Daily News - Agosto (24/08 - 30/08) - 35 Semana de 2025

30/08

Attackers Abuse Velociraptor Forensic Tool to Deploy Visual Studio Code for C2 Tunneling

Fake on-chain sleuths prey on hack victims, an AI ‘journalist’ dupes the press, and other cybersecurity stories

Farmers Insurance data breach exposes 1.1M Americans

Gmail breach has millions wondering what went wrong

Google Warns 2.5B Gmail Users to Reset Passwords Following Salesforce Data Breach

Hackers Exploit CrushFTP Zero-Day to Take Over Servers

IOC Alert: apk.hook Botnet C2

Microsoft uncovers strategic cloud-based ransomware

Ransomware attack paralyzes Swedish municipalities

Still using old password? Google urges all Gmail users to change passwords after data breach

TamperedChef infostealer delivered through fraudulent PDF Editor

Top tips to prevent being hit by a devastating cyber-attack before the year-end

TransUnion data breach impacts 4.4M U.S. customers

U.S. Government Seizes Online Marketplaces Used to Sell Fraudulent Identity Documents to Cybercriminals

WhatsApp Issues Emergency Update for Zero-Click Exploit Targeting iOS and macOS Devices

29/08

4chan and Kiwi Farms sue British regulator Ofcom over age verification

69% of Consumers Believe AI Fraud Is the Biggest Identity Threat

433K US doctors’ data leaked online, hackers claim

Abandoned Sogou Zhuyin Update Server Hijacked, Weaponized in Taiwan Espionage Campaign

AI can’t deliver without trusted, well-governed information

AI isn’t taking over the world, but here’s what you should worry about

Amazon Disrupts APT29 Watering Hole Campaign Abusing Microsoft Device Code Authentication

Attackers use “Contact Us” forms and fake NDAs to phish industrial manufacturing firms

Can Your Security Stack See ChatGPT? Why Network Visibility Matters

Click Studios Patches Passwordstate Authentication Bypass Vulnerability in Emergency Access Page

Critical Android Zero-Day Exploit for Versions 11-15 Allegedly for Sale on Dark Web

Cybercrime increasingly moving beyond financial gains

Dark Web Profile: Lynx Ransomware

Data breach at DBS Contractor impacts some Guernsey residents

Dexter: Resurrection Finale Leaks Online in Russian Dub

Dutch intelligence warn that China-linked APT Salt Typhoon targeted local critical infrastructure

Dutch police and FBI take down website that was used for creating fake IDs

Email scam drains $2M from South Texas county's accounts

Experts warn of actively exploited FreePBX zero-day

Fake Facebook Ads Push Brokewell Spyware to Android Users

FBI and Dutch police dismantle VerifTools marketplace for fake IDs

Feds Seize $6.4M VerifTools Fake-ID Marketplace, but Operators Relaunch on New Domain

Finding connection and resilience as a CISO

Florida Considers Rule to Improve Healthcare Data Breach Transparency

Florida radiology practice reports data breach as attorneys eye lawsuit

FreePBX Servers Targeted by Zero-Day Flaw, Emergency Patch Now Available

FTC says Gmail’s spam filters may unfairly block Republican messages, warns Google of probe

German Prosecutors Charge Hacker in Rosneft Deutschland Cyberattack

Google: Salesloft Drift breach hits all integrations

Google warns Salesloft attack may have compromised Workspace accounts and Salesforce instances

Google Warns Salesloft OAuth Breach Extends Beyond Salesforce, Impacting All Integrations

Google warns that billions of Gmail accounts could be vulnerable after data breach

Hacker usa IA da Anthropic em ataques de larga escala

Hackers are distributing a fake PDF Editor loaded with TamperedChef credential stealing malware

International coalition calls out three Chinese companies over hacking campaign

Iranian Crypto Exchange Nobitex Allegedly Targeted by Zero-Day Exploit Sale

Kennedys exposes abuse victims' details in nightmare data breach

Legal Practice Board of Western Australia says no data published following May ransomware attack

Manesa, BDO Perú, CPK Interior Products, and Kafka Conveyors Allegedly Breached by INC Ransomware

Massive Data Breach at TransUnion Exposes Information of 4.4 Million People

MathWorks confirms ransomware breach exposing data of more than 10,000 people

Microsoft fixes bug behind Windows certificate enrollment errors

Microsoft to enforce MFA for Azure resource management in October

Nevada Closes State Offices After Cybersecurity Breach

New Android Malware ‘SikkahBot’ Targets Students in Bangladesh

New framework aims to outsmart malware evasion tricks

New 'TamperedChef' malware poses a sneaky threat

New Zealand Cruise Association Database Allegedly Breached – Member and Billing Info Exposed

North Korean Hackers Weaponize Seoul Intelligence Files to Target South Koreans

Not Larger Telecommunications, But Smaller Dutch ISPs Also Targeted in Broader Salt Typhoon Campaign

Npm Package Hijacked to Steal Data and Crypto via AI-Powered Malware

Operation Serengeti 2.0: Trend Micro Backs INTERPOL in Record Cybercrime Crackdown

Passwordstate users should patch this auth bypass vulnerability immediately, company says

Proton introduces Emergency Access, granting trusted contacts access to your account

Ransomware Attack Hits Nevada: DMV, Health Authority Among Agencies Affected

Ransomware payments are banned in the public sector: should businesses still pay?

Ransomware: The dark side of AI

Researchers Warn of Sitecore Exploit Chain Linking Cache Poisoning and Remote Code Execution

Rising Dark Web Threats Place US Companies in the Crosshairs Of Cybercriminal

SEBI Clarifies Scope of CSCRF, Recognizes RBI Oversight

Sinobi Ransomware Strikes via Breached SonicWall VPN Accounts

SK Telecom hit with $97 million fine over massive data leak

State-Sponsored Hackers Behind Majority of Vulnerability Exploits

TamperedChef Malware Disguised as Fake PDF Editors Steals Credentials and Cookies

Tea app says only 0.1% of users affected by breach – is it just the tip of the iceberg?

Tesla negou ter dados de acidente fatal, mas hacker conseguiu obter provas

This AI tool flags predatory journals: how researchers built a “firewall for science” to protect research integrity

Toyota India (Kirloskar Motor) May Be Hit by Black Nevas Ransomware Attack

TransUnion Data Breach: 4.4 Million US Consumers’ Data Stolen

TransUnion Data Breach Impacts 4.5 Million US Customers

TransUnion data breach may have affected 4.4 million users - here's what we know, and how to stay safe

US and Dutch Police dismantle VerifTools fake ID marketplace

WhatsApp patches vulnerability exploited in zero-day attacks

Winning the AI Arms Race in Financial Services Cybersecurity

28/08

200 Swedish municipalities impacted by a major cyberattack on IT provider

1.1M Impacted by Farmers Insurance Data Breach, Security Leaders Discuss

4M+ exposed in TransUnion third-party data breach

Adoption of AI-powered cybersecurity tools examined

Agentic AI coding assistant helped attacker breach, extort 17 distinct organizations

AI becoming more dangerous in the hands of cybercriminals, Anthropic warns

AI ransomware is here, but don’t panic, it’s not as bad as it sounds

Akira Ransomware Group Allegedly Breaches Baycoat, Ben’s Asphalt, and Echo

Anthropic Prevents Hacker Attempts to Exploit Claude AI for Cyber Attacks

Anubis Ransomware Allegedly Breaches Canadian Aerospace and Defense Contractor TRAF

APCS Warns Customers After Service Provider Network Breach

Ataque hacker em massa mira acesso remoto do Windows: entenda o risco

Breached Accounts in 2025: The U.S. Has Over 2M Breaches in the First Six Months

Can AI make threat intelligence easier? One platform thinks so

Cephalus Ransomware Allegedly Breaches Coco Yachts, Wilder Law Firm, Texas Pregnancy Care Network, and Colorado Health Network

Chinese State Hackers Target Global Critical Infrastructure, NSA Warns

Chinese Tech Firms Linked to Salt Typhoon Espionage Campaigns

Church of England data breach exposes identities of nearly 200 abuse survivors

Clinical Diagnostics to be hit by two class-action lawsuits over data breach

Crypto Companies Freeze $47m in Romance Baiting Funds

Cyber attack on UK-based firm impacts Channel Island residents

Cybercriminals preparing for scam bonanza ahead of FIFA World Cup 2026

Deluge of Blind Eagle intrusions hits Colombia

Discord hackers claim to have leaked billions of messages as millions of users targeted - here's what we know

Docker Desktop flaw let attackers to access Windows, Mac systems

Electronics Manufacturer Data I/O Suffers Ransomware Breach

Fake IT Support Attacks Hit Microsoft Teams

FBI alerta que hackers chineses invadiram mais de 200 empresas dos EUA

Florida Medical Imaging Provider Notifies 260,000 Patients About February Data Breach

Fraud, Romance Scams, and Laundered Millions: Fifth Conspirator Convicted

Google aims to reduce Android malware with new developer verification

Google Big Sleep AI Tool Finds Critical Chrome Vulnerability

Google comes for crypto incumbents with its own Layer 1 blockchain

Hacker Used Claude AI to Automate Reconnaissance, Harvest Credentials and Penetrate Networks

Hackers are using fake NDAs to hit US manufacturers in major new phishing scam

Healthcare Services Group Discloses 2024 Data Breach Impacting Over 600,000 People

How CISOs are balancing risk, pressure and board expectations

Hundreds of Swedish municipalities and regions are down because of a cyberattack

INC Ransom Allegedly Breaches US Industrial Machinery Firm CLIMAX and Canadian Nutrition Company ALLMAX

International cyber coalition releases advisory on Chinese APT threats, Salt Typhoon tops list

IT supplier hack prompts sweeping Swedish municipality disruptions

Major healthcare service breach exposes data on over 600,000 people - names, SSNs, and more stolen, here's what we know

Malicious Nx Packages in 's1ngularity' Attack Leaked 2,349 GitHub, Cloud, and AI Credentials

Malicious VS Code Extensions Exploit Name Reuse Loophole

Malware devs abuse Anthropic’s Claude AI to build ransomware

Maritime cybersecurity is the iceberg no one sees coming

MATLAB dev says ransomware gang stole data of 10,000 people

Microsoft flags dangerous cybercriminals ransacking organizations - and then letting you know about it via Teams

Mount Sinai to pay $5.2 million in class action settlement over patient data sharing

Netherlands Confirms China's Salt Typhoon Targeted Small Dutch Telcos

Nevada Confirms Ransomware Attack, State Data Stolen

New CISA tool seeks to bolster software acquisition security

NPM packages from Nx targeted in latest worrying software supply chain attack

NSA, NCSC, and allies detailed TTPs associated with Chinese APT actors targeting critical infrastructure Orgs

PassportScan Allegedly Breached -178,000 Scanned IDs for Sale on Dark Web

Passwordstate dev urges users to patch auth bypass vulnerability

Philippine Civil Service Commission (CSC) Data Allegedly Leaked – Affecting Over 76,000 Government Employees

Police seize VerifTools fake ID marketplace servers, domains

Qatari E-commerce Platform Albazaar Shop Suffers Alleged Data Breach

Qilin admits Singer Associates compromise

Qilin Ransomware Group Allegedly Breaches US Contractor Weathercraft Companies

Ransomware Actor Deletes Data and Backups Post-Exfiltration on Azure

Researchers Find VS Code Flaw Allowing Attackers to Republish Deleted Extensions Under Same Names

Researchers reveal passkeys may not be as safe as we think they are - here's how to stay safe

Salt Typhoon Exploits Cisco, Ivanti, Palo Alto Flaws to Breach 600 Organizations Worldwide

ScamAgent shows how AI could power the next wave of scam calls

Shadow IT Is Expanding Your Attack Surface. Here’s Proof

The CISO succession crisis: why companies have no plan and how to change that

The Role of Enterprise Email Security in Modern Cybersecurity Strategies

Thousands of Developer Credentials Stolen in macOS “s1ngularity” Attack

Three ways to combat today’s AI-based social engineering attacks

TransUnion discloses a data breach impacting over 4.4 million customers

TransUnion suffers data breach impacting over 4.4 million people

UK and US Blame Three Chinese Tech Firms for Global Cyberattacks

UNC6395 targets Salesloft in Drift OAuth token theft campaign

US expands North Korean IT worker scheme clampdown with more sanctions

US, Japan, South Korea Meet Private Partners to Combat North Korea’s IT Work Fraud Scheme

U.S. Treasury Sanctions DPRK IT-Worker Scheme, Exposing $600K Crypto Transfers and $1M+ Profits

Users unaware their passkeys are hijacked, DEF CON 2025 shows

What small businesses must do now to stay ahead of phishing

Where security, DevOps, and data science finally meet on AI strategy

27/08

5 ways to improve cybersecurity function while spending less

300k+ Plex Media Server instances still vulnerable to attack via CVE-2025-34158

AI is becoming a core tool in cybercrime, Anthropic warns

AI Security Map: Linking AI vulnerabilities to real-world impact

Anthropic Disrupts AI-Powered Cyberattacks Automating Theft and Extortion Across Critical Sectors

Anthropic Report Reveals How its AI is Weaponized for ‘Vibe-Hacking’ and No-Code Ransomware

Argentinian Tech Company Grupo Hasar Suffers Alleged Data Breach

Auchan suffers second major data breach in less than nine months, exposing customer information

Aussie telco Exetel fined $694K for anti-scam breaches

Blind Eagle's Five Clusters Target Colombia Using RATs, Phishing Lures, and Dynamic DNS Infra

China-based Threat Actor Mustang Panda’s Tactics, Techniques, and Procedures Unveiled

China linked Silk Typhoon targeted diplomats by hijacking web traffic

Church of England looking into alleged abuse survivor data breach

CISA Strengthens Software Procurement Security With New Tool

Citrix Patches Three NetScaler Zero Days as One Sees Active Exploitation

Critical Chrome Use After Free Vulnerability Let Attackers Execute Arbitrary Code

Critical security flaw in Chrome discovered by Google's own AI

CyberArk and Optiv deepen partnership

Database of 433,000 US Medical Practitioners Allegedly Leaked and Sold Online

Database of Nepal’s Golden Hospital Allegedly for Sale on the Dark Web

Dire Wolf claims ransomware attack on WineWorks Australia

Docker Desktop Vulnerability Allowed Host Takeover on Windows, macOS

DOGE whistleblower: entire Social Security database uploaded to open cloud, security experts speak out

Egyptian Security Firm Team 4 Security Faces Extortion Threat After Alleged Breach

ENISA to Coordinate €36m EU-Wide Incident Response Scheme

ESET warns of PromptLock, the first AI-driven ransomware

FBI ‘Billion Dollar’ Hacker Warning—Do Not Install This App

Fortinet Uncovers Phishing Campaign Targeting Companies via UpCrypter

Global Salt Typhoon hacking campaigns linked to Chinese tech firms

Google Reveals UNC6395’s OAuth Token Theft in Salesforce Breach

Hacker nega que ameaçou Felca, mas admite que invadia sistemas do governo para vender dados; veja depoimento

Hacker preso por ameaçar youtuber admite invasão de sistemas do governo e venda de dados por R$ 500 mil

Hackers exploit Salesloft integration to steal Salesforce data in targeted credential theft campaign

Hanson Chambers and Sterlings Accountancy Solutions Allegedly Targeted by Lynx Ransomware

Healthcare Services Group data breach impacts 624,000 people

Healthcare Services Group discloses 2024 data breach that impacted 624,496 people

Hottest cybersecurity open-source tools of the month: August 2025

How compliance teams can turn AI risk into opportunity

Hundreds of Salesforce customer orgs hit in clever attack with potentially huge blast radius

INC Ransomware Allegedly Breaches Marlborough Partners, Leaks 2TB of Confidential Data

IT system supplier cyberattack impacts 200 municipalities in Sweden

Massive attack hits Salesforce users: hackers exfiltrating data with stolen third-party app credentials

Medusa Ransomware Allegedly Breaches Leading Georgian Insurer Aldagi – Exposing 300GB of Data

Nevada “Network Security Incident” Shuts Down State Offices and Services

New Cephalus Ransomware Leverages Remote Desktop Protocol to Gain Initial Access

New Data Theft Campaign Targets Salesforce via Salesloft App

New Hook Android Banking Malware With New Advanced Capabilities and Supports 107 Remote Commands

New Phishing Campaign Abuses ConnectWise ScreenConnect to Take Over Devices

Only 49% of companies to increase cyber budget after a breach

Opportunistic Iranian cyber-attacks targeting Australia possible, Google warns

Over 28,000 Citrix devices vulnerable to new exploited RCE flaw

Patch now! Citrix addresses latest NetScaler zero-day, exploitation underway

Police bust ATM explosion gang across Europ

PR behemoth Singer Associates claimed by ransomware gang

Researchers Discover First Reported AI-Powered Ransomware

Salesloft OAuth Breach via Drift AI Chat Agent Exposes Salesforce Customer Data

Salesloft Drift Hacked to Steal OAuth Tokens and Exfiltrate from Salesforce Corporate Instances

Sarcoma Ransomware Group Allegedly Breaches Italian Industrial Supplier Inox Laghi

Securden Unified PAM Vulnerability Let Attackers Bypass Authentication

Serbian Gift Card Platform Giftoncard.eu Allegedly Suffers Massive Data Breach – 7.6 Million Records Leaked

ShadowSilk Campaign Targets Central Asian Governments

ShadowSilk Hits 35 Organizations in Central Asia and APAC Using Telegram Bots

ShinyHunters and Scattered Spider Linked to Farmers Insurance Data Breach

Social media apps that aggressively harvest user data

Someone Created First AI-Powered Ransomware Using OpenAI's gpt-oss:20b Model

South Australian law firm listed on Lynx ransomware’s leak site

Storm-0501 Exploits Entra ID to Exfiltrate and Delete Azure Data in Hybrid Cloud Attacks

Tencent sites leak sensitive credentials, expose backend to hackers

The 5 Golden Rules of Safe AI Adoption

The Computer Merchant Reports Data Breach Affecting Over 30,000 Individuals

U.S. CISA adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog

US Metrology Supplier Willrich Precision Allegedly Breached

What CISOs can learn from Doppel's new AI-driven social engineering simulation

Why Addressing Legacy IT is an Urgent Strategic Priority for CISOs

Why zero trust is never 'done' and is an ever-evolving process

World Leaks Ransomware Allegedly Breaches Motor Controls Inc, Springs Christian Academy, Sika Footwear, and SNEG Propreté

26/08

77 Malicious Android Apps With 19M Downloads Targeted 831 Banks Worldwide

AccuKnox Awarded Patent for Runtime Security of Kernel Events

Aembit Extends Secretless CI/CD with Credential Lifecycle Management for GitLab

AI Audio Platform CrumplePop Allegedly Breached, 23.5K User Records Leaked

AI-Driven Trends in Endpoint Security: What the 2025 Gartner® Magic Quadrant™ Reveals

Alcàsser City Council’s Employment Portal Allegedly Breached, Citizen Data for Sale

Auchan discloses data breach: data of hundreds of thousands of customers exposed

Behind the Coinbase breach: Bribery emerges as enterprise threat

BQTLOCK Ransomware Detection: New RaaS Operators Employ Advanced Detection Evasion Techniques

ChatGPT leak reveals people will share everything with AI

CIISec: Most Security Professionals Want Stricter Regulations

CISA Adds Three Exploited Vulnerabilities to KEV Catalog Affecting Citrix and Git

CISA warns of actively exploited Git code execution flaw

Citrix Patches Three NetScaler Flaws, Confirms Active Exploitation of CVE-2025-7775

Cortland Police Warns of Phantom Hacker Scam Targeting Senior Citizens and Their Life Savings

Credential Heist – Cybercriminals Exploit ScreenConnect Cloud Admins in New Attack

Crypto hackers keep trading with stolen funds

Department of Government Efficiency (DOGE) uploaded live copy of Social Security database to ‘vulnerable’ cloud server, says whistleblower

Dire Wolf Ransomware Allegedly Hits Wine Works Australia, Dynacast, Bolt Nut Manufacturing, Aroeira Salles Advogados, and Taiwan Toyo International Instrument Co.

Discord message-scraping service claims access to 1.8 billion messages

DoorDash mistakenly pays hacker after account breach; repays East Bay restaurant

Fallout from MATLAB maker data breach: 10K+ users exposed

Farmers Insurance breach impacts over 1 million customers

Financial sector faces surge in cyber threats

Ghana’s “Sakawa Boys” scam British women in online romance fraud as digital retribution for colonialism

Git vulnerability leading to RCE is being exploited by attackers (CVE-2025-48384)

Google to Verify All Android Developers in 4 Countries to Block Malicious Apps

Hacker claims theft of 300 GB of passenger data from Uzbekistan Airways

Hacker preso em ação milionária: Operação Aquila mira esquema de fraude digital

Hacker preso por ameaçar Felca aprendeu a invadir sistemas pelo YouTube, diz delegado

Hackers breach CPAP medical supplies, exposing data of 90,000 customers

Healthcare Services Group Data Breach Impacts 624,000

HOOK Android Trojan Adds Ransomware Overlays, Expands to 107 Remote Commands

How to build a secure AI culture without shutting people down

Human risk and Gen AI-driven data loss top CISO concerns

Karachi American School Teacher’s Portal Credentials Leaked Online

Law firm employees charged with inducing false voice phishing reports in Korea

Legacy Treatment Services Data Breach Affects 42,000 Individuals

LLMs at the edge: Rethinking how IoT devices talk and act

Massive Docker Desktop flaw grants hackers full Windows control

MixShell Malware Delivered via Contact Forms Targets U.S. Supply Chain Manufacturers

NetScaler ADC/Gateway zero-day exploited by attackers (CVE-2025-7775)

Nevada closes state offices as cyberattack disrupts IT systems

Nevada state offices close after wide-ranging 'network security incident'

New Android Hook Malware Variant Locks Devices With Ransomware

New Android Trojan Variant Expands with Ransomware Tactics

New Jersey Software Firm Gosive Suffers Alleged Data Breach

New Sni5Gect Attack Crashes Phones and Downgrades 5G to 4G without Rogue Base Station

New type of attack tricks AI summaries into pushing malware onto victims

Nissan confirms design studio data breach claimed by Qilin ransomware

No Miracle! The Pontifical Salesian University falls victim to ransomware

Nokia and Atos Targeted as Threat Actor Allegedly Sells Network Access

Phishing Campaign Uses UpCrypter to Deploy Remote Access Tools

Pro-Ukrainian hackers take over Russian TV on UA Independence Day

Protecting farms from hackers: A Q&A with John Deere’s Deputy CISO

Report Reveals Gap Between AI Use and AI Security In Embedded Software

SafePay Ransomware Allegedly Breaches Schliessmeyer, Riverton Cabinets, Optivosa, Faltner, Phillips 66 Lubricants, Ferienwohnungen.de, Parkside Group, and Johann-Peter-Hebel Realschule

Shadow AI is surging — getting AI adoption right is your best defense

ShadowCaptcha Exploits WordPress Sites to Spread Ransomware, Info Stealers, and Crypto Miners

Study Reveals TikTok, Alibaba, Temu Collect Extensive User Data in America

Tech Manufacturer Data I/O Hit by Ransomware

The energy sector has no time to wait for the next cyberattack

The one-click Linux app I use for instant online anonymity

Thought vibe coding was safe? It’s already being exploited by hackers

Threat Actor Allegedly Sells High-Level Access to Lebanese Government Website

Togolese Republic Government Admin Access Allegedly for Sale on Dark Web

Trusted Google resource targeted in ongoing global phishing campaign

Turkish Public Bus Company’s Information System Allegedly Breached – Web Shell Access for Sale

UK Pet Supply Retailer Ferplast Allegedly Breached – Customer Data Leaked

U.S. CISA adds Citrix Session Recording, and Git flaws to its Known Exploited Vulnerabilities catalog

US: Maryland Confirms Cyber Incident Affecting State Transport Systems

US Payment Processor Banc Certified Merchant Services (BCMS) Allegedly Breached, Database Leaked Online

Warlock Ransomware Group Allegedly Targets Airfast Indonesia, Threatens Data Leak

25/08

0-Click Zendesk Account Takeover Vulnerability Enables Access to all Zendesk Tickets

5 Common Back-to-School Online Scams Powered Using AI and How to Avoid Them

6 gerenciadores de senhas famosos são vulneráveis a ataque hacker; Saiba como se proteger

20 Year Old Hacker Gets 10 Years in Prison & $13M Fine

83% of CISOs say staff shortage is major issue for defense

91% of Teens Use Generative AI

1,369 indigenous firms face NDPC probe over data breach

Agentic AI Browsers Exploited by “PromptFix” Trick Technique

Akira Ransomware Group Allegedly Breaches Canadian Distributor Colabor

Android.Backdoor.916.origin malware targets Russian business executives

Android malware disguised as an antivirus targets Russia

Apple sues former employee for stealing company secrets

Aspire Rural Health System Data Breach Impacts Nearly 140,000

At least $3M lost in crypto phishing attacks over the weekend

Auchan retailer data breach impacts hundreds of thousands of customers

Beware of Website Mimicking Google Play Store Pages to Deliver Android Malware

Brasil é alvo de 314 bilhões de ataques hacker só neste ano

Buffalo Police Detective Indicted for Attempted Purchases on Genesis Market

Chinese Developer Jailed for Deploying Malicious Code at US Company

Chinese Hacker Sentenced for Kill Switch Attack on Ohio Firm’s Global Network

Chip Programming Firm Data I/O Hit by Ransomware

CISA Seeks Biden Era's SBOM Minimum Requirements Guideline Change

Colt Acknowledges Cyber Attack Leading to Customer Data Exposure

Credential harvesting campaign targets ScreenConnect cloud administrators

Critical Docker Desktop flaw lets attackers hijack Windows hosts

Crypto wallet labeled ‘Coinbase hacker’ buys $8M of Solana

Cybercriminals Exploit Cheap VPS to Launch SaaS Hijacking Attacks

Cybercriminals Exploit SendGrid to Steal User Credentials in Latest Campaign

Cybersecurity firm Netskope reveals 31% revenue surge in US IPO filing

Data Breach Turns Dating App Into Nightmare For 33,000 Women, Locations Exposed On Google Maps

DaVita Data Breach Exposes Sensitive Information of Over 2.6 Million Patients

Docker Fixes CVE-2025-9074, Critical Container Escape Vulnerability With CVSS Score 9.3

Electricity Authority of Cyprus (EAC) warns consumers over phishing emails about unpaid bills

Electronics manufacturer Data I/O took offline operational systems following a ransomware attack

ESXi Root and Domain Admin Access to Vietnamese Private Company Allegedly for Sale

Fake macOS Help Sites Seek to Spread Infostealer in Targeted Campaign

Fake Voicemail Emails Install UpCrypter Malware on Windows

Farmers Insurance data breach impacts 1.1M people after Salesforce attack

Finnish Technology Giant Exel Composites Allegedly Breached by World Leaks Ransomware Group

Fired software developer gets 4 years in prison for sabotaging company’s systems

FTC warns US tech companies: “Be aware of weakening data security by foreign powers”

Georgia-Based Cleaning Service Spiffy Bin Allegedly Breached, Customer Data Leaked

Germany is prime target for dark web and ransomware attacks

Global Dialysis Provider Loses Millions of Details in Ransomware Hit

Global phishing campaign lures victims to release UpCryptor malware

Gmail Hidden Prompts Suggest Attackers Attempt AI Prompt Injection in Email Phishing Campaign

Hacker afirma ter derrubado todos os sistemas do Ministério Público da Paraíba em retaliação ao caso Hytalo Santos

Hacker Behind Playboi Carti & Ariana Grande Music Leaks Sentenced to Prison

Hackers are looking to steal Microsoft logins using some devious new tricks - here's how to stay safe

Hackers Leverage Google Classroom for 115,000+ Phishing Emails Targeting 13,500+ Organizations

Hackers Leverage SendGrid in Recent Attack to Harvest Login Credentials

How AI is reshaping cybersecurity operations

Indo-U.S. Agencies Dismantle Cybercrime Network Targeting U.S. Nationals

Interpol cybercrime crackdown in Africa leads to 1,200 arrests, $97 million seized

Iran’s IRGC Surveillance Database Allegedly Leaked – Exposing Monitoring of Activists

July 2025 Healthcare Data Breach Report

Kopia: Open-source encrypted backup tool for Windows, macOS, Linux

Malicious Android apps with 19M installs removed from Google Play

Malicious apps with +19M installs removed from Google Play because spreading Anatsa banking trojan and other malware

Massive Cyberattack Hits Italian Hotels: Tens of Thousands of Passports Stolen and Sold on the Dark Web

Millions of gaming accounts exposed in 2024 data leaks

Multiple vtenext Vulnerabilities Let Attackers Bypass Authentication and Execute Remote Codes

NASCAR announces data breach after cyberattack exposes sensitive information

National Public Data Relaunches Despite 2.9 Billion SSNs Breach

New Stealthy Malware Exploiting Cisco, TP-Link and Other Routers to Gain Remote Control

Nissan’s Creative Box design studio targeted in alleged 4TB data breach by Qilin ransomware gang

Nova técnica hacker rouba senha da Microsoft através de publicidade falsa

Novel BQTLOCK RaaS operation examined

Off-the-shelf tools make life easier for phishing attackers

Pakistan-linked APT36 abuses Linux .desktop files to drop custom malware in new campaign

Pakistani E-Commerce Site Clicknget[.]pk Allegedly Breached – Over 36,000 Customer Records Leaked

PayPal Data Breach Exposes Information of Over 16 Million Users

Phishing Campaign Uses UpCrypter in Fake Voicemail Emails to Deliver RAT Payloads

Phishing in the Classroom: 115,000 Emails Exploit Google Classroom to Target 13,500 Organizations

Phishing Links and Fake Officers: Army Jawans Lose Money in ‘Ayushman Bharat’ Scam- Cyber Threats Intensify

Qilin Claims ‘Moniz Silva International’ Data Breach, Accuses Company of Disregarding Customer Health

Ransomware Attack Hits Drug Research Firm Inotiv, Disrupts Operations, and Leaks Data

Ransomware attack on DaVita exposes data from 2.7M

Ransomware Hack Hits Orange Telecom, Data Published on Dark Web

Report Surfaces Increased Number of API Security Issues Involving AI

Rowhammer attack can backdoor AI models with one devastating bit flip

ScreenConnect admins targeted with spoofed login alerts

Smart manufacturing demands workers with AI and cybersecurity skills

South Korea arrests suspected Chinese hacker accused of targeting BTS singer and other celebrities

Supermarket chain Auchan hit with cyberattack, again

The Quantum Countdown: Preparing Today for Tomorrow’s Encryption Crisis

Threat Actor Allegedly Sells Full Access to Major EU/US Online Training Platform

Threat Actors Weaponizes AI Generated Summaries With Malicious Payload to Execute Ransomware

Transparent Tribe Targets Indian Govt With Weaponized Desktop Shortcuts via Phishing

UK Cyber Pros say Boards must take responsibility for breaches

UNC6384 Deploys PlugX via Captive Portal Hijacks and Valid Certificates Targeting Diplomats

Uruguay’s Office of Planning and Budget and CERTuy Targeted in Alleged 170GB Data Leak

Why a new AI tool could change how we test insider threat defenses

Why satellite cybersecurity threats matter to everyone

Why SIEM Rules Fail and How to Fix Them: Insights from 160 Million Attack Simulations

Wyong Rugby League Club listed by Qilin ransomware gang

You should update your iPhone, iPad, and Mac ASAP to fix this dangerous security flaw

24/08

1,100,000 Americans Hit by Massive Data Breach As Email Addresses, Names, Dates of Birth and More Exposed

Crypto Investor Hit by $1.54M Loss in Phishing Scam Using EIP-7702

FBI warns seniors about billion-dollar scam draining retirement funds, expert says AI driving it

Fired software developer gets 4 years in prison for sabotaging company’s systems

Gmail users face sophisticated attacks, with rise in voice phishing

Google Confirms 2.5B Gmail Users Caught in Massive Data Breach

Hack of Michigan health system exposes patients’ lab results

IoT under siege: The return of the Mirai-based Gayfemboy Botnet

Israeli Intelligence Data Seized by Hacker Group “Promised Revenge”

Malicious Go Module Poses as SSH Brute-Force Tool, Steals Credentials via Telegram Bot

New Android malware poses as antivirus from Russian intelligence agency

New Gmail Phishing Attack Uses AI Prompt Injection to Evade Detection

Ransomware Attack Hits Dialysis Firm DaVita, 2.7 Million Patients’ Data Potentially Exposed

U.S. Rep Proposes Cyber Privateers to Fight Foreign Cyberthreats

Your kidneys for sale on the dark web! The DaVita ransomware attack affects 2.4 million patients

LAST WEEK - SEMANA PASSADA

Daily News - Agosto (17/08 - 23/08) - 34 Semana de 2025