Threatsday Bulletin: Rootkit Patch, Federal Breach, OnePlus SMS Leak, TikTok Scandal & More

This week’s Threatsday Bulletin highlights recent cybersecurity threats including firmware updates to combat rootkit malware, vulnerabilities in mobile and geospatial platforms, and sophisticated cybercriminal activities like SIM swapping and supply chain worms. The report emphasizes the importance of timely updates, verifying sources, and proactive security measures to stay ahead of evolving…

Read More
Alleged data sale of Ministry of Education, Research and Technology Indonesia

An alleged data sale involves over 20 million records from Indonesia’s Ministry of Education, Research and Technology, hosted at kemdikbud.go.id. The seller claims the dataset includes sensitive information such as confidential letters and financial records, with the breach reportedly occurring on August 18, 2025. #KemdikbudData #IndonesiaDataBreach…

Read More
BeaverTail Distributed with ClickFix Lure

North Korean operators used ClickFix lures on a fake hiring site to distribute compiled BeaverTail and InvisibleFerret payloads beginning in May 2025, shifting targeting toward marketing and trading roles and delivering binaries bundled with pkg and PyInstaller. The campaign used infrastructure including businesshire[.]top, nvidiasdk.fly[.]dev, and C2 172.86.93.139 and shows testing artifacts and low-scale deployment to date. #BeaverTail #InvisibleFerret

Read More