Cyber Briefing

If you like what you hear, please subscribe, leave us a review and tell a friend!

Sap S4hana flaw exploited in the wild, Virustotal detects undetected svg phishing files, Russian Apt28 uses Outlook backdoor, Bridgestone cyberattack disrupts manufacturing, North Korean hackers run fake job interviews, Salesforce Salesloft breach impacts firms, Us and allies push Sboms, Ten million dollar reward for Russian Fsb hackers, Us sues robot toy maker exposing childrens data to Chinese developers.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Review: https://amzn.to/45dee7s 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

• Visit Cybermaterial: https://cybermaterial.com/ 

If you like what you hear, please subscribe, leave us a review and tell a friend!

Hackers and cybercriminals continue exploiting software and platforms, targeting schools, routers, Android devices, and AI systems. Major companies like Google, YouTube, Cloudflare, and Jaguar Land Rover face fines, disruptions, or security breaches. Law enforcement and regulators are taking action against violations, while threats like ransomware, malware, and zero-day exploits persist.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day: https://amzn.to/3nyG1XY 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

• Visit Cybermaterial: https://cybermaterial.com/ 

If you like what you hear, please subscribe, leave us a review and tell a friend!

Hackers are increasingly targeting organizations and users through scams, malware, and ransomware. WhatsApp users face chat hijacks, Android devices are hit via Meta malvertising and evolved droppers, and npm packages mimic trusted tools to steal from crypto wallets. Austria’s Interior Ministry reports 100 breached email accounts, while a fintech firm suffered an attempted $130M heist. Pennsylvania’s AG office faced ransomware disruptions, Disney settled for $10M over children’s data, and Cloudflare blocked a massive 11.5 Tbps DDoS attack. Varonis expanded its cybersecurity offerings by acquiring SlashNext.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day: https://amzn.to/39cAe5g 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

• Visit Cybermaterial: https://cybermaterial.com/ 

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What's the latest in the cyber world today?

Sitecore suffers a critical exploit chain enabling cache poisoning and remote code execution. Hackers launch the first AI-powered attack on the Nx build system. A high-risk SQL injection flaw exposes users of a WordPress memberships plugin. Lotte Card reports a cyberattack after malware was discovered on internal servers. Zscaler experiences a data breach following a compromise of Salesloft Drift. Von der Leyen’s plane encounters suspected Russian GPS jamming but lands safely. China’s Salt Typhoon hacker group targeted critical infrastructure globally for years. The Spanish government cancels a €10 million contract involving Huawei equipment. Ransomware gang takedowns are fueling the rise of smaller, emerging cybercriminal groups.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day: https://amzn.to/3hzEUKU 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

• Visit Cybermaterial: https://cybermaterial.com/ 

If you like what you hear, please subscribe, leave us a review and tell a friend!

North Korea’s APT37 is deploying RokRAT in phishing campaigns against academics. Android devices are being targeted by Brokewell malware spread via fake TradingView ads. A new zero-click exploit is reportedly being used to hack WhatsApp users. MathWorks confirmed a cyberattack that exposed user data. A fraudster stole over $1.5 million from Baltimore. Google warned that a Salesloft breach impacted some Workspace accounts. Amazon dismantled Russian APT29 infrastructure used for attacks. Microsoft will enforce MFA for Azure resource management in October. Apple hinted that the iPhone 17 may eliminate the physical SIM card.

👉 What's happening in cybersecurity today?

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day: https://amzn.to/3bpb2uY 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

• Visit Cybermaterial: https://cybermaterial.com/ 

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What are the latest cybersecurity alerts, incidents, and news?

Cyber threats continue to target individuals and organizations worldwide. Docker Desktop and Blind Eagle malware campaigns threaten corporate and national infrastructure. MixShell and TamperedChef target supply chains and credentials, while U.S. organizations like Healthcare Services Group, TransUnion, and The Salvation Army face major data breaches. Law enforcement disrupts illicit marketplaces like VerifTools, and CrowdStrike’s acquisition of Onum strengthens cybersecurity defenses. DPRK-linked schemes exploit crypto transfers for illicit profits.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day: https://amzn.to/3Bn2hhu 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

Visit Cybermaterial: https://cybermaterial.com/

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What's going on in the cyber world today?

A wave of cyber threats is emerging worldwide: AI-driven ransomware is on the rise, coordinated scans target Microsoft RDP servers, ShadowCaptcha exploits WordPress sites to spread malware, Nevada shuts state offices after IT disruptions, DOGE exposes social security data in the cloud, Swedish municipalities suffer ransomware via an IT supplier, US appeals sentences for HashFlare Ponzi schemers, Russia considers banning Google Meet, and global Salt Typhoon hacking campaigns are linked to Chinese tech firms.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day: https://amzn.to/3yWde88 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

• Visit Cybermaterial: https://cybermaterial.com/ 

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What's trending in cybersecurity today?

Hackers stole OAuth tokens from Salesloft, exposed SSNs and financial data in New Jersey, and deployed malware like MixShell targeting U.S. supply chains. Messaging apps and major retailers also faced attacks, putting millions of users’ data at risk.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day: https://amzn.to/3x2e2X9 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

• Visit Cybermaterial: https://cybermaterial.com/ 

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What's the latest in the cyber world today?

Cyber threats continue to impact users and organizations worldwide. Malicious apps spreading banking malware were removed from Google Play. AI browsers pose prompt injection risks. Farmers Insurance reports 1 million customers affected by a vendor breach. Arch Linux faces sustained DDoS attacks, hackers disrupt Iran’s merchant fleet, and Google verifies Android developers to block malicious apps. Linux celebrates 34 years, and National Public Data relaunches despite a breach exposing 2.9 billion SSNs. Fake CoinMarketCap journalists target crypto executives with spear-phishing campaigns.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day: https://amzn.to/30I9ZU5 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

• Visit Cybermaterial: https://cybermaterial.com/ 

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What's happening in cybersecurity today?

Sophisticated attacks are targeting users and enterprises worldwide. Malware, including Go modules and Android apps, steals credentials, while vulnerabilities in Tableau and GeoServer enable file exploits. Grok Chat data was exposed, and Data I/O halted operations after ransomware. Hackers hit Russian TV to show war realities, and the FTC warned tech giants on encryption. NIST introduces lightweight cryptography to secure IoT devices.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day: https://amzn.to/3HC1AHj 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

• Visit Cybermaterial: https://cybermaterial.com/