A Ukrainian national pleaded guilty to using Nefilim ransomware to attack companies in the US, Canada, and Australia, targeting organizations with over $200 million in revenue. The case highlights the ongoing threat of ransomware-as-a-service and the involvement of international cybercriminals. #Nefilim #RansomwareAsAService…
Category: Cyber Security News
The Cybersecurity and Infrastructure Security Agency, NSA, and Canadian Centre for Cyber Security released an updated report on the BRICKSTORM backdoor, revealing new malware samples and detection methods. They emphasize the importance of deploying new IOCs and signatures to identify and respond to BRICKSTORM infections effectively. #BRICKSTORM #WebSocket #YARARules…
This update highlights how malicious actors impersonate U.S. government officials through smishing and vishing to deceive targets and solicit sensitive information or money. It emphasizes the importance of verifying identities and being cautious with sensitive communication to prevent fraud. #Impersonation #Smishing #Vishing #FBI…
Cybersecurity researchers have uncovered a malicious npm package named “lotusbail” that masquerades as a WhatsApp API but secretly intercepts messages and links attackers to victims’ WhatsApp accounts. The package has been widely downloaded, enabling attackers to steal credentials, harvest contacts, and maintain persistent access—posing a significant threat to users. #WhatsAppSecurity #npmMalware…
South Korea is implementing a facial recognition requirement for new mobile phone registrations to combat identity theft and phone scams. The initiative aims to verify users in real-time by matching ID photos with actual faces, enhancing security across major carriers. #SouthKorea #FacialRecognition…
A cyberespionage group named Goffee has launched a new campaign targeting Russian military and defense organizations, using malicious Excel files to deliver a backdoor called EchoGather. The group, believed to be pro-Ukrainian, is actively developing new methods to evade detection, though their operations still show signs of evolving tradecraft. #Goffee #EchoGather…
A suspected DDoS attack disrupted France’s La Poste services, affecting online platforms and postal operations during a busy season. While customer data was not compromised, postal and banking activities experienced delays, causing inconvenience ahead of Christmas. #DDoS #LaPoste #France…
Shannon Miller emphasizes the importance of ethics, integrity, and human-centered design in cybersecurity to protect vulnerable and marginalized groups. Her work spans digital safety, domestic abuse prevention, and community support, highlighting the need for technology to serve humanity. #OSINT #Stalkerware…
Romania’s water authority experienced a ransomware attack that impacted about 1,000 IT systems, exploiting Windows’ BitLocker encryption. Critical operations like water management continued through manual procedures, but the attack revealed gaps in national cyber protection infrastructure. #BitLocker #RomanianWaterAuthority…
The CVE-2025-59374 relates to a historic supply-chain attack on ASUS Live Update software, specifically the ShadowHammer incident from 2018-2019. This CVE has been added to CISA’s KEV catalog mainly for documentation purposes, not because of recent active exploitation. #ShadowHammer #CVE2025-59374
Coupang, South Korea’s largest e-commerce platform, experienced a major data breach that exposed the personal information of 33.7 million customers, highlighting cybersecurity vulnerabilities. The incident underscores the importance of implementing enterprise-grade encryption solutions like D.AMO to safeguard sensitive data and prevent regulatory and reputational damages. #CoupangDataBreach #D.AMO #DataEncryption
The Clop ransomware gang compromised the University of Phoenix’s network, stealing personal and financial data of nearly 3.5 million individuals using a zero-day vulnerability in Oracle E-Business Suite. This attack is part of a larger campaign affecting multiple U.S. universities and highlights the dangers of zero-day exploits in critical systems. #Clop #OracleEBS #UniversityofthePhoenix #DataBreach
Wave Browser combines secure, efficient browsing with a commitment to environmental sustainability by reducing digital waste and supporting ocean cleanup efforts. It integrates eco-friendly features into daily browsing, enabling users to make a positive impact seamlessly. #WaveBrowser #OceanCleanup…
Romania’s water management agency was targeted by a ransomware attack utilizing the legitimate Windows tool BitLocker to lock systems. Despite the disruption, critical infrastructure like dams remained unaffected, and authorities advised against negotiating with the attackers. #BitLocker #LOLBins…
Gambit Cyber, a Dutch startup, has raised $3.4 million to expand its AI-native threat management platform, KnightGuard. The platform helps organizations identify vulnerabilities in real time and automate security responses, focusing on high-priority risks. #KnightGuard #AIagents…