Cisco has warned that malicious actors have been actively exploiting a new medium-severity flaw in its IOS XR software, according to SecurityWeek.

Threat actors could exploit a new unpatched security flaw in PayPal's money transfer service to facilitate clickjacking attacks, which involve deceiving targets into interacting with webpage elements that trigger malicious activity, reports The Hacker News.

Thirty-five or more of 75 widely-used online services including LinkedIn, WordPress, Zoom, Instagram, and Dropbox could be subjected to pre-hijacking attacks involving threat actors exploiting already addressed vulnerabilities to takeover online accounts prior to their creation, according to BleepingComputer.

BleepingComputer reports that General Motors had information from some of its customers compromised as a result of a credential stuffing incident last month.

SecurityWeek reports that Trickbot Group, also known as ITG23 or Wizard Spider, has moved to quickly expand its operations following the deployment of the TrickBot malware family six years ago, while moving to automated malware encryption.

New data-extortion cybercrime operation RansomHouse has claimed to leveraged vulnerabilities to infiltrate targets' networks and later blame attacks on improperly secured networks and "ridiculously small" security flaw disclosure rewards, reports BleepingComputer.

Cybercriminals may likely be able to gain access to state-developed cyberwarfare tools through the dark web, CNBC reports.

The Register reports that U.S. President Joe Biden and newly elected South Korean President Yoon Suk Yeol have promised to strengthen both countries' partnership in combating state-sponsored cyberattacks and other cybersecurity threats from North Korea as part of a bolstered technological cooperation.