Threatline

Cyber Security News From Around The World

Latest news as of 8/5/2025, 10:27:28 AM

The Register

12 days ago

Microsoft: SharePoint attacks now officially include ransomware infections

Let the games begin Ransomware has officially entered the Microsoft SharePoint exploitation ring.…

Bleeping Computer

12 days ago

Hacker sneaks infostealer malware into early access Steam game

A threat actor called EncryptHub has compromised a game on Steam to distribute info-stealing malware to unsuspecting users downloading the title. [...]

The Hacker News

12 days ago

CastleLoader Malware Infects 469 Devices Using Fake GitHub Repos and ClickFix Phishing

Cybersecurity researchers have shed light on a new versatile malware loader called CastleLoader that has been put to use in campaigns distributing various information stealers and remote access trojans (RATs). The activity employs Cloudflare-themed ClickFix phishing attacks and fake GitHub repositories opened under the names of legitimate applications, Swiss cybersecurity company PRODAFT said in

The Register

12 days ago

Coyote malware abuses Microsoft's UI Automation to hunt banking creds

Some coyotes hunt squirrels, this one hunts users' financial apps A new variant of the Coyote banking trojan abuses Microsoft's UI Automation (UIA), making it the first reported malware to use UIA for credential theft.…

The Register

12 days ago

The EFF is 35, but the battle to defend internet freedom is far from over

Palantir, data brokers, and judicial overreach are all on the horizon, executive director Cindy Cohn warns In July 1990, before the World Wide Web even existed, an unusual alliance was formed to fight for the rights of the emerging online community.… Interview

Bleeping Computer

12 days ago

Mitel warns of critical MiVoice MX-ONE authentication bypass flaw

Mitel Networks has released security updates to patch a critical-severity authentication bypass vulnerability impacting its MiVoice MX-ONE enterprise communications platform. [...]

The Hacker News

12 days ago

Sophos and SonicWall Patch Critical RCE Flaws Affecting Firewalls and SMA 100 Devices

Sophos and SonicWall have alerted users of critical security flaws in Sophos Firewall and Secure Mobile Access (SMA) 100 Series appliances that could be exploited to achieve remote code execution. The two vulnerabilities impacting Sophos Firewall are listed below - CVE-2025-6704 (CVSS score: 9.8) - An arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature can lead

The Register

12 days ago

Compromised Amazon Q extension told AI to delete everything – and it shipped

Malicious actor reportedly sought to expose AWS 'security theater' The official Amazon Q extension for Visual Studio Code (VS Code) was compromised to include a prompt to wipe the user's home directory and delete all their AWS resources.…

Dark Reading

12 days ago

Translating Cyber-Risk for the Boardroom

When security leaders embrace this truth and learn to speak in the language of leadership, they don't just protect the enterprise, they help lead it forward.

Bleeping Computer

12 days ago

Hackers breach Toptal GitHub account, publish malicious npm packages

Hackers compromised Toptal's GitHub organization account and used their access to publish ten malicious packages on the Node Package Manager (NPM) index. [...]