Cybersecurity researchers have uncovered malware campaigns using ClickFix social engineering tactics to deploy Amatera Stealer and NetSupport RAT, tracked under the name EVALUSION. These campaigns involve sophisticated evasion techniques and targeted phishing methods to steal sensitive data and remote control systems. #Amatera #ClickFix #EVALUSION #NetSupport…
Category: Cyber Security News
Jaguar Land Rover suffered a significant financial loss of £680 million ($896 million) due to a cyberattack that halted vehicle production and increased response costs. The incident also affected thousands of companies in the supply chain, causing widespread economic impact and government intervention. #JaguarLandRover #Cyberattack…
Hackers are actively exploiting a critical vulnerability in Fortinet’s FortiWeb devices, prompting urgent patching requirements from CISA and Fortinet. This widespread exploitation highlights the ongoing cybersecurity risks associated with outdated web application firewalls. #Fortinet #CVE2025-64446…
A hacker accessed Princeton University’s donor and student information database for less than 24 hours, potentially viewing personal details like names and addresses. This incident is part of a series of recent data breaches in Ivy League institutions, highlighting ongoing cybersecurity risks. #PrincetonUniversity #DataBreach #IvyLeague #CyberAttack…
Iranian cyber espionage group APT42, associated with IRGC, has been targeting defense and government officials using social engineering and long-term relationship-building tactics. Their sophisticated operation employs modular malware and covert communication channels like Telegram and Discord for persistent data exfiltration. #APT42 #IRGC #TameCat #SpearSpecter…
Logitech International confirmed a data breach involving the exfiltration of some employee and customer data, linked to a zero-day vulnerability exploited by the CL0P ransomware group. The company has emphasized that its products and operations remain unaffected and that cybersecurity insurance will cover related costs. #CL0P #OracleEBSVulnerability…
The Dragon Breath threat actor uses sophisticated multi-stage loaders and Trojanized installers to deliver Gh0st RAT targeting Chinese-speaking users. Their campaigns evolve by employing complex infection chains and legitimate software to evade security defenses. #DragonBreath #Gh0stRAT #APTQ27 #MiuutiGroup…
Logitech recently disclosed a data breach involving unauthorized data exfiltration linked to a zero-day vulnerability in a third-party software platform. The incident is part of a broader campaign targeting Oracle E-Business Suite users, with over 50 victims including major organizations. #Logitech #Cl0p #OracleEBS #FIN11…
Five individuals have pleaded guilty in US courts for aiding North Korean IT workers in gaining employment at over 130 companies, generating millions in salary payments for North Korea. The scheme involved false identities, fake placements, and cryptocurrency heists, illustrating the extensive reach of North Korea’s cyber activities. #NorthKorea #APT38…
DoorDash has experienced a data breach caused by a social engineering attack targeting an employee, leading to the theft of customer and merchant personal information. The incident has been contained, with no evidence of misuse of the stolen data reported so far. #DoorDash #SocialEngineering…
Eurofiber France experienced a cybersecurity breach through a software vulnerability, leading to data exfiltration from its ticket management and ATE portals. The company has secured systems, notified authorities, and increased protective measures, with ongoing investigations revealing extensive potential data exposure. #EurofiberFrance #ByteToBreach…
Siemens’ SICAM P850 and P855 products are affected by vulnerabilities that could allow remote exploits, such as CSRF and incorrect permission issues. CISA advises updating to version 3.11 or later and restricting network access to mitigate these risks. #Siemens #ICSVulnerabilities…
Google reports a significant decline in memory safety vulnerabilities in Android due to the adoption of Rust, with vulnerabilities dropping below 20%. The move to Rust has also improved software delivery speed and efficiency, prompting plans to expand its use within the Android ecosystem. #AndroidVulnerabilities #RustProgrammingLanguage…
The U.S. Justice Department has taken significant legal actions against North Korean operatives involved in identity fraud, virtual currency theft, and illicit financing supporting North Korea’s weapons programs. These efforts highlight the ongoing threat of DPRK-linked cyber activities to U.S. companies and financial systems. #APT38 #NorthKoreaCyberThreats…
Security researchers have uncovered an evolved North Korean-linked malware campaign called Contagious Interview that uses JSON storage services to host malicious code. The attackers target software developers and Web3 professionals through spoofed recruiter messages and deliver payloads like BeaverTail and InvisibleFerret for credential theft and remote access. #ContagiousInterview #BeaverTail #InvisibleFerret #NorthKorea…