Recent cybersecurity updates reveal critical vulnerabilities in Kigen’s eUICC eSIM technology, posing global risks, along with emerging malware threats like Interlock RAT and malware in WordPress plugins. The report also covers significant firmware flaws, phishing-related arrests in Romania and India, and India’s focus on adopting quantum-resistant algorithms for future cybersecurity resilience. #Kigen #InterlockRAT
eSIM Vulnerabilities
- Critical flaws in Kigen’s eUICC eSIM technology allow attackers to clone profiles and install malicious applets, threatening billions of devices worldwide – eSIM Hack, eSIM Vulnerability
Ransomware & Malware
- A new Interlock RAT variant spreads via compromised sites using advanced social engineering and Cloudflare tunnels targeting multiple industries – Interlock RAT
- Supply chain attack injects malware into official Gravity Forms WordPress plugin versions, enabling backdoors and remote code execution before being patched – Gravity Forms Malware
- This week’s cyber threat recap highlights emerging malware like Rhadamanthys, RedLine Stealer, and ransomware campaigns threatening critical infrastructure and cloud platforms – Weekly Recap
Firmware & Software Flaws
- Multiple vulnerabilities in Gigabyte UEFI firmware permit attackers to bypass security and implant persistent backdoors via System Management Mode exploits – Gigabyte Firmware Flaws
- The Windows 10 KB5062554 update breaks the emoji panel’s search feature, with Microsoft advising users to upgrade to Windows 11 for better support – Windows 10 Bug
- Prompt injection vulnerability discovered in Google Gemini allows phishing messages hidden within emails to be displayed, risking user data exposure – Google Gemini Flaw
Cybercrime Arrests
- Romanian police arrested 13 suspects involved in a phishing scheme targeting the UK’s HMRC, responsible for £47 million in fraudulent tax refunds affecting 100,000 victims – Romanian Tax Fraud, HMRC Phishing Arrests
- Indian law enforcement dismantled a tech support scam call center in Noida, arresting key operatives involved in transnational fraud targeting the UK, US, and Australia – Noida Scam Raid, CBI Tech Support Scam
Quantum Cybersecurity
- India’s Ministry of Electronics and Information Technology released a strategic whitepaper urging adoption of quantum-resistant algorithms to protect digital infrastructure against future quantum threats – Quantum Cybersecurity