Cyber Security News

3 days ago | cybersecuritynews.com | Tushar Subhra Dutta

Cybersecurity researchers have documented an alarming surge in infostealer malware distribution through phishing channels, with weekly delivery volume increasing by 84% in 2024 compared to the previous year. According to recently released data, this upward trend shows no signs of slowing, with early 2025 figures suggesting an even more dramatic 180% increase in weekly volume compared to 2023 baselines.

3 days ago | cybersecuritynews.com | Tushar Subhra Dutta

In a concerning evolution of cyber infiltration tactics, North Korean IT workers have begun deploying sophisticated real-time deepfake technology during remote job interviews to secure positions within organizations worldwide. This advanced technique allows threat actors to present convincing synthetic identities during video interviews, enabling them to bypass traditional identity verification processes and infiltrate companies for financial gain and potential espionage.

3 days ago | cybersecuritynews.com | Tushar Subhra Dutta

Cybersecurity experts have identified a sophisticated new phishing technique that exploits the SVG (Scalable Vector Graphics) file format to deliver malicious HTML content to unsuspecting victims. This emerging threat, first observed at the beginning of 2025, represents a notable evolution in phishing tactics as attackers leverage the dual nature of SVG files to bypass security measures and trick users into revealing sensitive information.

3 days ago | cybersecuritynews.com | Tushar Subhra Dutta

The cybersecurity landscape faces a mounting threat as the Akira ransomware group intensifies operations, marking a significant evolution since its emergence in March 2023. This sophisticated threat actor specializes in leveraging compromised credentials to access vulnerable VPN services lacking multi-factor authentication, predominantly exploiting known Cisco vulnerabilities.

3 days ago | cybersecuritynews.com | Tushar Subhra Dutta

In a troubling development across the cybersecurity landscape, threat actors have increasingly turned to weaponizing digital certificates and compromised private keys as a sophisticated means of penetrating corporate networks. This emerging attack vector exploits the inherent trust placed in digitally signed code and certificates, allowing malicious actors to bypass traditional security controls that typically flag unsigned executables.