Cyber Briefing

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What are the latest cybersecurity alerts, incidents, and news?

TokenBreak defeats AI safety with typo trick, VexTrio uses adtech TDS to spread malware, Discord vanity links hijacked to deploy RATs. HHS vaccine site defaced with AI spam, Brussels Parliament hit by cyberattack, Google Cloud outage disrupts major services. WhatsApp sides with Apple in UK encryption fight, NIST issues Zero Trust deployment guide, and Securonix acquires ThreatQuotient for AI-powered SecOps.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day: https://amzn.to/3VQxgd5 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

• Visit Cybermaterial: https://cybermaterial.com/ 

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What's going on in the cyber world today?

SmartAttack uses sound to breach air-gapped PCs, Tomcat hit by coordinated brute-force, TeamFiltration abused for Entra ID takeovers. Erie Insurance and Philly schools breached, SoftBank vendor leaks PII. INTERPOL busts infostealer ring, Linux malware surges 388%, and U.S. bill targets healthcare cyber threats.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day: https://amzn.to/44afokx 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

Visit Cybermaterial: https://cybermaterial.com/

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What's trending in cybersecurity today?

FIN6 targets recruiters with fake resumes and ‘More Eggs’ malware, Microsoft patches WebDAV zero-day, fake SoraAI installs infostealer. Sompo breach risks 17.5M records, BHA hit by ransomware, DDoS hits Roularta. Mobile scam rates surge, pig butchering ring sees guilty pleas, and Swimlane raises $45M for AI-powered SecOps.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day: https://amzn.to/3VuAvqd 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

  
  

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What's the latest in the cyber world today?

Google bug exposes phone numbers, Roundcube flaw threatens 84K servers, Skitnet boosts ransomware stealth. TxDOT breach leaks crash data, UNFI food deliveries halted, HFS phishing exposes Medicaid info. FBI names new cyber chief, Texas launches Cyber Command, and WordPress split spurs FAIR plugin manager.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day: https://amzn.to/3GqHFYr 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

Visit Cybermaterial: https://cybermaterial.com/

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What's happening in cybersecurity today?

Malware hits npm, PyPI, and Salesforce via SOQL flaw, HelloTDS uses fake CAPTCHAs for mass infections. Chaos gang breaches Optima Tax, Sorbonne leaks staff data, Brazil city health services go offline. Trump rolls back Biden-era cyber rules, DOJ targets North Korean IT scam funds, and OpenAI bans state hackers from ChatGPT.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day:  https://amzn.to/3ER12vh  

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

Visit Cybermaterial: https://cybermaterial.com/

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What are the latest cybersecurity alerts, incidents, and news?

Chrome extensions leak data and API keys, AMOS stealer bypasses macOS Gatekeeper, and BADBOX hijacks 1M+ IoT devices. InfoJobs suffers credential stuffing, German police and dog rescue orgs are hacked. Paula Stannard leads HIPAA enforcement, Play ransomware triples victims, and Mind raises $30M for on-device AI security.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day: https://amzn.to/3AfrUTP 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

Visit Cybermaterial: https://cybermaterial.com/

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What's going on in the cyber world today?

UNC6040 uses vishing to breach Salesforce, Chaos RAT variant hits Windows and Linux, and NFT airdrop scams drain Hedera wallets. Ukraine hacks Tupolev, KiranaPro loses all data, and Nervos Force Bridge is exploited. Oklahoma enacts new breach law, BidenCash marketplace is seized, and a $10M bounty targets RedLine hackers.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day: https://amzn.to/3KKHsRU 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

• Visit Cybermaterial: https://cybermaterial.com/ 

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What's trending in cybersecurity today?

Crocodilus targets crypto users via fake apps, bogus Captchas drop NetSupport Rat, and rogue RubyGems steal Telegram bot tokens. BitoPro loses $11.5M in a DeFi hack, MainStreet Bank suffers a vendor breach, and Malaysia’s Home Minister’s WhatsApp is hijacked. A Romanian swatter pleads guilty, Vodafone is fined $51M for Gdpr violations, and Chrome drops trust in Chunghwa Telecom and Netlock CA certificates.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day: https://amzn.to/3GxxXTA 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

• Visit Cybermaterial: https://cybermaterial.com/ 

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉  What's the latest in the cyber world today?

A fake Chrome extension steals Facebook session cookies, a Chrome V8 zero-day is patched, and JINX-0132 targets DevOps servers for cryptomining. The White House chief of staff’s phone is hacked, Cartier suffers a data breach, and The North Face is hit by another credential stuffing attack. CISA faces deep budget cuts, Australia enacts ransomware reporting rules, and Microsoft-CrowdStrike align threat actor naming for better attribution.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 

• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 

• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club

• Cyber Book of the day: https://amzn.to/3GwJ92K 

• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  

• Visit 911Cyber: https://911cyber.app/ 

• Visit Cybermaterial: https://cybermaterial.com/ 

If you like what you hear, please subscribe, leave us a review and tell a friend!

👉 What's happening in cybersecurity today?

Linux flaws leak password hashes, GitHub code poisons AI with path traversal bugs, and Google Script is used in phishing. Cyberattacks hit Covenant hospitals, Moscow's internet, and Puerto Rico’s Justice Department. Lawmakers demand CSRB’s return, authorities dismantle malware-evasion services, and Germany unmasks Conti’s alleged leader.

👉 Important Links:

• Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events 
• Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs 
• Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-club
• Cyber Book of the day: https://amzn.to/45yD3fF 
• Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  
• Visit 911Cyber: https://911cyber.app/ 
• Visit Cybermaterial: https://cybermaterial.com/