashish Khaitan The vulnerability disclosure cycle has entered a new era, one where the gap between publication and weaponization is measured in minutes, not days. It has been confirmed that China-nexus threat actors began actively exploiting a critical React Server Components flaw, React2Shell, […]

Zero-Day to Zero-Hour: React2Shell (CVE-2025-55182) Becomes One of the Most Rapidly Weaponized RSC Vulnerability  Read More »

Australia Releases National AI Plan to Guide Adoption

ANZ, cyber news, cybersecurity /

Australia Releases National AI Plan to Guide Adoption 2025-12-10 at 08:53 By Ashish Khaitan The Albanese government has released Australia’s National AI Plan, establishing a coordinated framework to guide the adoption, governance, and development of artificial intelligence-related tech across the country. The plan is designed to ensure that technology serves people, supports economic growth, and strengthens Australia’s position in the […]

Australia Releases National AI Plan to Guide Adoption Read More »

Ransomware and Supply Chain Attacks Neared Records in November 

cyber news, darkweb, Ransomware, Ransomware Insights /

Ransomware and Supply Chain Attacks Neared Records in November  2025-12-10 at 08:52 By Paul Shread Ransomware attacks hit their second-highest levels on record in November, as the number of attacks rose for the seventh consecutive month.  The 640 ransomware attacks recorded by Cyble in November 2025 are second only to February 2025’s record totals (chart below).  Ransomware groups are increasingly targeting software supply chain vulnerabilities, which has contributed to a doubling of supply chain attacks since April […]

Ransomware and Supply Chain Attacks Neared Records in November  Read More »

CISA Updates Advisory for Active Exploitation Targeting Commvault Metallic SaaS Cloud Platform

CISA, Cloud Platform, Commvault, Commvault Metallic, cyber news, SaaS /

CISA Updates Advisory for Active Exploitation Targeting Commvault Metallic SaaS Cloud Platform 2025-05-28 at 17:30 By daksh sharma CISA issues urgent update on threats targeting Commvault’s Metallic SaaS platform, widely used for Microsoft 365 backups. This article is an excerpt from Cyble View Original Source

CISA Updates Advisory for Active Exploitation Targeting Commvault Metallic SaaS Cloud Platform Read More »

FBI, CISA Urge Memory-Safe Practices for Software Development 

cyber news /

FBI, CISA Urge Memory-Safe Practices for Software Development  2025-02-14 at 12:20 By Paul Shread In a strongly worded advisory, the FBI and the U.S. Cybersecurity and Infrastructure Security Agency (CISA) have urged software developers to cease unsafe development practices that lead to “unforgivable” buffer overflow vulnerabilities.  “Despite the existence of well-documented, effective mitigations for buffer […]

FBI, CISA Urge Memory-Safe Practices for Software Development  Read More »

Cyber Security Agency of Singapore Alerts Users on Active Exploitation of Zero-Day Vulnerability in Apple Products

cyber news /

Cyber Security Agency of Singapore Alerts Users on Active Exploitation of Zero-Day Vulnerability in Apple Products 2025-02-13 at 06:19 By daksh sharma Overview The Cyber Security Agency of Singapore (CSA) has recently issued a warning regarding the active exploitation of a zero-day vulnerability (CVE-2025-24200) in a range of Apple products. This critical vulnerability is being […]

Cyber Security Agency of Singapore Alerts Users on Active Exploitation of Zero-Day Vulnerability in Apple Products Read More »

Australia’s Health Sector Receives $6.4 Million Cybersecurity Boost with New Threat Information-Sharing Network

Australia, Australian Government, cyber news, cyberattack, HCSN, Health Cyber Sharing Network /

Australia’s Health Sector Receives $6.4 Million Cybersecurity Boost with New Threat Information-Sharing Network 2025-01-29 at 12:48 By daksh sharma The Australian Government has awarded a $6.4 million grant to CI-ISAC Australia, enabling the establishment of a new Health Cyber Sharing Network (HCSN). This initiative is designed to facilitate the rapid exchange of critical cyber threat […]

Australia’s Health Sector Receives $6.4 Million Cybersecurity Boost with New Threat Information-Sharing Network Read More »

Anatomy of an Exploit Chain: CISA, FBI Detail Ivanti CSA Attacks 

cyber news /

Anatomy of an Exploit Chain: CISA, FBI Detail Ivanti CSA Attacks  2025-01-24 at 16:02 By Cyble Threat actors chained together four vulnerabilities in Ivanti Cloud Service Appliances (CSA) in confirmed attacks on multiple organizations in September, according to an advisory released this week by the FBI and the U.S. Cybersecurity and Infrastructure Security Agency (CISA).  […]

Anatomy of an Exploit Chain: CISA, FBI Detail Ivanti CSA Attacks  Read More »

Aircraft Collision Avoidance Systems Hit by High-Severity ICS Vulnerability 

cyber news, vulnerability /

Aircraft Collision Avoidance Systems Hit by High-Severity ICS Vulnerability  2025-01-23 at 14:48 By Paul Shread Overview  A pair of vulnerabilities in the Traffic Alert and Collision Avoidance System (TCAS) II for avoiding midair collisions were among 20 vulnerabilities reported by Cyble in its weekly Industrial Control System (ICS) Vulnerability Intelligence Report.  The midair collision system […]

Aircraft Collision Avoidance Systems Hit by High-Severity ICS Vulnerability  Read More »

Cyble Finds Thousands of Security Vendor Credentials on Dark Web

credentials, cyber news, Dark Web Monitoring, data breach, Data leak, Info stealer /

Cyble Finds Thousands of Security Vendor Credentials on Dark Web 2025-01-22 at 10:23 By Paul Shread Overview Account credentials from some of the largest cybersecurity vendors can be found on the dark web, a result of the growing problem of infostealers, according to an analysis of Cyble threat intelligence data. The credentials – available for […]

Cyble Finds Thousands of Security Vendor Credentials on Dark Web Read More »

AI Takes the Center Stage in Biden’s Landmark Cybersecurity Order

AI, biden, cyber news /

AI Takes the Center Stage in Biden’s Landmark Cybersecurity Order 2025-01-17 at 12:33 By daksh sharma Overview Outgoing U.S. President Joe Biden issued an order yesterday outlining measures to improve government cybersecurity. The lengthy order includes suggestions to improve cloud and software security by building requirements into the federal acquisition process. It also orders federal […]

AI Takes the Center Stage in Biden’s Landmark Cybersecurity Order Read More »

Lithuania’s New Cyber Command is a Strategic Step Towards National and NATO Cybersecurity Resilience

cyber news /

Lithuania’s New Cyber Command is a Strategic Step Towards National and NATO Cybersecurity Resilience 2025-01-09 at 15:06 By Ashish Khaitan Overview  On January 1, Lithuania marked a pivotal moment in its national defense strategy with the official launch of the Lithuanian Cyber Command (LTCYBERCOM). Spearheaded by the Ministry of National Defence, this new military unit […]

Lithuania’s New Cyber Command is a Strategic Step Towards National and NATO Cybersecurity Resilience Read More »

The Commonwealth Cyber Security Posture 2024: A Deep Dive into Australia’s Cyber Defense Measures

cyber news /

The Commonwealth Cyber Security Posture 2024: A Deep Dive into Australia’s Cyber Defense Measures 2025-01-08 at 12:50 By Ashish Khaitan Overview  The Australian Government has shared its latest report for commonwealth cyber security. The Commonwealth Cyber Security Posture in 2024 report provides an essential update on the measures and progress related to cyber security across […]

The Commonwealth Cyber Security Posture 2024: A Deep Dive into Australia’s Cyber Defense Measures Read More »

MyCERT Advisory Recommends Cybersecurity Practices for Water Systems

cyber news /

MyCERT Advisory Recommends Cybersecurity Practices for Water Systems 2025-01-07 at 14:18 By Ashish Khaitan Overview  The water sector is experiencing a rise in cyber threats, with critical infrastructure, including both IT and operational technology (OT) systems, becoming primary targets for malicious actors. These attacks, which exploit vulnerabilities in internet-facing OT systems and industrial control systems […]

MyCERT Advisory Recommends Cybersecurity Practices for Water Systems Read More »

Scroll to Top