News

1.
CybersecurityNews
cybersecuritynews.com > handala-hackers-targeted-israeli-officials > amp

Handala Hackers Targeted Israeli Officials by Compromising Telegram Accounts

3+ hour, 46+ min ago  (418+ words) In December 2025, the Iranian-linked hacking group Handala claimed to have fully compromised the mobile devices of two prominent Israeli political figures. Shortly after, they claimed similar access to Tzachi Braverman's device, the Israeli Chief of Staff. Despite these dramatic claims,…...

2.
CybersecurityNews
cybersecuritynews.com > google-tasks-abused

Hackers Abusing Google Tasks Notification for Sophisticated Phishing Attack

4+ hour, 3+ min ago  (186+ words) The December 2025 attacks signal a dangerous shift in email-based threats, in which attackers abuse legitimate Google infrastructure rather than spoofing domains or forging email headers. This allowed malicious messages to bypass traditional email security gateways that rely on sender reputation…...

3.
CybersecurityNews
cybersecuritynews.com > new-fedramp-requirements-cloud-providers-must-prepare-for > amp

New FedRAMP Requirements Cloud Providers Must Prepare For 

2+ day, 4+ hour ago  (604+ words) Cloud service providers (CSPs) working with the U.S. federal government must continually adapt to evolving FedRAMP expectations. Startups and growing cloud providers, in particular, benefit from understanding these changes early, so they can'prepare for'the authorization journey with fewer delays and more…...

4.
CybersecurityNews
cybersecuritynews.com > adaptixc2-released > amp

Open-Source C2 Platform AdaptixC2 Released With Enhanced Stability, Performance, and Speed

2+ day, 10+ hour ago  (402+ words) The latest version introduces significant improvements to network'tunneling, the user interface, and overall system performance. One of the most notable upgrades focuses on network tunnel capabilities. The SOCKS4 and SOCKS5 protocols have been completely reworked on both client and server sides, delivering…...

5.
CybersecurityNews
cybersecuritynews.com > massive-magecart-with-50-malicious-scripts > amp

Massive Magecart with 50+ Malicious Scripts Hijacking Checkout and Account Creation Flows

2+ day, 22+ hour ago  (365+ words) A large-scale web skimming operation has emerged across the internet, targeting online shoppers and account holders with unprecedented scope. The attack demonstrates a significant evolution in how cybercriminals target e-commerce platforms, moving beyond simple credit card theft to stealing full…...

6.
CybersecurityNews
cybersecuritynews.com > new-spear-phishing-attack-targeting-security-individuals

New Spear-Phishing Attack Targeting Security Individuals in Israel Region

2+ day, 23+ hour ago  (470+ words) Israel's National Cyber Directorate recently issued an urgent alert about a targeted spear-phishing attack aimed at people working in security and defense-related areas. The campaign uses WhatsApp messages that pretend to come from trusted organizations, inviting targets to professional conferences....

7.
CybersecurityNews
cybersecuritynews.com > smartermail-vulnerability

Critical Vulnerability in SmarterMail Let Attackers Execute Remote Code

3+ day, 5+ hour ago  (223+ words) SmarterTools has issued an urgent security advisory addressing a critical vulnerability in SmarterMail that could allow attackers to execute remote code on mail servers. The flaw, tracked as CVE-2025-52691, poses a severe threat to organizations using the affected versions. The…...

8.
CybersecurityNews
cybersecuritynews.com > new-phishing-kit-with-ai-assisted-development

New Phishing Kit with AI-assisted Development Attacking Microsoft Users to Steal Logins

3+ day, 21+ hour ago  (363+ words) A Spanish-speaking phishing operation targeting Microsoft Outlook users has been active since March 2025, using a sophisticated kit that shows clear indicators of AI-assisted development. The campaign, tracked through a unique signature of four mushroom emojis embedded in the string "OUTL,…...

9.
CybersecurityNews
cybersecuritynews.com > change-gmail-address

Google Now Allows Users to Change Their @gmail.com Email Address

1+ week, 23+ hour ago  (322+ words) For years, one of the most persistent frustrations for Google users has been the inability to alter their primary email address without creating an entirely new account. Whether you are stuck with an unprofessional handle created in high school or…...

10.
Cyber Security News
cybersecuritynews.com > lets-encrypt-45-days-certificate

Let’s Encrypt to Reduce Certificate Validity from 90 Days to 45 Days

4+ week, 2+ day ago  (375+ words) Let's Encrypt has officially announced plans to reduce the maximum validity period of its SSL/TLS certificates from 90 days to 45 days. The transition, which will be completed by 2028, aligns with broader industry shifts mandated by the CA/Browser Forum Baseline…...