A sophisticated China-linked threat actor, UAT-7290, is expanding its cyber-espionage operations into Southeastern Europe, targeting telecommunications organizations. The group utilizes Linux-based malware, initial access techniques, and operational relay infrastructure to compromise edge network devices. #UAT7290 #CyberEspionage #LinuxMalware #ChinaThreatActors #SoutheasternEurope
Category: Cyber Security News
A Texas-based company, Gulshan Management Services, experienced a significant data breach affecting over 377,000 individuals. The incident exposed sensitive personal and financial data, leading to ongoing lawsuits and investigations. #GulshanManagement #DataBreach…
Attackers exploit email routing misconfigurations and spoof protections to send convincing internal-looking phishing emails, often using PhaaS platforms like Tycoon2FA for credential theft and financial scams. Proper configuration of SPF, DMARC, and email connectors can stop these sophisticated impersonation attacks. #Tycoon2FA #PhishingCampaigns…
A China-nexus threat actor dubbed UAT-7290 has been active since 2022, primarily targeting telecommunications in South Asia and Southeastern Europe with a focus on espionage and network reconnaissance. Their operations involve deploying sophisticated malware like RushDrop, DriveSwitch, and SilentRaid, and establishing infrastructure for ongoing malicious activities. #UAT-7290 #StonePanda #RedFoxtrot #SilentRaid…
Cybersecurity researchers have uncovered a new campaign exploiting WhatsApp to distribute the Astaroth banking trojan in Brazil, employing multi-language modular components. This evolving tactic significantly enhances malware spread and data theft capabilities through social engineering and automated contact propagation. #Astaroth #Guildma #WaterMakara #STAC3150…
OpenAI has launched ChatGPT Health, a new AI-powered service focusing on safeguarding sensitive medical and wellness data with enhanced privacy protections. Despite these measures, experts express concerns over the lack of HIPAA protections and potential privacy risks associated with sharing health information. #OpenAI #ChatGPTHealth #DataPrivacy #HIPAA #HealthInformation…
A Texas-based data broker, Rickenbacher Data LLC (Datamasters), has been fined by the California Privacy Protection Agency for illegally selling sensitive health and personal information. The CPPA ordered them to cease selling Californians’ data and imposed a $45,000 penalty, citing risks of misuse for targeted advertising or other malicious purposes. #Datamasters…
CISA has retired ten emergency directives after addressing the vulnerabilities through the Known Exploited Vulnerabilities catalog and successful remediation efforts. These directives included patches for critical issues in Microsoft, VMware, F5, and Cisco products, reflecting the agency’s active management of systemic cybersecurity risks. #CISA #KEV #MicrosoftVulnerabilities #Cisco #F5…
Blackbird.AI, a narrative intelligence firm, has secured $28 million to expand its AI-driven platform that combats disinformation, fake news, and manipulation campaigns. The company’s tools are widely adopted by Fortune 500, government, and technology organizations to protect their reputation from AI-generated threats. #Deepfake #Disinformation…
CrowdStrike plans to acquire SGNL for $740 million to enhance its identity security capabilities, focusing on real-time access control for various identities. This move aims to address the growing market demand, with the identity security market projected to nearly double by 2029. #CrowdStrike #SGNL #IdentitySecurity #AI #CybersecurityMergers…
The UK government has released a Cyber Action Plan focused on strengthening its own digital resilience, but it offers limited guidance for private sector cybersecurity. While highlighting systemic vulnerabilities and the importance of resilience, the plan may inadvertently complicate private industry’s security efforts due to skills shortages and evolving threats. #CrowdStrikeIncident…
A recent update to CISA’s KEV catalog includes a 16-year-old PowerPoint flaw and a new severe vulnerability in HPE’s OneView software. These vulnerabilities highlight ongoing risks in widely used enterprise and productivity software. #CISAKEV #PowerPointVulnerability #HPEOneView #CodeInjection…
Microsoft will enforce multi-factor authentication (MFA) for all users accessing the Microsoft 365 admin center starting in February 2026, enhancing account security and reducing risk of unauthorized access. Organizations are urged to enable MFA beforehand to prevent service disruptions, as it significantly boosts protection against attacks like phishing and credential stuffing. #Microsoft365 #AzurePortal #MFAenforcement
Microsoft is addressing an Exchange Online outage caused by a code conflict affecting IMAP4 mailbox access, with a fix already deployed. The incident highlights ongoing challenges with Azure and Microsoft 365 services, impacting users globally. #ExchangeOnline #IMAP4
Cisco released security updates addressing a medium-severity flaw in its ISE and ISE-PIC products that could allow unauthorized access to sensitive data via XML parsing vulnerabilities. The flaws, along with issues in Snort 3, highlight the importance of updating affected Cisco systems to prevent exploitation. #CVE-2026-20029 #CiscoISE #Snort3…