Daily News - Julho (13/07 - 19/07) - 29 Semana de 2025

19/07

Afghan data breach: Why UK politicians sought to keep it a secret

Chinese hacker groups target Taiwan’s chip industry

For privacy and security, think twice before granting AI access to your personal data

Genea Fertility cyber attack: Inquiry into IVF hack confirms details were published on to dark web

Government will 'robustly defend' any compensation claims from thousands of Afghans whose lives were put at risk by massive data breach

Louis Vuitton data breach affects nearly 420,000 Hong Kong customers

Ministry of Defence (MoD) to ‘robustly defend’ compensation claims from Afghans in data breach case

Nova Scotia Power to Have Power Meters Read Manually as It Continues to deal with the Aftermath of a Cyber Attack on its Systems

Otjiwarongo municipality hit by suspected ransomware attack

Over 1,000 arrested as Cambodia “cracks down on online scams”

Popular npm linter packages hijacked via phishing to drop malware

Questions raised over Ministry of Defence (MoD) amid data breaches

Singapore battles massive cyberattack

Solix Data Breach Exposes Medical Info & Social Security Numbers

Taliban 'on killing spree of Afghan interpreters' after Government data breach put thousands at risk of reprisals

Thousands of Afghans denied compensation after UK data breach

18/07

0-Day Exploit for Russian Gas Station Automation Systems Allegedly for Sale Online

5 Features Every AI-Powered SOC Platform Needs in 2025

5M Public, Unsecured Wi-Fi Networks Found Exposed

8 trends transforming the MDR market today

24GB of Internal Data from UK Energy Firm Baxter Kelly Allegedly for Sale

A surveillance vendor was caught exploiting a new SS7 attack to track people’s phone locations

Afghan data breach prompts secret UK relocation

AI adoption is booming but secure scaling not so much

AI-Generated Lcryx Ransomware Discovered in Cryptomining Botnet

AI, Teens, and Trust: Roblox's New Safety Tools Raise Old Questions

Akira Ransomware Group Continues Attack Spree – Allegedly Compromising 12 Companies in 72 Hours

Anne Arundel Dermatology data breach impacts 1.9 million people

Australia political parties hit with ransomware attack

British spies, Special Forces named in Afghan data breach

Broadcom patches critical VMware flaws exploited at Pwn2Own Berlin 2025

Buy Now, Pay Later… with your data

Cambodia Cracks Down on Cybercrime: 1,000+ Arrests Across Five Provinces

CERT-UA Discovers LAMEHUG Malware Linked to APT28, Using LLM for Phishing Campaign

China's Massistant Tool Secretly Extracts SMS, GPS Data, and Images From Confiscated Phones

Chinese hackers infect 10M Androids with BADBOX 2.0, now Google is suing them

CISA Issues Advisories on Critical ICS Vulnerabilities Across Multiple Sectors

Co-op CEO acknowledges personal data has been stolen from all 6.5M Co-op Group members

Compumedics confirms major data breach affecting U.S. division

Critical NVIDIA Container Toolkit Flaw Allows Privilege Escalation on AI Cloud Services

Cyberattacks on Luxembourg firms up sharply from last year

Data breach at Air Serbia delays payslips, disrupts HR services

Data Breach Exposes 100 British MI6 and SAS Officials and Thousands of Afghan Collaborators

DeepSeek is risky, but employees are still using it at work

Europe Uncovers Names of Russian Hacker Group Members Funded by the Kremlin

FBI Tracks 1,610 BTC to Armenian Hacker in Explosive Ransomware Case

From Backup to Cyber Resilience: Why IT Leaders Must Rethink Backup in the Age of Ransomware

Google Sues 25 Chinese Entities Over BADBOX 2.0 Botnet Affecting 10M Android Devices

Hackers scanning for TeleMessage Signal clone flaw exposing passwords

How to Address Growing Security Risks in Cyber-Physical Systems

Indonesian Paint Giant Indaco Allegedly Hit by Data Breach

Is your Ring camera showing strange logins? Here's what's going on

It’s Official: Thailand’s Labour Ministry Breached, Backups Erased, Network in Ruins

Ivanti Zero-Days Exploited to Drop MDifyLoader and Launch In-Memory Cobalt Strike Attacks

Japanese police release decryptor for Phobos ransomware after February takedown

LameHug: first AI-Powered malware linked to Russia’s APT28

Making security and development co-owners of DevSecOps

Microsoft Reveals Scattered Spider TTPs Used in Recent Attack Campaigns

My focus was on saving lives after Afghan data breach, Shapps says

Naper Grove Vision Care Breach Affects Patient Info

Nearly 750K exposed after hacker attack on drug tester

New Cisco Bugs Rated CVSS 10.0, Patch Immediately

New “LameHug” Malware Deploys AI-Generated Commands

New Phobos and 8base ransomware decryptor recover files for free

'No evidence' data was stolen in Glasgow City Council cyber attack

One year later, little details or accountability shown by Columbus officials after ransomware attack

Personal crypto wallet and physical attacks on the rise as market rallies

Qantas Data Breach Class Action Launched: Nearly 6 Million Could Benefit From It - Here's What We Know

Retail Becomes New Target as Healthcare Ransomware Attacks Slow

Russia Linked to New Malware Targeting Email Accounts for Espionage

Russian alcohol retailer WineLab closes stores after ransomware attack

Scanception Exposed: New QR Code Attack Campaign Exploits Unmonitored Mobile Access

Top 10 Threat Intelligence Platforms in ANZ: 2025 Guide for Security Teams

UNG0002 Group Hits China, Hong Kong, Pakistan Using LNK Files and RATs in Twin Campaigns

Why 100% of CEH Professionals Would Recommend the Certification to Their Peers: Insights from the CEH HOF 2025 Industry Report

Why we must go beyond tooling and CVEs to illuminate security blind spots

17/07

7 useful things the Flipper Zero can do that still blows my mind - two years later

64% of Leaders are Highly Concerned About Data Sovereignty Amid Tariff Uncertainty

100,000 Americans' info exposed in a data breach: What to do if you're affected?

AI Cloaking Tools Enable Harder-to-Detect Cyber-Attacks

Air Serbia Confirms Data Breach in Latest Aviation Sector Cyberattack

All Co-op Members Hit in April Cyberattack, CEO Breaks Silence

Belk Suffers Major Data Breach; Law Firm Investigates Class Action

China-linked hackers ramp up attacks on Taiwan’s chip industry, researchers report

Chinese hackers breached National Guard to steal network configurations

Chinese Hackers Target Taiwan's Semiconductor Sector with Cobalt Strike, Custom Backdoors

Cisco patches critical CVE-2025-20337 bug in Identity Services Engine with CVSS 10 Severity

Cloaking-as-a-service set to reshape the phishing landscape

Cisco Warns of Critical ISE Flaw Allowing Unauthenticated Attackers to Execute Root Code

Cloudflare Confirms Recent 1.1.1.1 DNS Outage Caused by BGP Attack or Hijack

Co-op boss admits data breach affected all 6.5 million members

Critical Cisco ISE Vulnerability Allows Remote Attacker to Execute Commands as Root User

CTEM vs ASM vs Vulnerability Management: What Security Leaders Need to Know in 2025

CyberMaxx Q2 2025 Ransomware Research Report shows a 40% drop in attack volume from the previous quarter

Data Breach: The secret scramble to bring Afghans to Britain

Data Breach and Ransom Demand Reported at Namibian Municipality

Debt collection firm leaks personal data of over 160,000 in cyber security failure

Department of Justice (DOJ) Presses $15M Extortion Charges Against Alleged Ryuk Ransomware Gang Member

Devman Claims Cyberattack on Thailand Ministry of Labour, Demands $15M Ransom

DEVMAN Ransomware Group Allegedly Breaches Thai Ministry of Labour

Europol Disrupts NoName057(16) Hacktivist Group Linked to DDoS Attacks Against Ukraine

Ex-Army Soldier Cameron John Wagenius Pleads Guilty to $1M Cyber Extortion Scheme

Fighting AI with AI, finance firms prevented $5 million in fraud - but at what cost?

GitHub Abused to Spread Amadey, Lumma and Redline InfoStealers in Ukraine

Google Gemini can be used as a phishing mule

Google sues to disrupt BadBox 2.0 botnet infecting 10 million devices

Hacker steals $27 million in BigONE exchange crypto breach

Hackers Exploit Apache HTTP Server Flaw to Deploy Linuxsys Cryptocurrency Miner

Hackers Use GitHub Repositories to Host Amadey Malware and Data Stealers, Bypassing Filters

Hacktivism Increasingly Targeting Critical Infrastructure

How AI is changing the GRC strategy

INC Ransom Allegedly Adds 8 More International Firms to Victim List

LameHug malware uses AI LLM to craft Windows data-theft commands in real-time

Lenovo Vantage Vulnerabilities Allow Attackers to Escalate Privileges as SYSTEM User

Machine unlearning gets a practical privacy upgrade

Major UK leak exposes identities of spies and Afghans who helped Britain

Malware-as-a-Service Campaign Exploits GitHub to Deliver Payloads

Massive Data Leak at Texas Adoption Agency Exposes 1.1 Million Records

Massive hackers' takedown: pro-Kremlin group NoName057(16) turned hacking the West into a game

Max severity Cisco ISE bug allows pre-auth command execution, patch now

Microsoft Exposes Scattered Spider’s Latest Tactics

Microsoft Teams voice calls abused to push Matanbuchus malware

Most European Financial Firms Still Lagging on DORA Compliance

National Crime Agency (NCA) officer jailed for stealing and laundering 50 BTC: how was it recovered?

North Korean hackers blamed for record spike in crypto thefts in 2025

One in 12 US/UK Employees Uses Chinese GenAI Tools

‘Operation Eastwood’ Dismantles Pro-Russian DDoS Group NoName057

Phishing scams target Philippine banks, e-wallets

Possible cross-chain crypto laundering exceeds $21.8B as criminals try to cover tracks

Qantas goes to court to protect customers hit by data breach

Ransomware Group Claims to Have Stolen Data of 600,000 North Country HealthCare Patients

Stormous Ransomware gang targets North Country HealthCare, claims 600K patient data stolen

Tired of gaps in your security? These open-source tools can help

UNC6148 deploys Overstep malware on SonicWall devices, possibly for ransomware operations

United Australia Party Confirms Major Ransomware Attack and Data Breach

United Natural Foods Expects $400M revenue impact from June cyber attack

US Data Breaches Head for Another Record Year After 11% Surge

VMware fixes four ESXi zero-day bugs exploited at Pwn2Own Berlin

What Fortune 100s are getting wrong about cybersecurity hiring

What a mature OT security program looks like in practice

Watch out: Fake travel deals are on the rise, costing victims $37B

Why silent authentication is the smarter way to secure BYOD

16/07

6 ways to protect your passport and other travel docs from cybercriminals - before it's too late

7 obsolete security practices that should be terminated immediately

75% of Organizations’ Building Systems Affected by Exploited Vulnerabilities

90% of Large Organizations Unprepared for AI-Enabled Threats

Access to Israeli Flight Agencies and Hotels Allegedly Sold on Dark Web After Zero-Day Breach

Afghan data breach a shameful sequel to the Kabul horror story

AI Agents Act Like Employees With Root Access—Here's How to Regain Control

Alleged Collection of 1 Million Israeli Card Holders Data Offered for Sale

Alleged Data Breach Impacts Brazilian Company GRS Informatica

Alleged Data Breach Impacts VantageFinance Customers

Alleged Data Breach Rocks Unnamed Major Crypto Gaming Company

Authorities Seize Over 100 Servers of the Pro‑Russian NoName057(16) Hacktivist Network

BigONE Hacked: Hacker Steals Over $27 Million Worth of Crypto

BlackFog Report Reveals 63% Increase in Q2 Ransomware Attacks YoY

Cloudflare Blocks Record-Breaking 7.3 Tbps DDoS Attack

Cloudflare says 1.1.1.1 outage not caused by attack or BGP hijack

Co-op Aims to Divert More Young Hackers into Cyber Careers

Compumedics Ransomware Attack Led to Data Breach Impacting 318,000

Critical Golden dMSA Attack in Windows Server 2025 Enables Cross-Domain Attacks and Persistent Access

Cut Response Time with This Free, Powerful Threat Intelligence Service

CVE-2025-6554 marks the fifth actively exploited Chrome Zero-Day patched by Google in 2025

Cyberattack Allegedly Compromises Chartered Institute of Bankers of Nigeria (CIBN) Servers

Data-Driven Marketing in 2025: Navigating Risks, Ethics and Compliance Management

DDoS peaks hit new highs: Cloudflare mitigated massive 7.3 Tbps assault

Deepfakes. Fake Recruiters. Cloned CFOs — Learn How to Stop AI-Driven Attacks in Real Time

DragonForce hackers breach Belk, exposing customer data

ECB supervisors focus on risks from tariffs to cyber attacks, central bank sources say

Education Sector is Most Exposed to Remote Attacks

European Commission launches age-check app to protect kinds online

Europol disrupts pro-Russian NoName057(16) DDoS hacktivist group

Ex US Soldier Cameron Wagenius Guilty in Telecom Hacking and Extortion

Experts unpack the biggest cybersecurity surprises of 2025

Falco: Open-source cloud-native runtime security tool for Linux

Former US Army member confesses to Telecom hack and extortion conspiracy

Former US soldier pleads guilty to hacking telecom companies

Global crackdown hits pro-Russian cybercrime, 100+ systems taken down worldwide

Google AI "Big Sleep" Stops Exploitation of Critical SQLite Vulnerability Before Hackers Act

Google fixes actively exploited sandbox escape zero day in Chrome

Hackers Leverage Microsoft Teams to Spread Matanbuchus 3.0 Malware to Targeted Firms

How Simple IAM Control Could Have Prevented Major Cyber-Attacks

IWACLUB Allegedly Suffers Data Breach

Louis Vuitton data breach affects customers in Turkey, South Korea, and the UK

Massive data breach at Episource exposes medical records of over 5 million patients

Mauritanian Government Employability Platform Allegedly Breached

Most cyber incidents stem from the same 10% of employees, study finds

Most cybersecurity risk comes from just 10% of employees

NCSC Expands Vulnerability Research to Tackle Evolving Cyber Threats

New Fortinet FortiWeb hacks likely linked to public RCE exploits

New Konfety Malware Variant Evades Detection by Manipulating APKs and Dynamic Code

Over 5.4 Million Affected in Healthcare Data Breach at Episource

Popular fitness app Fitify exposes 138K user progress photos

Pro-Russian Cybercrime Network Demolished in Operation Eastwood

Qilin Ransomware Group Allegedly Breaches Five U.S. Entities – Halvorsen Family Law, WH Rogers Sheet Metal, City of Green River, Paul Wilkinson Law Firm, and ProActive Solutions USA

Real-world numbers for estimating security audit costs

Retail Ransomware Attacks Jump 58% Globally in Q2 2025

Salt Typhoon breach: Chinese APT compromises U.S. Army National Guard network

SonicWall SMA devices hacked with OVERSTEP rootkit tied to ransomware

SonicWall SMA devices persistently infected with stealthy OVERSTEP backdoor and rootkit

SquidLoader Malware Campaign Targets Hong Kong Financial Sector

Top-rated Shopify plugin exposes hundreds of stores to severe security risks

UNC6148 Backdoors Fully-Patched SonicWall SMA 100 Series Devices with OVERSTEP Rootkit

UnitedHealth-Linked Health Tech Firm Episource Breach Hits 5.4M Patients

Update Google Chrome to fix actively exploited zero-day (CVE-2025-6558)

Urgent: Google Releases Critical Chrome Update for CVE-2025-6558 Exploit Active in the Wild

US National Guard severely hacked by Salt Typhoon in 2024

US National Guard unit was 'extensively' hacked by Salt Typhoon in 2024, memo says

WeTransfer changes its terms again after being suspected of fishy use of content

Windows Hello flaw allows hackers to “swap faces” and access sensitive data

WordPress Security Alert: CVE-2025-6043 Enables Remote File Deletion via Malcure Plugin

15/07

13 Arrested in Romania Over Phishing-Based UK Tax Fraud Scheme

20-Year-Old Vulnerability Allows Hackers to Control Train Brakes

47% of Manufacturing Breaches in 2024 Involved Ransomware

Abacus Market Shutters After Exit Scam, Say Experts

AI poisoning and the CISO’s crisis of trust

An attacker using a $500 radio setup could potentially trigger train brake failures or derailments from a distance

Android malware Konfety uses malformed APKs to evade detection

AsyncRAT evolves as ESET tracks its most popular malware forks

AsyncRAT's Open-Source Code Sparks Surge in Dangerous Malware Variants Across the Globe

Australia Adopts Global OT Cybersecurity Standards to Secure Energy, Water, and Smart Infrastructure

Banks must beef up cyber resilience as financial phishing attacks increase

British and French government to collaborate on securing GPS for critical infrastructure

British Citizen Jailed for Islamophobic WiFi Hack at UK Train Stations

CBI Busts Noida Based Tech Support Scam Targeting UK & Australian Citizens

CISA Warns of Wing FTP Server Vulnerability Actively Exploited in Attacks

Community Care Alliance to pay $1.09 million to settle data breach class action

Critical cyber flaw linked to EoT module ignored in US rail systems for 12 years, fix not expected until 2027

Cyber scam: Four foreigners held in Islamabad

'Disgusting' antisemitic and racist messages posted on Elmo's X page by hacker

DOGE staffer with access to Americans’ personal data leaked private xAI API key

DragonForce Cyberattack Targets Belk Inc. with Ransomware Attack

Elmo’s X Account Hacked: Sesame Street Character Used to Spread Racist and Antisemitic Messages

FBI seized multiple piracy sites distributing pirated video games

From ClickFix to FileFix: A New Era of Deception from the Interlock Ransomware Group

Hacked Elmo X account demands Trump release Epstein files, spews anti-Semitic hate

Hackers Leveraging AWS Lambda URLs Endpoints to Attack Governments Organizations

Horizon Healthcare RCM data breach hits over 75,000 people

How defenders use the dark web

How service providers can turn cybersecurity into a scalable MRR engine

Huawei finds its way back in Spain after being banished from the country’s 5G network

Hyper-Volumetric DDoS Attacks Reach Record 7.3 Tbps, Targeting Key Global Sectors

Inorganic DNA: How nanoparticles could be the future of anti-counterfeiting tech

Marks & Spencer hackers hit US retailer Belk

Massive investment fraud campaign leverages 17,000 fraudulent news sites

Meme Coins in 2025: High Risk, High Reward, and Rising Security Threats

MITRE Launches AADAPT Framework for Detecting and Responding to Digital Asset Management Attacks

MITRE Launches New Framework to Tackle Crypto Risks

NCSC Launches Vulnerability Research Institute to Boost UK Resilience

New ZuRu Malware Variant Targeting Developers

Newly Emerged GLOBAL GROUP RaaS Expands Operations with AI-Driven Negotiation Tools

North Korea-linked actors spread XORIndex malware via 67 malicious npm packages

North Korean Hackers Flood npm Registry with XORIndex Malware in Ongoing Attack Campaign

Not lovin’ it: McDonald’s hiring back end exposes 64m chatbot job discussions

NYC Health + Hospitals Data Breach Affects 5,728 Patients

OpenAI's ChatGPT-powered browser is codenamed 'Aura'

Phishing email costs US school district $1.8 million

Pierce County Library System reports data breach affecting Over 335,000 individuals

PoC Exploit Released for High-Severity Git CLI Arbitrary File Write Vulnerability

ProSmile Holdings Settles Class Action Data Breach Lawsuit

Ransomware attack forces SGI Seoul Guarantee Insurance stock down 14% from peak

Red Bull-Themed Phishing Attacks Steal Job Seekers Login Credentials

Reframing Return of Investment (ROI) in Cybersecurity: From Cost Center to Business Enabler

SaaS Security Adoption Grows Amid Rising Breach Rates

Securing vehicles as they become platforms for code and data

Serious Google Gemini flaw: it obeys hidden prompts in malicious emails

Sesame Workshop regains control of Elmo’s hacked X account after racist posts

Shopify plugin exposes hundreds of websites to attacks

Sosandar cuts profit guidance following M&S cyber attack

State-Backed HazyBeacon Malware Uses AWS Lambda to Steal Data from SE Asian Governments

Stop settling for check-the-box cybersecurity policies

Symantec Endpoint Management Suite Vulnerability Allows Malicious Code Execution Remotely

The Industry Speaks: Artificial Intelligence Appreciation Day 2025

Third Time in 90 Days: Louis Vuitton UK Latest Victim in LVMH Cyberattacks

This is what you should include in your password to make it uncrackable

Threat Actors Exploit SVG Files in Stealthy JavaScript Redirects

TikTok faces fresh EU scrutiny over data transfers to China

Trump administration announces $1bn offensive hacking operation spend

UK launches new Vulnerability Research Institute to protect critical infrastructure and UK business

UK Pet Owners Targeted by Fake Microchip Renewal Scams

Ukrainian hackers claim to have destroyed servers of Russian drone maker

UnitedHealth subsidiary Episource hit with data breach, millions affected

Up to 7,000 Afghans being relocated to UK after data leak blunder

Vulnerable firmware for Gigabyte motherboards could allow bootkit installation

Why MSPs are the new favorite target of cybercriminals

14/07

4 Critical, Known Exploited Vulnerabilities Added to KEV Catalog

8 tough trade-offs every CISO must navigate

A major security flaw in top eSIM system could put billions of devices at risk - here's what we know

A New Identity: IAM firms double down on agentic risk and cost

A simple radio hack can emergency stop any train in North America, researchers warn

Alabama city purportedly compromised by INC Ransom group

Alleged Data Breach of Colmedsa Exposes Records of Argentine Medical Professionals

Artivion data breach exposes sensitive customer information

Auditor questions city of Cleveland cyber security in wake of attack: I-Team

Australian Office of the Migration Agents Registration Authority discloses accidental data breach

Banks urged to beef up cybersecurity amid more incidents of financial phishing

Bitdefender PHASR: Proactive hardening demo overview

Broken Bow Public Schools impacted by phishing email scam, $1.8 million shared with fraud account

CARSTAR Business Group Allegedly Hit by Sarcoma Ransomware

CBI Shuts Down £390K U.K. Tech Support Scam, Arrests Key Operatives in Noida Call Center

Chicago’s WFMT radio station reportedly breached by ransomware group Play

China-Built SafeLine WAF Gains Global Popularity Among Startups & Homelabs

CISA warns hackers are actively exploiting critical CitrixBleed 2

Cloned Phones, Stolen Identities: The eSIM Hack No One Saw Coming

Conta de personagem dos Muppets no X é invadida por hackers

Crypto Market Outlook: How Crypto Will Come of Age in 2025

Dedicated Proxies: A Key Tool for Online Privacy, Security and Speed

Denmark Moves Toward AI Copyright Rules for Voice and Appearance

Edison-Based Lab Suffers Data Breach, Lawyers Say Patient's Personal Info Leaked to the Dark Web

Elmo’s social media ‘compromised’ by unknown hacker

eSIM cloning flaw exposes mobile ID vulnerabilities

eSIM Vulnerability in Kigen's eUICC Cards Exposes Billions of IoT Devices to Malicious Attacks

Experts uncover critical flaws in Kigen eSIM technology affecting billions

Exploits for unauthenticated FortiWeb RCE are public, so patch quickly! (CVE-2025-25257)

Fake News Sites Mimicking CNN, BBC and CNBC Pave Way for Investment Scams

FAPI 2.0: How the OpenID Foundation is enabling scalable interoperability in global healthcare

Financial giant Prudential will pay up to $5,000 per person following massive Social Security data breach

Finastra Data Breach Affects Over 800K Americans: SSNs Exposed

Flutter Entertainment confirms data breach impacting 800,000 customers

Gambling websites Paddy Power and Betfair confirm data breach

Gaps threaten UK's digital identity rollout

Gigabyte motherboards vulnerable to UEFI malware bypassing Secure Boot

Global Louis Vuitton data breach impacts UK, South Korea, and Turkey

Gmail AI summaries can be hijacked for phishing scams

Google Gemini can be hijacked to display fake email summaries in phishing scams

Google Gemini for Workspace Vulnerability Lets Attackers Hide Malicious Scripts in Emails

Grok-4 Jailbroken Two Days After Release Using Combined Attack

Hackers Allegedly Selling WinRAR 0-day Exploit on Dark Web Forums for $80,000

Hackers roubam inscrições por PIX usando o Concurso Unificado do Governo

Hacktivists increasingly target critical infrastructure organizations

Here’s how Incogni's data removal service helped me reclaim my online privacy

How I easily set up passkeys through my password manager - and why you should too

Identity lapses expose cyber risks in Middle East

India Takes a Quantum Leap in Cybersecurity with MeitY's Strategic Whitepaper

Indian Police Raid Tech Support Scam Call Center

Interlock ransomware adopts FileFix method to deliver malware

Interlock ransomware group deploys new PHP-based RAT via FileFix

Interlock Ransomware Unleashes New RAT in Widespread Campaign

IoT Devices at Risk Due to eSIM Flaw in Kigen eUICC Cards

Kaspersky urges vigilance in PH as financial phishing rises

Law enforcement authorities bust international Microsoft scam call center

Legal gaps in AI are a business risk, not just a compliance issue

Louis Vuitton Data Breach – Customer Information Compromised

Louis Vuitton é a nova vítima de ataque hacker entre lojas de moda

Louis Vuitton UK Hit by Cyberattack, Third LVMH Breach in 3 Months

Louis Vuitton UK Latest Retailer Hit by Data Breach

Malicious VSCode extension in Cursor IDE led to $500K crypto theft

Man Gets Suspended Sentence for Hate-Fueled UK Train Stations WiFi Hack

'Massive and sophisticated' cyber attack targets Florida Trident and its parent organization

Mobile phishing threat preparedness lagging among organizations, report finds

Naver.com Allegedly Suffers Significant Data Leak

NCSC Urges Enterprises to Upgrade to Microsoft Windows 11 to Avoid Cyber Threats

Nebraska school district loses $1.8 million in ‘sophisticated’ phishing scam

New American Funding Data Breach Affects Many

New ISACA designation seeks to ease IT audit profession entry

New Mexico State Treasurer’s Office Issues Urgent Warning On Scam Calls, Docusign Phishing Attacks

New PHP-Based Interlock RAT Variant Uses FileFix Delivery Mechanism to Target Multiple Industries

Nvidia warns users some GPUs could be at risk of damaging cyberattack - here's what we know

Operation "ELICIUS": International Hacker Gang "Diskstation" Dismantled by Italian Postal Police

Outage hits Pennsylvania’s 911 system

Over 6,000 users become victims of hacker attacks this year, in Azerbaijan

PewDiePie is driving self-hosting craze: how to protect your home server experiments?

Phishing attempts target staff and students at Waterloo Region District School Board

Police Service of Northern Ireland (PSNI) officer accused of fraud over data breach payment scheme

pqcscan: Open-source post-quantum cryptography scanner

Putting AI-assisted ‘vibe hacking’ to the test

Ransomware disrupts Virginia county

Ransomware drops, but don’t relax yet

Report: Mid-sized firms struggle most with identity security

Researchers Jailbreak Elon Musk’s Grok-4 AI Within 48 Hours of Launch

Rezayat Group, Saudi industrial services group breached, hackers claim

Russian basketball player arrested in France under ransomware suspicions

“Shadowy developer” targets crypto users by compromising legitimate software

Spain awarded €12.3 million in contracts to Huawei

Specops, GuidePoint unite on identity security

The Spanish Government wants Huawei to monitor for system wiretaps

The Unusual Suspect: Git Repos

Top 11 Passwordless Authentication Tools – 2025

Two new Android 16 security features protect you better - how to switch them on now

UFPI sofre ataque cibernético e serviços institucionais ficam instáveis

UK authorities arrest four in major retail cyber attack probe

UK launches vulnerability research program for external experts

UK replaces US as “No. 1 target” for Russian cyberattacks

Why your Microsoft 365 setup might be more vulnerable than you think

WordPress plugin Gravity Forms targeted in supply chain attack

WordPress users beware - this popular plugin has been hijacked to push potential malware

Your eSIM might not be as safe as you think: researchers hack and clone numbers

13/07

Anne Arundel Dermatology Data Breach Exposes Medical Information

Critical Vulnerability Exposes Fortinet FortiWeb to Full Takeover (CVE-2025-25257)

Dordt University Data Breach Affects 34,251 People: SSNs Exposed

GMX hacker accepts compensation offer…"Stolen assets returned"

Google Gemini flaw hijacks email summaries for phishing

National Treasury Management Agency (Ireland) targeted in phishing scam

OT cybersecurity reporting remains a structural weakness as threats outpace legacy governance models

Password warning after cyberattack on New World's Clubcard programme

Sistemas da Universidade Federal do Piauí (UFPI) são alvos de ataque hacker e apresentam instabilidade

Up to €5m goes missing after National Treasury Management Agency Ireland (NTMA) falls victim to phishing scam

LAST WEEK

Daily News - Julho (06/07 - 12/07) - 28 Semana de 2025