Louis Vuitton experiences data breaches across Turkey, South Korea, and the UK amid a surge in retail cyber incidents, while Belk faces ransomware attacks from DragonForce causing data leaks. Additionally, Dordt University reports a 2024 breach exposing sensitive data, linked to BianLian, highlighting ongoing threats in retail, education, and phishing campaigns targeting developers and organizations. #LouisVuitton #Belk #DordtUniversity #DragonForce #BianLian
Category: Daily Recap
![Cybersecurity News | Daily Recap [15 Jul 2025]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [15 Jul 2025]")
Recent cybersecurity updates reveal critical vulnerabilities in Kigen’s eUICC eSIM technology, posing global risks, along with emerging malware threats like Interlock RAT and malware in WordPress plugins. The report also covers significant firmware flaws, phishing-related arrests in Romania and India, and India’s focus on adopting quantum-resistant algorithms for future cybersecurity resilience. #Kigen #InterlockRAT
![Threat Research | Weekly Recap [13 Jul 2025]](https://www.hendryadrian.com/tweet/image/WeeklyRecap.png "Threat Research | Weekly Recap [13 Jul 2025]")
This weekly recap highlights recent developments in malware, ransomware, and exploitation techniques used by threat actors worldwide. It emphasizes emerging threats to critical infrastructure, cloud environments, and popular web platforms, along with geopolitical cyber conflicts. #Rhadamanthys #RedLineStealer #NordDragonScan #FoxyWallet #SafePayRansomware #AiLock #WingFTP #CitrixBleed #BloodHound #XMRigCoinMiner
Cybersecurity threats continue to evolve with critical vulnerabilities in Wing FTP Server, Laravel, FortiWeb, Citrix, and OpenVSX marketplace being actively exploited or patched. Major data breaches involve Louis Vuitton, McDonald’s, and Albemarle County, while AI security faces challenges from jailbreaks and national security concerns with DeepSeek. #WingFTP #Laravel #FortiWeb #Citrix #OpenVSX #LouisVuitton #McDonald’s #DeepSeek
Recent cybersecurity developments include arrests linked to the Scattered Spider and DragonForce ransomware groups, highlighting significant retail sector impacts and thwarted ransomware attempts. Notable vulnerabilities such as Wing FTP Server CVE-2025-47812 and Citrix NetScaler CVE-2025-5777 continue to be exploited, emphasizing the need for urgent updates. #ScatteredSpider #DragonForce #WingFTP #CVE2025-47812 #CVE2025-5777
Recent cybersecurity incidents include a major data breach at Qantas linked to Scattered Spider, affecting 5.7 million customers, and arrests in the UK related to DragonForce ransomware attacks. Threat groups like DoNot APT and Salt Typhoon continue expanding their espionage operations targeting European ministries and Canadian telecoms, highlighting evolving cyber threats. #ScatteredSpider #DragonForce #DoNotAPT #SaltTyphoon
Microsoft’s July 2025 Patch Tuesday addressed 137 vulnerabilities, including a zero-day in SQL Server and critical flaws in Windows, Office, and SharePoint, prompting urgent updates. Cyber espionage efforts include the arrest of Chinese hacker Xu Zewei linked to Silk Typhoon and Hafnium, alongside sanctions on North Korean and Russian threat actors like Andariel and Lazarus. Recent malware threats feature Iranian ransomware Pay2Key.I2P, data breaches at Nova Scotia Power and IES Communications, and a surge in Android banking malware such as Anatsa Trojan. Notable vulnerabilities include flaws in Nippon Steel Solutions’ network equipment and ServiceNow, while security enhancements focus on Galaxy devices’ Knox protection and automation via Tines. Threat techniques involve fake news sites impersonating major outlets and AI-powered deepfake impersonations of US officials. #SQLServerZeroDay #Hafnium #Lazarus #Pay2KeyI2P #AnatsaTrojan
Cybersecurity experts report a surge in sophisticated spyware campaigns, including the Batavia and Atomic Stealer strains, targeting Russian firms and Mac users globally. Additionally, new botnets like RondoDox and hpingbot are exploiting vulnerabilities and enabling stealthy DDoS attacks, highlighting persistent threats to organizations worldwide. #Batavia #AtomicStealer #RondoDox #hpingbot
This cybersecurity recap highlights the abuse of legitimate tools like Inno Setup and Shellter Elite by cybercriminals to distribute stealthy malware and evade detection. It also reports on sophisticated nation-state espionage campaigns by North Korea, TAG-140, APT36, and NightEagle, targeting critical sectors across different regions. #InnoSetupAbuse #ShellterElite #NimDoor #TAG-140 #APT36 #NightEagle
![Threat Research | Weekly Recap [06 Jul 2025]](https://www.hendryadrian.com/tweet/image/cybersecuritynews.png "Threat Research | Weekly Recap [06 Jul 2025]")
This week’s cybersecurity recap highlights critical vulnerabilities such as CVE-2025-5777 and CVE-2025-20309 affecting Citrix and Cisco, which are actively exploited by threat actors like APT28 and MuddyWater. Emerging malware campaigns include sophisticated botnets like Flodrix and advanced evasion techniques like Shellter and steganography. #CitrixBleed #MuddyWater
Recent cybersecurity incidents include Ingram Micro suffering a major outage caused by SafePay ransomware exploiting VPN vulnerabilities, and the City of Coppell, Texas, notifying residents of a data breach linked to RansomHub ransomware. Additionally, threat actors targeted France’s critical infrastructure using Ivanti zero-days, while Taiwan warns of data security risks from Chinese-developed apps. Key attack techniques involved exposed JDWP interfaces used by Hpingbot for DDoS, CSP bypasses through CSS injection, and NTLM relay attack resurgence. #SafePay #RansomHub #HellcatRansomware #Telefónica #JDWP #CSPBypass #NTLMRelay
Cybersecurity experts have uncovered NightEagle, a sophisticated threat actor exploiting Microsoft Exchange zero-days to target Chinese military and tech sectors for espionage purposes. Estonia leads efforts in cyber diplomacy and resilience amid rising threats from Russia, promoting international cooperation to expose spies. #NightEagle #ChinaCyberEspionage #EstoniaCyberDiplomacy
This cybersecurity recap highlights recent ransomware incidents, data breaches affecting millions, and the emergence of North Korean malware targeting macOS and crypto sectors. It also underscores ongoing geopolitical cyber cooperation and critical vulnerabilities in enterprise software, emphasizing the importance of timely patching and global collaboration. #HuntersInternational #KellyBenefits #Qantas #NimDoor #ITArmyOfRussia #Forminator #TeleMessage #CyberDome
This cybersecurity recap highlights major recent incidents, including the Qantas data breach attributed to the Scattered Spider group and the ransomware attack on Deutsche Welthungerhilfe. It underscores ongoing threats from threat actors like Qilin and Aeza Group, as well as emerging vulnerabilities and sophisticated social engineering tactics. #ScatteredSpider #Qilin #AezaGroup #ForminatorVulnerability
Recent cyberattacks target high-profile organizations like the International Criminal Court and Swiss government, exposing critical vulnerabilities and data breaches. Authorities disrupted North Korean IT schemes and dismantled global crypto fraud rings, highlighting ongoing threats from nation-state actors and cybercriminal groups. #ICC Cyberattacks #Sarcoma #DarkAngels #North Korean IT Scheme #Crypto Fraud