The FCC plans to revoke cybersecurity regulations previously imposed on telecom companies following Chinese hacking attacks linked to Salt Typhoon. The agency argues that telecoms have already taken voluntary security measures and that the earlier regulations were overly rigid and unnecessary. #SaltTyphoon #ChineseHackers…
Category: Cyber Security News
The University of Pennsylvania is investigating a fraudulent email containing offensive language and threats of data breach sent to its students. The incident appears linked to recent cyberattacks on other universities protesting the Supreme Court’s affirmative action ruling. #UniversityOfPennsylvania #Cyberattack #DataBreach #AffirmativeActionRuling…
Russian authorities have arrested three suspects believed to be behind the Meduza Stealer malware, an advanced info-stealer targeting browser data and cryptocurrencies. The group also developed a botnet capable of disabling security protections, with investigations ongoing for additional accomplices. #MeduzaStealer #AuroraStealer #RussianCybercrime
In January 2024, a cyberattack demonstrated that even sophisticated security systems can be compromised through weak passwords, highlighting their continued importance. Effective password management, including strong policies and intelligent controls, is essential to protect organizations against breaches. #MicrosoftAttack #SpecopsPasswordPolicy
The Australian government warns of ongoing cyberattacks exploiting unpatched Cisco IOS XE devices with the BadCandy webshell, due to the CVE-2023-20198 vulnerability. Despite Cisco’s October 2023 fix, threat actors, possibly state-sponsored, continue re-infecting devices with the Lua-based webshell, leading to persistent security risks. #BadCandy #CVE202320198 #ASD
Microsoft is enhancing its Edge browser with a new scareware sensor that detects scam pages more quickly, improving the speed of Defender SmartScreen’s response. This update aims to better protect users from tech support scams and malicious websites by providing real-time alerts and faster scam detection worldwide. #EdgeScareware #SmartScreen #TechSupportScams
The University of Pennsylvania experienced a cybersecurity incident involving the dissemination of offensive fake emails impersonating the university. The emails contained malicious content and allegations, prompting an active response from Penn’s Incident Response team. #PennCyberattack #FakeEmails
A cyber espionage group known as Tick exploited a critical vulnerability (CVE-2025-61932) in Motex Lanscope Endpoint Manager to deploy backdoors and conduct malicious activities. The attack involved sophisticated tools like Gokcpdoor and Havoc, targeting East Asian organizations and utilizing cloud services for data exfiltration. #TickGroup #CVE2025-61932 #Gokcpdoor #HavocFramework…
A China-linked threat actor, UNC6384, has launched sophisticated attacks on European diplomatic and governmental targets using unpatched Windows shortcut vulnerabilities and spear-phishing campaigns. The attacks involve malware delivery via LNK files exploiting CVE-2025-9491, leading to remote access through PlugX malware. #UNC6384 #PlugX #CVE-2025-9491 #MustangPanda #EuropeanDiplomacy…
A suspected nation-state threat actor has developed Airstalk, a sophisticated malware targeting enterprise environments through supply chain attacks, leveraging AirWatch API for covert communication. The malware can exfiltrate sensitive browser data and system files, potentially compromising BPO organizations and their clients. #Airstalk #CL-STA-1009…
California’s attorney general settled a privacy violation case with Sling TV, imposing a $530,000 fine and requiring improvements in data opt-out options and child privacy protections. The investigation revealed deficiencies in how Sling TV handled user data and parental consent under the California Consumer Privacy Protection Act. #SlingTV #CCPA #ChildPrivacy #DataProtection…
The Consumer Financial Protection Bureau (CFPB) has closed its investigation into Meta’s data collection practices related to financial advertising. The case centered on whether Meta’s use of third-party financial information for targeted ads violated consumer protection laws. #Meta #CFPB #FinancialDataProtection #ConsumerProtectionAct…
Chinese hackers, specifically Storm-1849, continue targeting Cisco ASA devices used by government and financial institutions worldwide. Despite urgent patching advisories, these threat actors persist in exploiting vulnerabilities, gaining widespread attention from cybersecurity agencies. #Storm1849 #CiscoASA #CISA #ArcaneDoor…
The GlassWorm campaign targeting VS Code extensions on Open VSX has been fully contained, with malicious extensions removed and no ongoing threats detected. The incident highlighted the importance of improved security practices, including token revocation and automated scanning. #GlassWorm #OpenVSX…
A Ukrainian national accused of involvement in Conti ransomware attacks has been extradited from Ireland to the US, where he faces charges related to cybercriminal activities between 2020 and 2022. The case highlights ongoing international efforts to combat ransomware groups like Conti and their impact on victims worldwide. #ContiRansomware #OleksiiLytvynenko…