Collecting Cyber-News from over 60 sources

Tag: cyber

Columbia University Data Breach Exposes Personal and Financial Data of 870,000

Aug 8, 2025 3:11 PM

Tags: breach, cyber, cybersecurity, data, data-breach, finance

Columbia University disclosed a significant cybersecurity incident that compromised personal and financial information of nearly 870,000 individuals, making it one of the largest data breaches affecting an educational institution this year. The breach, which occurred between May 16 and June 2025, was discovered on July 8, 2025, and affected individuals were notified on August 7,…
VexTrio TDS Deploys Malicious VPN Apps on Google Play and App Store

Aug 8, 2025 3:11 PM

Tags: apple, cyber, google, malicious, threat, vpn

VexTrio, a sophisticated threat actor known for operating a massive traffic distribution system (TDS), has expanded its malicious activities by deploying fake VPN applications on major app stores, including Google Play and the Apple App Store. Originating from a merger between Italian spammers and Eastern European developers around 2020, VexTrio’s TDS facilitates the redirection of…
NSFOCUS Monthly APT Insights June 2025

Aug 8, 2025 2:11 PM

Tags: apt, attack, cyber, network, threat, usa

Regional APT Threat Situation In June 2025, the global threat hunting system of Fuying Lab detected a total of 33 APT attack activities. These activities were mainly distributed in regions such as South Asia, East Asia, West Asia, Eastern Europe, and South America, as shown in the figure below. In terms of organizational activity, the…The…
NSFOCUS Monthly APT Insights June 2025

Aug 8, 2025 2:11 PM

Tags: apt, attack, cyber, network, threat, usa

Regional APT Threat Situation In June 2025, the global threat hunting system of Fuying Lab detected a total of 33 APT attack activities. These activities were mainly distributed in regions such as South Asia, East Asia, West Asia, Eastern Europe, and South America, as shown in the figure below. In terms of organizational activity, the…The…
NSFOCUS Monthly APT Insights June 2025

Aug 8, 2025 2:11 PM

Tags: apt, attack, cyber, network, threat, usa

Regional APT Threat Situation In June 2025, the global threat hunting system of Fuying Lab detected a total of 33 APT attack activities. These activities were mainly distributed in regions such as South Asia, East Asia, West Asia, Eastern Europe, and South America, as shown in the figure below. In terms of organizational activity, the…The…
Record-Breaking GreedyBear Attack Uses 650 Hacking Tools to Steal $1M from Victims

Aug 8, 2025 2:11 PM

Tags: attack, browser, crypto, cyber, group, hacking, infrastructure, malicious, malware, phishing, threat, tool, windows

The threat actor group dubbed GreedyBear has orchestrated an industrial-scale operation blending malicious browser extensions, executable malware, and phishing infrastructure to siphon over $1 million in cryptocurrency from victims. This coordinated assault, uncovered by Koi Security researchers, leverages a staggering 650 hacking tools comprising 150 weaponized Firefox extensions and nearly 500 malicious Windows executables demonstrating…
Multiple Security Vulnerabilities Found in WWBN AVideo, MedDream, and Eclipse ThreadX

Aug 8, 2025 2:11 PM

Tags: cisco, cyber, risk, software, vulnerability

Cisco Talos’ Vulnerability Discovery & Research team has disclosed a total of 12 critical security vulnerabilities across three popular software platforms, highlighting significant security risks that could potentially impact millions of users worldwide. The disclosure includes seven vulnerabilities in WWBN AVideo, four in MedDream PACS Premium, and one in Eclipse ThreadX FileX, all of which…
Windows UAC Bypass Exploits Character Map Tool for Privilege Escalation

Aug 8, 2025 2:11 PM

Tags: control, cyber, cybersecurity, exploit, tool, unauthorized, vulnerability, windows

Cybersecurity researchers have uncovered a new technique that allows attackers to bypass Windows User Account Control (UAC) protections by exploiting an unexpected vulnerability in the system’s Private Character Editor tool, potentially granting unauthorized administrative privileges without user consent. The exploit targets eudcedit.exe, Windows’ Private Character Editor located in C:\Windows\System32, which is typically used for creating…
PyPI Issues Advisory to Prevent ZIP Parser Confusion Attacks on Python Package Installers

Aug 8, 2025 2:11 PM

Tags: advisory, attack, cyber, exploit, pypi, tool, vulnerability

The Python Package Index (PyPI) has announced new restrictions aimed at mitigating ZIP parser confusion attacks that could exploit discrepancies in how Python package installers and inspectors handle ZIP archives. This move comes in response to vulnerabilities identified in tools like the uv installer, which exhibits different extraction behaviors compared to Python-based installers relying on…
Windows UAC Bypass Exploits Character Map Tool for Privilege Escalation

Aug 8, 2025 2:11 PM

Tags: control, cyber, cybersecurity, exploit, tool, unauthorized, vulnerability, windows

Cybersecurity researchers have uncovered a new technique that allows attackers to bypass Windows User Account Control (UAC) protections by exploiting an unexpected vulnerability in the system’s Private Character Editor tool, potentially granting unauthorized administrative privileges without user consent. The exploit targets eudcedit.exe, Windows’ Private Character Editor located in C:\Windows\System32, which is typically used for creating…
Leaked Credentials Up 160%: What Attackers Are Doing With Them

Aug 8, 2025 2:11 PM

Tags: breach, credentials, cyber, data, data-breach, tactics

When an organization’s credentials are leaked, the immediate consequences are rarely visible”, but the long-term impact is far-reaching. Far from the cloak-and-dagger tactics seen in fiction, many real-world cyber breaches begin with something deceptively simple: a username and password.According to Verizon’s 2025 Data Breach Investigations Report, leaked credentials accounted for 22% of breaches First seen…
PyPI Issues Advisory to Prevent ZIP Parser Confusion Attacks on Python Package Installers

Aug 8, 2025 2:11 PM

Tags: advisory, attack, cyber, exploit, pypi, tool, vulnerability

The Python Package Index (PyPI) has announced new restrictions aimed at mitigating ZIP parser confusion attacks that could exploit discrepancies in how Python package installers and inspectors handle ZIP archives. This move comes in response to vulnerabilities identified in tools like the uv installer, which exhibits different extraction behaviors compared to Python-based installers relying on…
Windows UAC Bypass Exploits Character Map Tool for Privilege Escalation

Aug 8, 2025 2:11 PM

Tags: control, cyber, cybersecurity, exploit, tool, unauthorized, vulnerability, windows

Cybersecurity researchers have uncovered a new technique that allows attackers to bypass Windows User Account Control (UAC) protections by exploiting an unexpected vulnerability in the system’s Private Character Editor tool, potentially granting unauthorized administrative privileges without user consent. The exploit targets eudcedit.exe, Windows’ Private Character Editor located in C:\Windows\System32, which is typically used for creating…
Leaked Credentials Up 160%: What Attackers Are Doing With Them

Aug 8, 2025 2:11 PM

Tags: breach, credentials, cyber, data, data-breach, tactics

When an organization’s credentials are leaked, the immediate consequences are rarely visible”, but the long-term impact is far-reaching. Far from the cloak-and-dagger tactics seen in fiction, many real-world cyber breaches begin with something deceptively simple: a username and password.According to Verizon’s 2025 Data Breach Investigations Report, leaked credentials accounted for 22% of breaches First seen…
US Federal Judiciary Tightens Security Following Escalated Cyber-Attacks

Aug 8, 2025 12:12 PM

Tags: attack, breach, cyber

The judiciary announced stronger protections for its case management system following reports of a major breach of sensitive court documents in multiple states First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/us-judiciary-security-cyber-attacks/
CISA Issues 10 ICS Advisories Detailing Vulnerabilities and Exploits

Aug 8, 2025 12:12 PM

Tags: automation, cisa, control, cyber, cybersecurity, exploit, infrastructure, vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) has released ten industrial control systems (ICS) advisories on August 7, 2025, highlighting critical vulnerabilities across various industrial automation and control platforms. These advisories represent a comprehensive effort to address security gaps that could potentially impact critical infrastructure operations across multiple sectors including manufacturing, energy, and transportation systems.…
US Confirms Takedown of BlackSuit Ransomware Behind 450+ Hacks

Aug 8, 2025 11:11 AM

Tags: cyber, cybercrime, infrastructure, international, law, network, ransom, ransomware

Federal law enforcement agencies have successfully dismantled the critical infrastructure of BlackSuit ransomware, a sophisticated cybercriminal operation that has compromised over 450 victims across the United States since 2022 and collected more than $370 million in ransom payments. Major International Operation Targets Cyber Criminal Network ICE’s Homeland Security Investigations (HSI) led the coordinated takedown in…
Amazon ECS Internal Protocol Exploited to Steal AWS Credentials from Other Tasks

Aug 8, 2025 11:11 AM

Tags: attack, container, credentials, cyber, exploit, malicious, service, vulnerability

Security researchers have disclosed a critical vulnerability in Amazon Elastic Container Service (ECS) that allows malicious containers to steal AWS credentials from other tasks running on the same EC2 instance. The attack, dubbed >>ECScape,
Malicious Go Packages Used by Threat Actors to Deploy Obfuscated Remote Payloads

Aug 8, 2025 10:11 AM

Tags: cyber, exploit, github, malicious, risk, threat

Socket’s Threat Research Team has identified eleven malicious Go packages distributed via GitHub, with ten remaining active on the Go Module Mirror, posing ongoing risks to developers and CI/CD pipelines. Eight of these packages employ typosquatting techniques, mimicking legitimate modules to exploit namespace confusion in Go’s decentralized ecosystem, where direct imports from repositories can lead…
Over 60 Malicious RubyGems Packages Used to Steal Social Media and Marketing Credentials

Aug 8, 2025 10:11 AM

Tags: automation, credentials, cyber, data-breach, malicious, threat, tool, wordpress

Socket’s Threat Research Team has exposed a persistent campaign involving over 60 malicious RubyGems packages that masquerade as automation tools for platforms like Instagram, Twitter/X, TikTok, WordPress, Telegram, Kakao, and Naver. Active since at least March 2023, the threat actor operating under aliases such as zon, nowon, kwonsoonje, and soonje has deployed these gems to…
What is a CISO? The top IT security leader role explained

Aug 8, 2025 9:12 AM

Tags: access, authentication, breach, business, ceo, cio, cisa, ciso, compliance, computer, container, control, corporate, credentials, cyber, cybersecurity, data, ddos, defense, dns, encryption, exploit, finance, firewall, framework, fraud, guide, Hardware, healthcare, infosec, infrastructure, intelligence, international, jobs, kubernetes, mitigation, msp, mssp, network, nist, programming, RedTeam, regulation, risk, risk-management, security-incident, service, skills, software, strategy, technology, threat, training, vpn, zero-day, zero-trust

. You’ll often hear people say the difference between the two is that CISOs focus entirely on information security issues, while a CSOs remit is wider, also taking in physical security as well as risk management.But reality is messier. Many companies, especially smaller ones, have only one C-level security officer, called a CSO, with IT…
Facebook-Konto einer Organisation zum Schutz von Elefanten gehackt

Aug 8, 2025 8:12 AM

Tags: attack, cyber

Important notice: Cyber attack on Save the Elephants and ElephantVoices First seen on savetheelephants.org Jump to article: savetheelephants.org/news/award-winning-elephanimportant-notice-cyber-attack-on-save-the-elephants-and-elephantvoices/
Facebook-Konto einer Organisation zum Schutz von Elefanten gehackt

Aug 8, 2025 8:12 AM

Tags: attack, cyber

Important notice: Cyber attack on Save the Elephants and ElephantVoices First seen on savetheelephants.org Jump to article: savetheelephants.org/news/award-winning-elephanimportant-notice-cyber-attack-on-save-the-elephants-and-elephantvoices/
From fake CAPTCHAs to RATs: Inside 2025’s cyber deception threat trends

Aug 8, 2025 8:12 AM

Tags: captcha, cyber, cybercrime, rat, social-engineering, threat, tool

Cybercriminals are getting better at lying. That’s the takeaway from a new LevelBlue report, which outlines how attackers are using social engineering and legitimate tools to … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/08/cyber-deception-threat-trends-2025/
Facebook-Konto einer Organisation zum Schutz von Elefanten gehackt

Aug 8, 2025 8:12 AM

Tags: attack, cyber

Important notice: Cyber attack on Save the Elephants and ElephantVoices First seen on savetheelephants.org Jump to article: savetheelephants.org/news/award-winning-elephanimportant-notice-cyber-attack-on-save-the-elephants-and-elephantvoices/
Flipper Zero Dark Web Firmware Cracks Rolling Code Security in Modern Cars

Aug 8, 2025 8:12 AM

Tags: attack, cyber, cybersecurity, dark-web, firmware, threat

Security researchers have discovered alarming new firmware for the popular Flipper Zero device that can completely bypass the rolling code security systems protecting millions of modern vehicles. The breakthrough attack, demonstrated by YouTube channel Talking Sasquatch, represents a significant escalation in automotive cybersecurity threats, requiring only a single intercepted signal to compromise a vehicle’s entire…
CISA Issues Urgent Advisory to Address Microsoft Exchange Flaw

Aug 8, 2025 8:12 AM

Tags: advisory, authentication, cisa, cloud, cve, cyber, cybersecurity, flaw, infrastructure, microsoft, vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) has issued Emergency Directive 25-02 on August 7, 2025, requiring federal agencies to immediately address a critical vulnerability in Microsoft Exchange hybrid configurations that could allow attackers to escalate from on-premises systems to cloud environments. Critical Security Vulnerability Discovered CISA has identified a post-authentication vulnerability designated CVE-2025-53786 affecting…
Flipper Zero Dark Web Firmware Cracks Rolling Code Security in Modern Cars

Aug 8, 2025 8:12 AM

Tags: attack, cyber, cybersecurity, dark-web, firmware, threat

Security researchers have discovered alarming new firmware for the popular Flipper Zero device that can completely bypass the rolling code security systems protecting millions of modern vehicles. The breakthrough attack, demonstrated by YouTube channel Talking Sasquatch, represents a significant escalation in automotive cybersecurity threats, requiring only a single intercepted signal to compromise a vehicle’s entire…
Retbleed Vulnerability Exploited to Access Any Process’s Memory on Newer CPUs

Aug 8, 2025 8:12 AM

Tags: access, cyber, exploit, flaw, threat, vulnerability

Security researchers have successfully demonstrated a sophisticated exploit of theRetbleed vulnerability, a critical CPU security flaw that allows attackers to read arbitrary memory from any process running on affected systems. The exploit, which builds upon research originally published by ETH Zürich in 2022, showcases how modern processor vulnerabilities continue to pose significant threats to system…
CISA Issues Urgent Advisory to Address Microsoft Exchange Flaw

Aug 8, 2025 8:12 AM

Tags: advisory, authentication, cisa, cloud, cve, cyber, cybersecurity, flaw, infrastructure, microsoft, vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) has issued Emergency Directive 25-02 on August 7, 2025, requiring federal agencies to immediately address a critical vulnerability in Microsoft Exchange hybrid configurations that could allow attackers to escalate from on-premises systems to cloud environments. Critical Security Vulnerability Discovered CISA has identified a post-authentication vulnerability designated CVE-2025-53786 affecting…