Daily News - Agosto (10/08 - 16/08) - 33 Semana de 2025

16/08

7 cybersecurity habits everyone should adopt

10 Best API Protection Tools in 2025

At least S$16,000 lost to phishing scams involving YouTrip e-wallets in two months in Singapore

Backups Are Useless If You Can’t Recover: Why Ransomware Resilience Demands a Rethink

CPAP Medical Data Breach Impacts 90,133 Individuals: SSNs Exposed

Cyber-attack on MoD-linked contractor exposes data of Afghans in resettlement scheme

Data Breach at Jet Centre Hits Afghans and UK Personnel

Data Breach Exposes Personal Information of Thousands of Afghans Resettled in the UK

‘Deeply embarrassing’: Afghan veterans hit by second UK data breach

Dr. Doug's Pediatric Dentistry Data Breach Update

ERMAC V3.0 Banking Trojan Source Code Leak Exposes Full Malware Infrastructure

Former Afghan Interpreter’s UK Relocation Offer Revoked Amid Data Breach Fallout

Fortinet FortiSIEM Command Injection Vulnerability (CVE-2025-25256) – Technical Details Revealed

Google confirms data stolen in breach by known hacker group

Google deploys Gemini AI to combat ad fraud with 40% reduction

Massive data breach exposes thousands of Afghans settled in the UK, British troops

Minnesota National Guard cyber team finishes mission helping City of St. Paul after ransomware attack

New Gmail Phishing Attack With Weaponized Login Flow Steals Credentials

North Korean hackers switch to ransomware in major cyber campaign

O2 hired a hacker to uncover people's passwords, and it took just 3 minutes to break into accounts

Researcher to release exploit for full auth bypass on FortiWeb

Rotherham: ‘Extremist hacker’ jailed for crippling websites and stealing personal data in US

Russian Group EncryptHub Exploits MSC EvilTwin Vulnerability to Deploy Fickle Stealer Malware

Scammers Compromised by Own Malware, Expose $4.67M Operation

“Serial Hacker” Sentenced to 20 Months in UK Prison

Serial hacker who defaced official websites is sentenced

Thai drivers for Chinese-led mobile phishing gang arrested

The new scams that know you by name

US authorities raid ransomware operator, seize $2.8M in crypto

Zizzl LLC Data Breach Affects One in Massachusetts

15/08

9 hottest IT security certs for higher pay today

10 Best Managed Detection And Response (MDR) Companies in 2025

Accenture acquires Aussie cyber security firm CyberCX

Accenture to buy Australian cybersecurity firm CyberCX for reported $650 million

Allianz Life Data Breach Exposes 2.8 Million Customer and Partner Records

Analysis Sees Limited End User Ability to Accurately Identify Phishing Attacks

Authorized Push Payment Fraud a National Security Risk to UK, Report Finds

‘Blue Locker’ Ransomware Targeting Oil & Gas Sector in Pakistan

Canadian House of Commons probes cyberattack linked to Microsoft vulnerability

Cisco Discloses Critical RCE Flaw in Firewall Management Software

Cisco fixed maximum-severity security flaw in Secure Firewall Management Center

Cisco Secure Firewall Snort 3 Vulnerability Enable DoS Attacks

Cisco Secure Firewall Vulnerability Lets Attackers Execute Remote Shell Commands

Cisco Warns of CVSS 10.0 FMC RADIUS Flaw Allowing Remote Code Execution

Citigroup considers custody and payment services for stablecoins crypto ETFs

Clinical Diagnostics reportedly paid ransom after cyberattack

Colt Telecom attack claimed by WarLock ransomware, data up for sale

Connecticut credit union discloses data breach

Cyber insurance market shows early signs of maturity

Cyberattack on Dutch prosecution service is keeping speed cameras offline

Dark Web Sales of Government Email Addresses from the US and More Expose Global Risks

Department of Justice (DOJ) Seizes $2.8 Million in Cryptocurrency Linked to Zeppelin Ransomware

Employees race to build custom AI apps despite security risks

Fake Netflix job offers targeting job seekers

Fighting fraud with AI: The new identity security playbook

French Cosmetics Giant Peggy Sage Allegedly Hit by Datacarry Ransomware Group

Google AI email summaries can be hacked to hide phishing attacks

Hack the planet! A snapshot of nation-state of cyber threats over the last 12 months

Hackers exploit Microsoft flaw to breach Canada ’s House of Commons

HexStrike AI Links ChatGPT, Claude, and Copilot to 150+ Security Tools

How military leadership prepares veterans for cybersecurity success

How to Secure the UK’s Quantum Economy

HTTP/2 MadeYouReset Vulnerability Enables Massive DDoS Attacks

Indian Institute of Technology Roorkee (IIT Roorkee) data breach: A wake-up call for higher education institutions

Justice Department Announces Seizure of Over $2.8 Million in Cryptocurrency, Cash, and other Assets

Karndean International LLC Allegedly Breached by Crypto24 Ransom Group

LockBit hackers targeting Africa, warns Interpol

Major Turkish Crypto Exchange BtcTurk Allegedly Hacked for Nearly $50 Million

Majority of Organizations Ship Vulnerable Code, Study Finds

Maselli Misure S.p.A. Allegedly Targeted by Sarcoma Ransomware Group

Miracle Ear Data Breach Affects Thousands

Nearly a million patients hit by DaVita dialysis ransomware attack

New Clever Phishing Attack Uses Japanese Character “ん” to Mimic Forward Slash

New NIST Concept Paper Outlines AI-Specific Cybersecurity Framework

North Korean hacker group accused of espionage in Seoul, with Chinese help

Obot MCP Gateway: Open-source platform to securely manage the adoption of MCP servers

OT Disruptions Could Cost $330B Globally

OT Networks Targeted in Vulnerability Exploitation

Pakistan's Oil and Gas Sector Hit by Blue Locker Ransomware

Palo Alto GlobalProtect Vulnerability Allows Privilege Escalation via Certificate Bypass

Pediatric Dentist Notifies Patients of Data Breach

Plex Urges Users to Immediately Patch Critical Vulnerability in Media Server

Plex warns users to patch security vulnerability immediately

Police Bust Crypto Scammers, Nab Smishing SMS Blaster Operator

Qilin Ransomware Group Allegedly Breaches Morgenstern AG, MARMA Polskie Folie, and Fort Smith School District

Researchers uncover fake Netflix recruiter scheme targeting Facebook accounts

SFA Engineering Allegedly Hit by Ransomware Attack – 2.3TB of Data Leaked

Source Code of ERMAC V3.0 Malware Exposed by ‘changemeplease’ Password

Taiwan Web Servers Breached by UAT-7237 Using Customized Open-Source Hacking Tools

Thousands of guests at Italian hotels hit in wide-ranging cyberattack - here's what we know

US and Five Global Partners Release First Unified OT Security Taxonomy

U.S. court system breach linked to possible Russian involvement, officials say

U.S. Sanctions Garantex and Grinex Over $100M in Ransomware-Linked Illicit Crypto Transactions

US sanctions Grinex crypto-exchange, successor to Garantex

Zero Trust + AI: Privacy in the Age of Agentic AI

WestJet Confirms Customer Data Breach Exposing Sensitive Personal Information

14/08

7 reasons the SOC is in crisis — and 5 steps to fix it

46% of Enterprise Passwords Can Be Cracked

A New Phishing Scam Targets FTX Creditors Ahead of the September 30 Payout

AI is changing Kubernetes faster than most teams can keep up

AI security governance converts disorder into deliberate innovation

Akira Ransomware Group Allegedly Breaches US Law Firm Rusin Law

Ataque hacker à Change Healthcare da UnitedHealth afetou 192,7 milhões de pessoas

Australian sustainable energy giant denies ransomware claims

Booking.com phishing campaign uses sneaky 'ん' character to trick you

Borghese Contemporary Hotel Allegedly Breached – 7,600 Guest Passports and IDs for Sale

Bouygues Allegedly Hit by Data Breach Affecting 6 Million Customers

Brute-force attacks hammer Fortinet devices worldwide

Campaigners Slam Expansion of Police Facial Recognition Schemes in UK

Canada’s House of Commons investigating data breach after cyberattack

Children's Health Ireland (CHI) being investigated over data breach at Tallaght University Hospital

CISA Adds Two N-able N-central Flaws to Known Exploited Vulnerabilities Catalog

CISA Warns of Active Exploits in N-able N-central, Urges Upgrade to 2025.3.1

CISA Warns of Actively Exploited N-able N-central Flaws

CISA warns of N-able N-central flaws exploited in zero-day attacks

Clinical Diagnostics paid ransom to solve recent data breach, sources claim

Corretora de Bitcoin sofre novo ataque hacker e volta a travar saques

Critical internet flaw discovered: hackers can crash websites with ease

Crypto24 ransomware hits large orgs with custom EDR evasion tool

Cyberattack cripples Pennsylvania Attorney General’s office systems

Data Breach at American Staffing Company Exposed Sensitive Information of Nearly 150,000 Individuals

Data leak at Mexican state power utility exposed national grid to potential cyber threats

Dubai Pharmacy College for Girls Allegedly Hit by Data Breach

Enterprising adversaries: Escalating cyber threats in the Indo-Pacific

EU Cyber-resilience Report flags gaps

FBI Shares Tips to Spot Fake Lawyer Schemes Targeting Crypto Scam Victims

FireWood Malware Targets Linux Systems for Command Execution and Data Theft

Fortinet Warns Exploit Code Available for Critical Vulnerability

From Banking Darling to $1B Fraud Magnet: Inside the Zelle Lawsuit 2025

Google Requires Crypto App Licenses in 15 Regions as FBI Warns of $9.9M Scam Losses

Hacked Law Enforcement and Government Email Accounts Sold on Dark Web for $40

Hackers Found Using CrossC2 to Expand Cobalt Strike Beacon's Reach to Linux and macOS

Hackers invadem sistemas de hotéis na Itália e roubam quase 100 mil documentos de turistas

HashFlare Ponzi Scheme: Founders Convicted in $577M Crypto Fraud

Home Office Phishing Scam Target UK Visa Sponsorship System

Hotels in Italy suffer a potentially massive breach

KernelSU v0.5.7 Flaw Lets Android Apps Gain Root Access

Leaked Meta document shows AI could flirt with kids, spread racist claims

LockBit 4.0 panel breach shows internal disorder

Major exchange flaw puts UK hybrid environments at risk

Malvertising Campaign Deploys Modular PowerShell Malware PS1Bot

Manpower data breach impacted 144,180 individuals

Microsoft fixes Windows 11 24H2 updates failing with 0x80240069 error

Microsoft fixes Windows Server bug causing cluster, VM issues

Microsoft patches more than 100 Windows security flaws - update your PC now

New Android Malware Wave Hits Banking via NFC Relay Fraud, Call Hijacking, and Root Exploits

New HTTP/2 'MadeYouReset' Vulnerability Enables Large-Scale DoS Attacks

Nike USA Allegedly Compromised – Initial Network Access Offered for $5,000

North Korea Attacks South Koreans With Ransomware

Norway confirms dam intrusion by Pro-Russian hackers

Norway spy chief blames Russian hackers for dam sabotage in April

Open-source flow monitoring with SENSOR: Benefits and trade-offs

Over $300 million in cybercrime crypto seized in anti-fraud effor

Pincong Website Allegedly Breached – User Data for Sale Online

Pro-Russian hackers blamed for water dam sabotage in Norway

Qilin Ransomware Allegedly Breaches The Paul Wilkinson Law Firm and Flavor & Fragrance Specialties

Radiant Capital Hacker Turns $53M Theft into $102M Crypto Fortune

Ransomware Group Interlock Claims Massive Data Theft from City of St. Paul

Simple Steps for Attack Surface Reduction

Sinobi Ransomware Group Allegedly Breaches ECM Consultants, TELACU College, One Way Solutions, J. Derenzo Co., and Comprehensive Pain Centers

Splunk Publishes Defender’s Guide to Spot ESXi Ransomware Early

Starto Entertainment fans targeted by social media phishing scam

Telegram banning rash of channels found extorting and doxxing users

The top CTEM platforms you should know in 2025

UK government is expanding Live Facial Recognition technology

U.S. CISA adds N-able N-Central flaws to its Known Exploited Vulnerabilities catalog

Zoom patches critical Windows flaw allowing privilege escalation

When Theft Replaces Encryption: Blue Report 2025 on Ransomware & Infostealers

13/08

10 most powerful cybersecurity companies today

24M websites vulnerable to complete takeover due to backend reliance on flawed HTTP/1.1

Adobe Patch Tuesday Fixes Over 60 Vulnerabilities Across 13 Products

Adobe rolls out urgent security updates for 13 products

AI SOC 101: Key Capabilities Security Leaders Need to Know

Allianz Life data leaked following recent breach - our tips on how to stay safe

AWS CISO explains how cloud-native security scales with your business

Charon Ransomware Hits Middle East Sectors Using APT-Level Evasion Tactics

Charon Ransomware targets Middle East with APT attack methods

Chrome Security Update Fixes High-Severity Flaws Allowing Arbitrary Code Execution

CISOs face a complex tangle of tools, threats, and AI uncertainty

CMMC Compliance: Far More Than Just an IT Issue

Critical FortiSIEM flaw under active exploitation, Fortinet warns

Critical FortiSIEM Vulnerability Allows Attackers to Execute Malicious Commands, PoC Found in the Wild

Croatian research institute confirms ransomware attack via ToolShell vulnerabilities

Cyber attack on U.S. drug rehab service exposes sensitive patient information

Data leak at Mexico’s power giant threatens to leave the entire country in the dark

Deepfake AI Trading Scams Target Global Investors

Docker could still be hosting a whole load of potentially malicious images - putting users at risk

Dozens of DockerHub Linux images still contain a critical XZ Utils backdoor

DPA fines McDonald’s Poland €4M due to data breach

Efimer Trojan Steals Crypto, Hacks WordPress Sites via Torrents and Phishing

Erlang/OTP SSH Vulnerability Sees Spike in Exploitation Attempts

Experts warn criminals are using backdoor malware to target governments

Fake Minecraft Installer Spreads NjRat Spyware to Steal Data

Fortinet Issues Emergency Patch for Actively Exploited Critical FortiSIEM Bug

Fortinet warns about FortiSIEM vulnerability with in-the-wild exploit code (CVE-2025-25256)

FortiWeb Authentication Bypass Vulnerability Allows Logins as Any Existing User

Global OT cyber risk could top $329 billion, new report warns

Hackers leak 2.8M sensitive records from Allianz Life in Salesforce data breach

How to build and grow a scalable vCISO practice as an MSP

Indian Online Pharmacy Zeelab Allegedly Breached – Data of 4 Million Users for Sale

Interlock Ransomware Gang Allegedly Breaches Box Elder County and Epperson Law Group

Israel Railways Allegedly Targeted by Threat Actor Selling High-Privilege System Access

Jogador é alvo de hacker do Steam, faz login em conta esquecida há 4.712 dias e se depara com um clássico da fantasia

Malicious npm Package Lures Job Seekers and Exfiltrates Sensitive Data

Marks & Spencer Restores Click-and-Collect Service Months After Data Breach

Microsoft asks users to ignore certificate enrollment errors

Microsoft August 2025 Patch Tuesday Fixes Kerberos Zero-Day Among 111 Total New Flaws

Microsoft fixes “BadSuccessor” Kerberos vulnerability (CVE-2025-53779)

Microsoft Fixes Over 100 CVEs on August Patch Tuesday

Microsoft removes PowerShell 2.0 from Windows 11, Windows Server

Microsoft Teams CVE-2025-53783 Vulnerability Could Allow Remote Code Execution

Microsoft Teams RCE Flaw Allows Hackers to Read, Modify, and Delete Messages

Microsoft's latest major patch fixes a serious zero-day flaw, and a host of other issues - so update now

Monero security in question as Qubic claims 51% hashrate control

New Brute-Force Campaign Hits Fortinet SSL VPN in Coordinated Attack

New downgrade attack can bypass FIDO auth in Microsoft Entra ID

New PS1Bot Malware Campaign Uses Malvertising to Deploy Multi-Stage In-Memory Attacks

New Zero-Click NTLM Credential Leak Exploit Bypasses Microsoft Patch for CVE-2025-24054

New York sues Zelle, says security lapses led to 'rampant' consumer fraud

Norway blames Russian hackers for dam cyberattack in Bremanger

Pacific HealthWorks ransomware attack, files leaked from 50 partner medical practices

Pennsylvania attorney general's email, site down after cyberattack

Personal information of Minister, Member of Parliament, and prisoners leaked in data breach at Clinical Diagnostics

Plataforma de memecoins em Bitcoin, Odin.fun perde US$ 7 milhões em ataque hacker

Qilin Ransomware Allegedly Breaches Venture Credit Union, Haeger & Schmidt Logistics, Assisted Living Pharmacy, SYNCADD, Northern Construction, and Belle Vernon Schools

Royal Enfield targeted in major ransomware attack, hackers claim full system compromise

Russian Southern Military District Allegedly Breached – Sensitive Data on Servicemen Leaked Online

SAP fixed 26 flaws in August 2025 Update, including 4 Critical

Spike in Fortinet VPN brute-force attacks raises zero-day concerns

St. Paul’s Mayor Confirms Interlock Data Leak

Staffing Company Manpower Discloses Large-Scale Data Breach

Staffing giant Manpower hit by major data breach - around 145,000 users affected, here's what we know

The security gadget I never leave home without (and it's not an AirTag)

The US Federal Court Filing System has been breached - and all the fingers are pointing to Russia

US Authorities Seize $1m from BlackSuit Ransomware Group

U.S. Justice Department seizes over $1 million in cryptocurrency from BlackSuit ransomware gang

Vazamento de dados Allianz expõe 2,8 milhões de clientes via Salesforce

Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE Flaws

WestJet Confirms Passenger Data Breach in June 2025 Cyberattack

Windows 11 24H2 updates failing again with 0x80240069 errors

12/08

5 key takeaways from Black Hat USA 2025

9 things CISOs need know about the dark web

1,500 Jenkins Servers Vulnerable to Command Injection via Git Parameter Plugin

29,000 Servers Remain Unpatched Against Microsoft Exchange Flaw

275M patient records breached—How to meet HIPAA password manager requirements

Android's pKVM hypervisor earns SESIP Level 5 security certification

APT groups are getting personal, and CISOs should be concerned

Australian regulator sues telecom giant Optus over massive 2022 data breach

BlackSuit ransomware takedown nabs 4 servers, 9 domains, and $1 million in crypto

BreachForums Seized and Turned into Honeypot by Law Enforcement

Click & collect available again at Marks & Spencer, months after cyber attack

Connex Credit Union Data Breach Affects 172,000 Members

Cost of public sector data breaches on the rise

Created a passkey? Hackers can bypass it using a simple downgrade attack

Cumbria Police pays £17k following 250+ data breaches

Curly COMrades cyberspies hit govt orgs with custom malware

Cyber attack Hits U.S. Judiciary, Compromises Sensitive Court Data

Cybercrime Groups ShinyHunters, Scattered Spider Join Forces in Extortion Attacks on Businesses

Cybercriminals Exploit Low-Cost Initial Access Broker Market

DarkBit Hackers Attacking VMware ESXi Servers to Deploy Ransomware and Encrypt VMDK Files

Data breach exposes over 485,000 cervical cancer screening participants after hack at external laboratory

Docker Hub still hosts dozens of Linux images with the XZ backdoor

Dutch NCSC Confirms Active Exploitation of Citrix NetScaler CVE-2025-6543 in Critical Sectors

EntraGoat: Vulnerable Microsoft Entra ID infrastructure to simulate identity security misconfigurations

FBI, Ghana Authorities Bust $100 Million Romance Scam in Major International Extradition

Financial Services Could Be Next in Line for ShinyHunters

Fortinet SSL VPNs Hit by Global Brute-Force Wave Before Attackers Shift to FortiManager

GDPR Password Management: Ensuring Compliance with Passwork

Hackers leak Allianz Life data stolen in Salesforce attacks

Hackers Raid Dutch Lab, Stealing Data on 500,000 Patients

Hackers roubam passaportes de hotéis e colocam à venda na Itália

Home Office Phishing Scam Targets UK Immigration Sponsors

Interlock claims cyberattack on St. Paul, employees forced to scrub data

Interlock Ransomware Group Allegedly Breaches City of St. Paul – Leaking 43 GB of Data

Interlock Ransomware Group Leaks 43GB of Data in City of St. Paul Cyberattack

Kimsuky APT Hackers Exposed in Alleged Breach Revealing Phishing Tools and Operational Data

Lee & Associates Allegedly Hit by Major Data Leak – Confidential Files Exposed

Manpower discloses data breach affecting nearly 145,000 people

Marks & Spencer’s online shop now fully operational after cyberattack

Microsoft August 2025 Patch Tuesday fixes one zero-day, 107 flaws

MITRE: Russian APT28's LameHug, a Pilot for Future AI Cyber-Attacks

MMA Transfers Allegedly Hit by D4rk4rmy Ransomware Attack – 74GB of Data Leaked

Motorcycle Giant Royal Enfield Allegedly Hit by Ransomware Attack

Netscaler vulnerability was exploited as zero-day for nearly two months (CVE-2025-6543)

New 'Curly COMrades' APT Using NGEN COM Hijacking in Georgia, Moldova Attacks

No primeiro semestre, Brasil foi alvo de 314 bilhões de tentativas de ciberataques

North Korean hacking group Kimsuky hit by data breach, internal tools and stolen data leaked

Over 3,000 NetScaler devices left unpatched against CitrixBleed 2 bug

Over 29,000 Unpatched Microsoft Exchange Servers Leaving Networks at Risk

Over 170,000 people impacted in Connex Credit Union data breach

Play Ransomware Group Allegedly Breaches Rite Track, Travancore Analytics, Bluewater Yacht Sales, and The Scharine Group

Polícia investiga invasão a sistema da Justiça do RS e vazamento de dados sigilosos de vítima de abuso sexual

Qilin Ransomware Group Allegedly Breaches Burmann and EMPUR Produktions GmbH

Ransomware Landscape July 2025: Qilin Stays on Top as New Threats Emerge

Researchers Detail Script-Masking Tactics That Bypass Defenses

Researchers Spot XZ Utils Backdoor in Dozens of Docker Hub Images, Fueling Supply Chain Risks

Rhysida Ransomware Allegedly Breaches US Printer Trans-Tex

Royal Enfield Allegedly Hit by Ransomware Attack – Data Encrypted and Backups Erased

Russian-Linked Curly COMrades Deploy MucorAgent Malware in Europe

Saint Paul cyberattack linked to Interlock ransomware gang

SAP Security Patch Day Fixes 15 Flaws, Including 3 Injection Vulnerabilities

Securing The Human Layer: Modernising Workforce Authentication

Sem inteligência (artificial) a cibersegurança brasileira está vulnerável

The Ultimate Battle: Enterprise Browsers vs. Secure Browser Extensions

Traffic to GenAI Websites Increases by 50%, and Cyberattacks Grow With It

Two Russian cybercrime groups exploit WinRAR zero-day for weeks

Urgent patch released for WinRAR zero-day under active exploit

US govt seizes $1 million in crypto from BlackSuit ransomware gang

Vistra Group Allegedly Breached – Sensitive Offshore Client Data Surfaces on Dark Web

What makes a security program mature and how to get there faster

Why DNS threats should be on every CISO’s radar in 2025

Windows 10 KB5063709 update fixes extended security updates enrollment

Windows 11 KB5063878 & KB5063875 cumulative updates released

WinRAR zero-day was exploited by two threat actors (CVE-2025-8088)

11/08

6 Lessons Learned: Focusing Security Where Business Value Lives

29K IPs still unpatched as CISA’s deadline nears: US and Germany most affected

172K Connex members affected by data breach

Australian and New Zealand (ANZ) firms face rising repeat ransomware attacks & executive threats

BadCam Attack Turns Trusted Linux Webcams into Stealthy USB Weapons

Banco BMP recupera metade dos R$ 541 milhões roubados em ciberataque

Boeing, US Navy supplier Jamco Aerospace claimed in ransomware attack

Breaches are up, budgets are too, so why isn’t healthcare safer?

Britain's M&S restores click and collect services 15 weeks after systems hacked

Carmaker Portal Flaw Could Let Hackers Unlock Cars, Steal Data

CastleLoader Malware Hits 400+ Devices via Cloudflare-Themed ClickFix Phishing Attack

'Chairmen' of $100 million scam operation extradited to US

Change Healthcare Data Breach Exposed Personal Information of Over 192 Million People

Chrome sandbox escape nets security researcher $250,000 reward

Connex Credit Union Breach Exposes 172,000 Members’ Data

Connex Credit Union data breach impacts 172,000 members

Coordinated Disruption Actions Against BlackSuit (Royal) Ransomware Operations

Credential theft has surged 160% in 2025

Crypto-stealing GreedyBear just became even greedier

CSO hiring on the rise: How to land a top security exec role

Data breach at Dutch medical laboratory much larger than expected

Department of Homeland Security (DHS), global partners dismantle BlackSuit ransomware network after 450 US victims; servers and assets seized

Details emerge on WinRAR zero-day attacks that infected PCs with malware

Dior data breach exposes personal details of nearly 1m HK customers: PCPD

Efimer Trojan targets users via phishing

Eight Countries Face EU Action Over NIS2 Deadline Failings

Embargo Ransomware Gang Amasses $34.2m in Attack Proceeds

From legacy to SaaS: Why complexity is the enemy of enterprise security

Ghanaian Nationals Extradited for Roles in $100M Romance and Wire Fraud Ring

Global Eyewear Giant Marcolin Allegedly Breached

Google clarifies data breach: business contacts of potential Ads customers affected

Google confirms Salesforce data breach targeting prospective ads customers

Hacker Exposes Flaw In Automaker's Portal That Could Let Thieves Unlock Cars Remotely

Hackers breach cancer screening data of almost 500,000 women

Hackers Leak 9GB of Data from Alleged North Korean Hacker’s Computer

How Brandolini's law informs our everyday infosec reality

How ShinyHunters Hacking Group Stole Customer Data from Salesforce

Howard Financial & Associates Allegedly Hit by INC Ransomware

Indonesian Logistics Giant JNE Allegedly Breached – 81 Million Records for Sale

Italian Tech Integrator Alascom Allegedly Hit by Rhysida Ransomware

Kaspersky uncovers Efimer trojan targeting organizations through phishing emails

Leaked credentials surge 160% as 2025 sees record-breaking data breach

Massive Columbia University data breach affects nearly 900,000 past and present students - here's what was leaked, and how to stay safe

MedusaLocker ransomware group is looking for pentesters

MuddyWater's DarkBit ransomware cracked for free data recovery

Netherlands: Citrix Netscaler flaw CVE-2025-6543 exploited to breach orgs

New TETRA Radio Encryption Flaws Expose Law Enforcement Communications

New WinRAR Zero-Day Exploited by RomCom Hackers

Over 29,000 Exchange servers unpatched against high-severity flaw

Patient PII and PHI Allegedly Leaked Following Ransomware Attack on California Surgeon Louis Tieu DDS MD

Pentesting is now central to CISO strategy

Researchers Spot Surge in Erlang/OTP SSH RCE Exploits, 70% Target OT Firewalls

Sensitive Data of Columbia University Students and Staff Compromised in Major Breach

Smart Buses flaws expose vehicles to tracking, control, and spying

St. Paul races to restore systems after ransomware attack forces massive data reset

The Rise of Native Phishing: Microsoft 365 Apps Abused in Attacks

The University of Western Australia cyber-attack: A wake-up call for university cyber-security

UK Red Teamers “Deeply Skeptical” of AI

WEYHRO Ransomware Group Allegedly Breaches Chemtron RiverBend and Community Services of Missouri

Win-DDoS: Attackers can turn public domain controllers into DDoS agents

WinRAR zero day exploited by RomCom hackers in targeted attacks

WinRAR Zero-Day Under Active Exploitation – Update to Latest Version Immediately

WinRAR Zero-Day Vulnerability Allegedly Exploited by Russian Hackers to Target Governments

10/08

AgentFlayer 0-click exploit abuses ChatGPT Connectors to Steal 3rd-party app data

APT Sidewinder Mimics Government and Military Agencies to Steal Login Credentials

Embargo ransomware group moved $34M in crypto since April: TRM Labs

Google Calendar invites let researchers hijack Gemini to leak user data

Google Confirms Data Breach – Notifying Users Affected By the Cyberattack

Kimsuky hackers target South Korean government and telecom firms in cyber attacks

Marks & Spencer restores click-and-collect service for the first time in months after crippling cyber attack

Massive leak of over 115 million US payment cards caused by Chinese "smishing" hackers - find out if you're affected

National Cyber Emergency Response Team (NCERT) issues advisory as ransomware attacks surge in Pakistan

New Win-DDoS Flaws Let Attackers Turn Public Domain Controllers into DDoS Botnet via RPC, LDAP

Researchers Detail Windows EPM Poisoning Exploit Chain Leading to Domain Privilege Escalation

Thousands to report in for password change after St. Paul ransomware attack

LAST WEEK - Última Semana

Daily News - Agosto (03/08 - 09/08) - 32 Semana de 2025