Cyber Briefing

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What's going on in the cyber world today? 

Sophos and SonicWall patch critical RCE flaws in firewall and SMA appliances, CastleLoader spreads info stealers to US gov targets, and Koske Linux malware hides in panda JPEGs to mine crypto. Hackers inject wipe commands into Amazon’s AI bot via GitHub, Chinese APTs use fake Dalai Lama apps to install Gh0st RAT, and info-stealing malware is found hidden in Steam game "Chemia." Jetflicks ringleader sentenced to 7 years for $37.5M piracy, Proton launches privacy-first AI assistant Lumo, and Brave browser blocks Windows Recall screenshot logging by default.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day: https://amzn.to/3HVAkRt 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

Visit Cybermaterial: https://cybermaterial.com/

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What's going on in the cyber world today? 

Interlock ransomware uses drive-by downloads and double extortion across Windows/Linux, WordPress sites hit by a stealth mu-plugins backdoor (wp-index.php), and GitLab rushes patches for high-sev XSS in the K8s proxy. Beluga Vodka battles a crippling ransomware hit, France Travail leaks data on 340k jobseekers via an infostealer-compromised partner, and Chinese actors exploit on-prem SharePoint to breach hundreds of orgs. Sam Altman warns of an AI-driven fraud wave (esp. voice auth), Europol nabs the XSS.is admin in Kyiv, and Google launches OSS Rebuild to harden the open-source supply chain..

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day: https://amzn.to/46qGbLi 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

Visit Cybermaterial: https://cybermaterial.com/

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What's trending in cybersecurity today?

MuddyWater uses upgraded DCHSpy to spy on Android users post Iran-Israel clash, npm phishing targets Node.js developers, and Lumma Stealer resurfaces with new evasion tactics. Chinese hackers breach US nuclear agency via SharePoint flaw, AMEOS healthcare group suffers GDPR-reportable breach, and 158-year-old UK firm KNP collapses after weak password ransomware hit. Global ransomware drops 43% in Q2, UK pushes mandatory ransomware reporting, and Clorox sues Cognizant for $380M over 2023 breach.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day: https://amzn.to/3X61Q2O 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

Visit Cybermaterial: https://cybermaterial.com/

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What's the latest in the cyber world today?

7-Zip flaw crashes PCs via malicious RAR5 archives, CrushFTP zero-day enables unauth RCE, and 3,500 websites hijacked for stealthy crypto mining. Dior breach exposes customer data, CoinDCX loses $44M in crypto heist, and Poland probes air traffic outage for sabotage. UK sanctions APT28 for cloud espionage, dark web travel scams target booking platforms, and Darktrace acquires Mira Security to enhance encrypted traffic visibility.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day: https://amzn.to/3DJRMG3  

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

Visit Cybermaterial: https://cybermaterial.com/

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What's happening in cybersecurity today?

Microsoft patches critical SharePoint RCE under active attack, AppLocker flaw allows bypass via version misconfig, and PoisonSeed phishing bypasses FIDO protections. Arcadia Finance drained of $3.5M in WETH, ATM jackpotting hits Michigan for $107K, and ransomware cripples Korea’s top guarantee insurer. Free decryptor released for Phobos and 8Base, Armenian Ryuk hacker indicted via BTC tracing, and Roblox’s AI teen safety tools raise privacy concerns.

👉 Important Links:

Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events

Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs

Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

Cyber Book of the day: https://amzn.to/3pI77z1

Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools

Visit 911Cyber: https://911cyber.app/

Visit Cybermaterial: https://cybermaterial.com/

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What are the latest cybersecurity alerts, incidents, and news?

Cybercriminals are leveraging new tactics and platforms, from GitHub repos to Microsoft Teams and npm packages, to spread sophisticated malware, launder crypto and disrupt critical services. This edition dives into the latest malware campaigns, major data breaches, and emerging vulnerabilities of today.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book Review: https://amzn.to/3GqHFYr 

• Cyber Review : https://amzn.to/449EA9R 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

• Visit Cybermaterial: https://cybermaterial.com/ 

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What's going on in the cyber world today?

Fake Telegram APKs exploit Janus bug for remote access, SVG files smuggle in-memory JavaScript redirects, and OVERSTEP rootkit targets SonicWall zero-day for stealth persistence. Air Serbia suffers Active Directory breach, Ukrainian hackers cripple Russian drone maker, and Seychelles bank hit by personal data leak. U.S. warns of surging China-backed intrusions, ex-soldier pleads guilty in telecom hacks, and NoName057(16) disrupted in global takedown.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day: https://amzn.to/3KaIIL2 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

• Visit Cybermaterial: https://cybermaterial.com/ 

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What's happening in cybersecurity today?

Chrome zero-day exploited in ANGLE sandbox escape, Interlock RAT deployed via FileFix with CAPTCHA lures, and Konfety Android malware evades detection using malformed ZIPs. Albemarle County ransomware breaches resident data, Episource leak affects 5.4M patients, and Fitify exposes 138K progress photos. China's Salt Typhoon hacks US Guard networks, Diskstation ransomware gang dismantled, and Abacus dark web market vanishes in exit scam.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day: https://amzn.to/3IQY9dt 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

Visit Cybermaterial: https://cybermaterial.com/

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What's happening in cybersecurity today?

XORIndex malware spreads via npm packages in DPRK supply chain attack, NCSC urges urgent Windows 11 migration before 2025 EOL, and FBI seizes game piracy sites after $170M in losses. Louis Vuitton breach affects global customers, PET imaging phishing attack leaks 114K records, and Sinaloa cartel hacker exploited surveillance tech to target FBI informants. UK launches vulnerability research program, GMX hacker returns $42M for $5M bounty, and Elmo’s X account hijacked for antisemitic posts.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://amzn.to/3mLvqtq 

• Cyber Book of the day: https://amzn.to/3KrXC2M 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

• Visit Cybermaterial: https://cybermaterial.com/ 

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What's happening in cybersecurity today?

WinRAR zero-day sold for $80K enables remote code execution, Google Gemini flaw misleads users with hidden phishing prompts, and Wing FTP Server exploited via RCE vulnerability. Chinese hackers suspected in DC law firm breach, nius.de user data leaked in CMS attack, and reused passwords exploited in supermarket account compromise. Spain awards Huawei €12.3M contract for sensitive data, India’s CBI busts £390K UK tech scam, and Grok-4 jailbreak exposes LLM prompt injection risks.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://amzn.to/3mLvqtq 

• Cyber Book of the day: https://amzn.to/3oRchbD 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

• Visit Cybermaterial: https://cybermaterial.com/