Cyber Briefing

👉 What are the latest cybersecurity alerts, incidents, and news?

🚨 #CyberAlerts

FBI Warns of North Korean IT Workers Steal Source Code to Extort Employers

Source: FBI

QakBot Malware Revives With New BackConnect Module to Steal System Data

Source: Joshua Platt, Jason Reaves and Jonathan McCay via Walmart Global Tech Blog

Lumma Stealer Targeting Global Industries Using Fake CAPTCHA Campaigns

Source: Leandro Fróes via Netskope

ChatGPT Security Flaw Could Facilitate DDoS Attacks on Targeted Servers

Source:  Sead Fadilpašić via TechRadar

J-magic Campaign Targets Juniper Routers with Custom Backdoor to Steal Data

Source: Lumen

💥 #CyberIncidents

Phishing Attack Targets University of Texas at El Paso Students

Source: CBS 4 News

Harrison County Schools in West Virginia Targeted by Cybersecurity Incident

Source: Harrison County Schools

FalconFeedsio X Account Hacked to Promote Cryptocurrency Scams

Source: FalconFeedsio via LinkedIn

Cyberattack Exploits NEFT System to Steal $280,000 from Karnataka Bank

Source: News Karnataka

Cyberattack Targets Ilem Group Subsidiary Boost Disrupting Services for Clients

Source: Ilem Group

📢 #CyberNews

UK to Investigate Vulnerability of Undersea Cables After Russian Spy Ship Incident

Source: UK Parliament

PayPal to Pay $2 Million for Cybersecurity Violations in New York

Source: New York State Department of Financial Services

US DOJ Indicts Two Americans in Laptop Farm Scheme for North Korea

Source: US  Department of Justice

Google Introduces Identity Check to Enhance Android Security

Source: Google

Tesla Charger Exploits Earn Hackers $129000 at Pwn2Own Automotive 2025

Source: Zero Day Initiative

This Cyber Briefing is powered by https://911cyber.app 

Get help from cybersecurity first responders today!

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://911cyber.app/cyber-briefing

#cyberbriefing #informationsecurity #FBI #ChatGPT #PayPal #Google #Tesla #Android #Crypto #Phishing

👉 What's going on in the cyber world today?

🚨 #CyberAlerts

Ross Ulbricht X Scam Spreads Malware Through Fake Telegram Verification

Source: vx-underground via X

Tycoon 2FA Phishing Kit Update Bypasses MFA and Evades Detection Techniques

Source: Deerendra Prasad via Barracuda

​​Critical Cookie Sandwich Attack Exploits HttpOnly Vulnerability to Steal Data

Source: Zakhar Fedotkin via PortSwigger

Triplestrength Targets Cloud for Cryptojacking and Ransomware Attacks

Source: Google

Cisco Updates Address Critical Meeting Management Vulnerability

Source: Cisco

💥 #CyberIncidents

Hackers Took Control of Nasdaq Account to Promote Fake Memecoin Scam

Source: Timmy Shen via The Block

Conduent Confirms Cybersecurity Incident Caused Service Disruption

Source: Carly Page via TechCrunch

Iwate Asahi Television Hit by Ransomware Causing Data Encryption on Servers

Source: Iwate Asahi Television 

BCP Council in UK Apologizes for Email Mishap Exposing Recipient Addresses

Source: Matt Simpson via Daily Echo

Phemex Crypto Exchange Investigates Suspicious $30 Million Blockchain Outflows

Source: Cyvers via X

📢 #CyberNews

Incoming Administration Ends Homeland Security Advisory Board Memberships

Source: Nicole Sganga via CBS News

Australian Taskforce Addresses Election Threats Ahead of 2025 Federal Election

Source: Australian Electoral Integrity Assurance Taskforce’s (EIAT)

LinkedIn Sued for Sharing Premium Customer Data to Train AI Models Without Consent

Source: Jonathan Stempel, and Richard Chang Via USA Today

Denmark Warns of High Cybersecurity Threat to Water Infrastructure Amid Rising Risks

Source: The Local dk

Citi Faces Lawsuit for Failing to Protect Customers from Fraud in New York

Source: New York Attorney General Letitia James 

This Cyber Briefing is powered by https://911cyber.app 

Get help from cybersecurity first responders today!

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://911cyber.app/cyber-briefing
#cyberbriefing #informationsecurity #Cisco #Linkedin #Citi #Fraud #Scams #Memecoin #Phishing #Blockchain

👉 What's trending in cybersecurity today?

🚨 #CyberAlerts

Ransomware Gangs Use Teams Calls and Email Bombing to Install Malware

Source: Mark Parsons, Colin Cowie, Daniel Souter, Hunter Neal, Anthony Bradshaw, Sean Gallagher via Sophos

Murdoc Botnet Exploits IoT Device Flaws to Launch Widespread DDoS Attacks

Source: Shilpesh Trivedi via Qualys

Hackers Use Fake Homebrew Site in Google Ads Campaign to Spread AmosStealer

Source: Ryan Chenkie via X

Malicious Visual Studio Code Extension Impersonates Zoom to Steal Chrome Cookies

Source: Hunt

Zendesk Subdomain Vulnerability Exploited for Phishing and Investment Scams

Source: CloudSEK

💥 #CyberIncidents

Lynx Ransomware Targets Australian Auto Parts Firm Clutch Industries

Source: David Hollingworth via CyberDaily

Rostelecom Investigates Cyberattack After Silent Crow Claims Data Leak

Source: TASS News Agency

Cyberattack 45 Disrupts Schools in Rhineland-Palatinate as IT Provider Hit by Ransomware

Source: Marc Stöckel via Golem.de

Japan's Sanrio Puroland Network Hit by Unauthorized Attack Services Disrupted

Source: Sanrio Puroland

Columbia Hospitality Investigates Data Security Incident at Semiahmoo Resort

Source: Office of the Maine General Attorney

📢 #CyberNews

Incoming US Administration Removes TSA Leader Pekoske Amid Rising Cyber Threats

Source: Pete Muntean via X

UK Government to Launch Digital Wallet App for Driver’s Licenses

Source: UK Government

GDPR Fines in Europe Decrease for the First Time Since 2018

Source: DLA Piper

Over 1 Billion Passwords Stolen by Malware Worldwide in the Past Year

Source: Specops

Mitiga Secures $30 Million to Boost Cloud Security and Expand Operations

Source: Michael Novinson via Bank Info Security

👉 What's the latest in the cyber world today?

🚨 #CyberAlerts

DoNot Team Deploys Android Malware Tanzeem in Targeted Cyberattacks

Source: Cyfirma

Azure DevOps Faces Security Risks From Server-Side Request Forgery Vulnerabilities

Source: Torjus Bryne Retterstøl via Binary Security

Critical Security Flaw Discovered in OpenVPN Easy-RSA Encryption Tool

Source: OpenVPN

Ukraine's Computer Emergency Team Warns of Fake AnyDesk Security Audit Requests

Source: Computer Emergency Response Team of Ukraine (CERT-UA) 

Critical Code Execution Flaw Found in TP-Link TL-WR940N Routers

Source: InfoSec Write-ups via Medium

💥 #CyberIncidents

Russian Hackers Behind DDoS Attacks on Swiss Websites and Banks

Source: SWI swissinfo.ch

Philippines National Bureau of Investigation Hit by Massive Data Breach

Source: Kukublan Phillippines 

CODAC Behavioral Health Faces Data Breach Following July Cyber Attack

Source: Office of the Attorney General of Massachusetts

Iannuzzi Manetta Co Faces Data Breach Exposing Sensitive Consumer Data

Source: Office of the Maine General Attorney

Allegheny Health Network Data Breach Exposes Sensitive Patient Data

Source: Office of the Attorney General of Massachusetts

📢 #CyberNews

OWASP Updates Smart Contract Top 10 List for 2025 Highlighting Emerging Risks

Source: OWASP

US Coast Guard Updates Cybersecurity Rules for Vessels and Facilities

Source: Baird Maritime

Former CIA Analyst Pleads Guilty for Sharing Top Secret Documents

Source: US Department of Justice (DoJ)

Privacy Professionals Face Growing Stress Amid Complex Compliance Challenges

Source: ISACA

United Arab Emirates Cyber Security Council Reveals Over 200,000 Daily Attacks

Source: Emirates News Agency

This Cyber Briefing is powered by https://911cyber.app 

Get help from cybersecurity first responders today!

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://911cyber.app/cyber-briefing

#cyberbriefing #informationsecurity #Android #Malware #Azure #Routers #Encryption #Ukraine #OWASP #CIA

👉 What's happening in cybersecurity today?

🚨 #CyberAlerts

Windows BitLocker Flaw Lets Attackers Bypass Encryption Without Tampering

Source: Neodyme

Malicious PyPI Package Steals Discord Tokens and Installs Backdoor

Source: Socket

Sneaky 2FA Phishing Kit Targets Microsoft 365 Accounts and Steals Credentials

Source: Quentin Bourgue, and Grégoire Clermont via Sekoia

Microsoft Shares Temporary Fix for Outlook Crashes in Classic Version

Source: Microsoft

New IoT Botnet Exploits Vulnerabilities in Devices to Launch Global DDoS Attacks

Source: Trend Micro

💥 #CyberIncidents

Software Supplier Otelier Hit by Data Breach Exposing Major Hotel Chains

Source: Have I Been Pwned

NewsBank Reports Data Breach Exposing Sensitive Personal Data

Source: Office of the Maine General Attorney

Capital One Customers Face Extended Outage Due to Vendor Power Failure

Source: PYMNTS

Blacon High School in Cheshire UK Closes After Ransomware Attack

Source: BBC News

Garden of Life Notifies Customers of Payment Card Data Breach 

Source: Office of the Maine General Attorney

📢 #CyberNews

TikTok Goes Dark in U.S. as Federal Ban Takes Effect Over Security Concerns

Source: Supreme Court of the United States

U.S. Sanctions Chinese Cyber Actor and Company Over Treasury Breach

Source: U.S. Department of the Treasury

CISA Calls for Action to Bridge US Software Understanding Gap

Source: U.S. Cybersecurity Infrastructure Security Agency

Rhino Linux 2025.1 Brings Major Updates and New Features for Users

Source: Rhino Linux

Google Launches Open Source Library for Software Composition Analysis

Source: Google

This Cyber Briefing is powered by https://911cyber.app 

Get help from cybersecurity first responders today!

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://911cyber.app/cyber-briefing

#cyberbriefing #informationsecurity #TikTok #Windows #Discord #Microsoft #CapitalOne #China #Linux #Google

👉 What are the latest cybersecurity alerts, incidents, and news?

🚨 #CyberAlerts

Star Blizzard Targets WhatsApp Accounts in New Spear-Phishing Campaign

Source: Microsoft Threat Intelligence

New UEFI Secure Boot Vulnerability Allows Malicious Code Execution

Source: David Smolár via ESET

Misconfiguration Bypasses Microsoft's NTLMv1 Block in Active Directory

Source: Dor Segal via Silverfort

Malicious Code Concealed in Images to Deliver Keyloggers and Stealers

Source: HP Wolf Security

Over 4 Million Systems Exposed to Tunneling Protocol Vulnerabilities

Source: Professor Mathy Vanhoef, and Angelos Beitis from KU Leuven 

💥 #CyberIncidents

Chinese Hackers Breach Janet Yellen’s Computer at U.S. Treasury

Source: Bloomberg

DoS Attack Disrupts Greek Government Network Services Causing Slowdowns

Source: Tovima

Idols NFT Exploit Leads to $324K Loss Through Vulnerability in Smart Contract

Source: SolidityScan

Cascade Financial Services Hit by Employee Email Breach Affecting Thousands

Source: Office of the Maine General Attorney

Tenki.jp Faces Network Disruptions Due to DDoS Attack Affecting Web and App Services

Source: Tenki

📢 #CyberNews

Biden Signs Executive Order to Strengthen US Cybersecurity Against Growing Threats

Source: The White House

FTC Updates Children’s Online Privacy Rules with New Consent Requirements

Source: US Federal Trade Commission (FTC)

U.S. Sanctions North Korean IT Network Supporting Weapons Programs

Source: U.S. Treasury Department

European Privacy Group Files GDPR Complaints Against Chinese Tech Firms

Source: Noyb

FTC Bans General Motors from Selling Sensitive Driver Data for Five Years

Source: US Federal Trade Commission (FTC)

This Cyber Briefing is powered by https://911cyber.app 

Get help from cybersecurity first responders today!

👉 What's going on in the cyber world today?

🚨 #CyberAlerts

Python Malware Enables RansomHub Ransomware to Exploit Network Vulnerabilities

Source: Andrew Nelson via GuidePoint Security

MikroTik Botnet Exploits DNS Flaws to Spread Malware Across 20000 Domains

Source: David Brunsdon via Infoblox

Fake Google Ads Campaign Targets Users to Steal Credentials and Hijack Accounts

Source: Jérôme Segura via Malwarebytes

Cybercriminals Target California Wildfire Victims With Phishing Scams

Source: Veriti

Lazarus Group Targets Web3 Developers to Steal Cryptocurrency and Data

Source: Ryan Sherstobitoff via SecurityScorecard

💥 #CyberIncidents

University of Oklahoma Investigates Ransomware Attack and Data Breach Claims

Source: BeyondMachines

Belsen Group Leaks Sensitive Data of 15000 FortiGate Devices on Dark Web

Source: Kevin Beaumont via Medium

Carruth Compliance Consulting Data Breach Exposes Employee Records

Source: Sabinna Pierre via KGW8

Gateshead Council Hit by Cyberattack Exposing Personal Data of UK Residents

Source: Daniel Holland via BBC

Fredericksburg City Public Schools Impacted by PowerSchool Cyber Incident

Source: Fredericksburg City Public Schools

📢 #CyberNews

UN Security Council Discusses Global Spyware Threat and Protection for Diplomats

Source: United Nations

EU Unveils Cybersecurity Plan to Shield Hospitals From Growing Cyberattack Threats

Source: Sam Clark and Giedrė Peseckyte via Politico

CISA Issues Guidance on Using Expanded Microsoft 365 Cloud Logs

Source: US Cybersecurity Infrastructure Security Agency

FTC Orders GoDaddy to Improve Cybersecurity After Multiple Data Breaches

Source: US Federal Trade Commission (FTC)

Apple Opens Information Security Internship for Students Interested in Cybersecurity

Source: Apple

This Cyber Briefing is powered by https://911cyber.app 

Get help from cybersecurity first responders today!

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://911cyber.app/cyber-briefing

#cyberbriefing #informationsecurity #Python #Ransomware #Google #California #Phishing #Microsoft #GoDaddy #Apple

👉 What's trending in cybersecurity today?

🚨 #CyberAlerts

Google OAuth Flaw Exposes Millions to Data Breach Risk via Domain Ownership Change

Source: Dylan Ayrey via Truffle Security

Critical Cryptojacking Code Found in Kong Ingress Controller Image

Source: 

Malicious Plugin Targeting 5000 WordPress Sites Exfiltrates Sensitive Data

Source: Himanshu Anand via c/side

Microsoft Patches 161 Vulnerabilities Including Active Exploits in 2025 Security Update

Source: Microsoft

Critical Security Flaws in SimpleHelp Expose Remote Access Servers to Potential Exploits

Source: Naveen Sunkavally via Horizon3.ai

💥 #CyberIncidents

Mortgage Investors Group Confirms Cyberattack Exposes Customer Data

Source: Mortgage Investors Group 

Pro-Ukraine Hackers Target Russian Procurement Platform Roseltorg

Source: Roseltorg via Telegram

E-Benefit Announces Data Breach Exposing Sensitive Information

Source: E-Benefit 

Kafene Reports Data Breach Involving Sensitive Customer Information

Source: Attorney General of Texas

Alliance Public Schools Announces Data Breach After PowerSchool Incident

Source: Shaun Friedrichsen via The Alliance Times-Herald

📢 #CyberNews

FBI Successfully Removes PlugX Malware from Over 4200 Infected Devices Worldwide

Source: U.S. Department of Justice 

US Issues Final Rule Barring Chinese and Russian Car Tech Imports

Source: U.S. Bureau of Industry and Security, Department of Commerce

Biden Signs Executive Order to Accelerate AI Infrastructure Development in the US

Source: The White House

North Korean Hacking Groups Steal $659 Million Cryptocurrency in 2024

Source: Ministry of Foreign Affairs of Japan

Orchid Security Raises $36 Million to Tackle Identity Management with AI

Source: Sam Sabin via Axios

This Cyber Briefing is powered by https://911cyber.app 

Get help from cybersecurity first responders today!

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://911cyber.app/cyber-briefing

#cyberbriefing #informationsecurity #Google #Russia #China #AI #Crypto #Microsoft #NorthKorea #FBI

👉 What's the latest in the cyber world today?

🚨 #CyberAlerts

Microsoft Uncovers a System Integrity Protection Bypass Vulnerability in macOS

Source: Microsoft Threat Intelligence

Codefinger Hackers Target Amazon S3 Buckets with Ransomware Encryption Attacks

Source: Halcyon

Critical Aviatrix Controller Flaw Exploited for Mining and Backdoors

Source: Gal Nagli, Merav Bar, Gili Tikochinski, Shaked Tanchuma via Wiz

CISA Adds Vulnerability in BeyondTrust Products to KEV Catalog

Source: CISA

Hackers Possibly Linked to Kremlin Target Kazakhstan in Espionage Campaign

Source: Amaury G., Maxime A., Erwan Chevalier, Felix Aimé via Sekoia

💥 #CyberIncidents

Gravy Analytics Confirms Breach Exposing Location Data From Millions of Users

Source: Aslak Øgrim Borgersrud, Martin Gundersen, Øyvind Bye Skille, and Julie Helene Günther via NRK

Path of Exile 2 Account Compromise Exposes Major Security Flaws

Source: Jonathan Rogers via GhazzyTV

West Haven Connecticut IT Systems Hit by Security Incident

Source: City of West Haven

Cullman City Schools Addresses PowerSchool Cybersecurity Incident

Source: The Cullman Times

Avery Products Corporation Alerts on Ransomware Incident Affecting Personal Data

Source: Attorney General of the Commonwealth of Massachusetts

📢 #CyberNews

Five Eyes Urges Critical Infrastructure to Choose Secure By Design OT Products

Source: CISA

UK Government Proposes Ransomware Payment Ban for Public Bodies

Source: UK Government 

Texas Sues Allstate Over Alleged Unlawful Data Collection and Privacy Violations

Source: Attorney General of Texas

HuiOne Guarantee Becomes Largest Online Illicit Marketplace

Source: Elliptic

Mercedes-Benz Expands Partnership with Google to Enhance Car AI Assistant Features

Source: Google

This Cyber Briefing is powered by https://911cyber.app 

Get help from cybersecurity first responders today!

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://911cyber.app/cyber-briefing

#cyberbriefing #informationsecurity

👉 What's happening in cybersecurity today?

🚨 #CyberAlerts

Crypto Attackers Use Transaction Simulation Spoofing to Steal Ethereum

Source: ScamSniffer

IBM Addresses Security Flaw in Robotic Process Automation Exposing Data

Source: IBM

Cybercriminals Distribute Malware Through Social Media and YouTube

Source: Trend Micro

AI-Driven Ransomware Group FunkSec Blurs Hacktivism and Cybercrime

Source: Check Point

WordPress Skimmer Targets Checkout Pages with Malicious Code

Source: Puja Srivastava via Sucuri

💥 #CyberIncidents

Telefonica Hit by Breach Exposing 236K Customer Records and Internal Documents

Source: Infostealers

Eindhoven University Hit By Cyberattack Leads To Campus Disruption

Source: Eindhoven University of Technology

Swiss Federal Administration Faces Cyberattack Disrupting IT Systems

Source: Swissinfo.ch

Luxembourg Government Websites Targeted in Cyberattack

Source: Florian Javel via LuxembourgTimes

Prime Technological Services Reports Potential Data Breach

Source: Attorney General of the Commonwealth of Massachusetts

📢 #CyberNews

IRS Relaunches Identity Protection Personal Identification Number Program

Source: IRS

Microsoft Takes Legal Action Against Foreign Hackers Exploiting AI Services

Source: Microsoft

U.S. Charges Three Russian Nationals Over Crypto Money Laundering Services

Source: U.S. Department of Justice (DoJ)

New York Sues to Recover $2 Million in Crypto Stolen in Remote Job Scam

Source: Supreme Court of The State of New York

Italy Explores Telecom Security Deal with Private Firms Amid Controversy

Source: Giada Zampano via AP News

This Cyber Briefing is powered by https://911cyber.app 

Get help from cybersecurity first responders today!

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://911cyber.app/cyber-briefing

#cyberbriefing #informationsecurity #Crypto #Ethereum #IBM #SocialMedia #YouTube #Hacktivism #Cybercrime #IRS #SpaceX #Musk