Daily News - Abril (06/04 - 12/04) - 15 Semana de 2025

Information & Cyber Security, Privacy and Hacking News --- Daily Updates !! Weekly Resume...

12/04

0-Click RCE in the SuperNote Nomad E-ink Tablet Lets Hackers Install Rootkit & Gain Full Control

201,617 Customer Records Allegedly from TheLotter Australia Found on BreachForums

Active Directory Attack Kill Chain Checklist & Tools List- 2025

AI-hallucinated code dependencies become new supply chain risk

Bank of America Discloses Data Breach After Customers’ Documents Disappear, Says Names, Addresses, Account Information and Social Security Numbers Affected

Beware Developers! Malicious NPM Packages Targeting PayPal Users to Steal Sensitive Data

Debt collection company ScoreControl poorly protected customer data

GOFFEE Leveraging PowerModul Tool to Attack Government & Energy Organizations

Google Unveils A2A Protocol That Enable AI Agents Collaborate to Automate Workflows

Hacker claims major WooCommerce data breach

Hacker-proofing smart implants

Hackers Actively Exploit Patched Fortinet FortiGate Devices to Gain Root Access Using Symbolic Link

Hackers Exploiting Domain Controller to Deploy Ransomware Using RDP

HelloKitty Ransomware Returns, Launching Attacks on Windows, Linux, and ESXi Environments

Leak confirms OpenAI's GPT 4.1 is coming before GPT 5.0

NVIDIA’s Incomplete Patch for Critical Flaw Lets Attackers Steal AI Model Data

RansomHub Ransomware-as-a-service Facing Internal Conflict as Affiliates Lost Access to Chat Portals

RansomHub Ransomware Group Hits 84 Organizations as New Threat Actors Emerge

Ransomware Attack Prevention Checklist – 2025

Sapphire Werewolf Enhances Toolkit With New Amethyst Stealer to Attack Energy Companies

Seven Years Old Cisco Vulnerability Exposes Cisco Devices to Remote Code Execution Attacks

Thailand Data Watchdog Investigates Bangchak Customer Data Breach

Tycoon2FA phishing kit targets Microsoft 365 with new tricks

United Airlines Flight Attendants Targeted with Fake Sites to Steal Salary

UPI Down – UPI Outage Disrupt Millions of Digital Transactions Across India

11/04

30% of charities experienced cybersecurity breaches or attacks last year, stats show

100,000+ WordPress Sites at Risk as SureTriggers Exploit Goes Live

AI amplifies cyber threat; non-human identities at risk

AI boosts Australian cyber defences against rising threats

AI-powered AkiraBot spams over 80,000 websites

BentoML Vulnerability Allows Remote Code Execution on AI Servers

Black Friday IKEA ransomware attack cost company millions

Breach of American aircraft parts maker leaves thousands exposed

Charlton hit by 'cyber attack' in August

China secretly acknowledges Volt Typhoon attacks on US infrastructure: why?

Cyber Attack Impacting Oregon Environmental Department

Cyber attack on Salus Group impacted members' personal information

Cyber breaches fall to 43% of UK businesses, but cybercrime remains high

Cyble Urges Critical Vulnerability Fixes Affecting Industrial Systems

Cybersecurity industry falls silent as Trump turns ire on SentinelOne

Data breach at Dutch ministries caused by incorrect document uploading

Email phishing scam hides the link in a PDF to infect your computer

Ethical hacker intercepts $2.6M in Morpho Labs exploit

Exclusive-Fake accounts drove praise of Duterte and now target Philippine election

Foreign adversaries can no longer use commercial backdoors to access Americans’ data

Fortinet Warns Attackers Retain FortiGate Access Post-Patching via SSL-VPN Symlink Exploit

Google Cloud: Top 5 Priorities for Cybersecurity Leaders Today

Hacker diz que Emei usava senha ‘fraca’ e baixou dados de alunos referentes a 25 anos

Hacker é preso após invadir sistema educacional de MS e usar dados sigilosos para ameaçar alunos

Hacker forum "Cracked" is back online foiling FBI take down

Hackers exploit old FortiGate vulnerabilities, use symlink trick to retain limited access to patched devices

Hackers target Atomic and Exodus crypto wallets as supply chain risks grow

Hackers tried to sell Pembina Trails School Division student, staff info on dark web

Industrial sector experienced more than 1,400 ransomware attacks in 2024, study finds

Initial Access Brokers Shift Tactics, Selling More for Less

iOS devices face twice the phishing attacks of Android

Inside the UK Government's Cyber Security Breaches Survey

Ireland’s data regulator investigates X’s use of European user data to train Grok

IT worker faces jail for anti-Islam cyber attack on WiFi at London train stations

Judge unlikely to allow expert testimony for NSO as jury decides damages in WhatsApp case

Lab provider for Planned Parenthood discloses breach affecting 1.6 million people

Laboratory Services Cooperative Data Breach – 1.6 Million People Impacted

MarineMax settles data breach class action lawsuit for over $1 million

Meta whistleblower tells Senate that Zuckerberg offered Americans’ data to China

Microsoft Defender will isolate undiscovered endpoints to block attacks

Moroccan Hacking Group 'Atlas Lion' Abuses Cloud Systems to Steal Gift Cards

Morocco investigates major data breach allegedly by Algerian hackers

National Vulnerability Database (NVD) Revamps Operations as Vulnerability Reporting Surges

New Phishing Cyberattack Targets Spotify Users, Steals Credit Card Information

One Exploit, $2.6 Million Lost: MorphoBlue Hack Rattles DeFi Markets

Oracle says "obsolete servers" hacked, denies cloud breach

OttoKit WordPress Plugin Admin Creation Vulnerability Under Active Exploitation

Palo Alto Networks Warns of Brute-Force Attempts Targeting PAN-OS GlobalProtect Gateways

Paper Werewolf Deploys PowerModul Implant in Targeted Cyberattacks on Russian Sectors

'Phishing, smishing and brushing': USPS warns against scams following uptick in mail crimes

Qilin takes credit for SK Group compromise

QuickBooks Phishing Campaign Targets Taxpayers

Ransomware attack cost IKEA operator in Eastern Europe $23 million

Ransomware attack disrupts operations at Sensata Technologies

Ransomware attack on printing vendor exposes customer data at DBS and Bank of China

Ransomware groups push negotiations to new levels of uncertainty

Ransomware Hackers Target Active Directory Domain Controllers

Ransomware Reaches A Record High, But Payouts Are Dwindling

Ransomware Surges as Third-Party Risks Expand Cyber Threat Landscape

Remote Access Tools Behind 4 of 5 Ransomware Attacks in 2024; Supply Chain-Driven Cyber Claims up 43%

Researchers warn about ‘Goffee’ spilling onto Russian flash drives

Russia’s Storm-2372 Hits Orgs with MFA Bypass via Device Code Phishing

SaaS Security Essentials: Reducing Risks in Cloud Applications

Sensata Technologies Hacked – Ransomware Attack Disrupts Operations

South African telecom Cell C confirms a RansomHouse ransomware attack

SpyNote, BadBazaar, MOONSHINE Malware Target Android and iOS Users via Fake Apps

St. Louis University reaches settlement with patients involved in data breach

Study shows Fastly boosts security with 235% ROI increase

Thailand and Malaysia Ramp Up Financial Cybersecurity Amid Escalating Threats

Türkiye files charges against hacker ring over theft of 101M personal records

UK cyber breach survey reveals boards deprioritising security

U.S. banking regulator confirms a major hacking of employee email accounts

Western Sydney University discloses security breaches, data leak

Why remote work is a security minefield (and what you can do about it)

Why security culture is crypto’s strongest asset

Wolters Kluwer allegedly hit by data breach, threatening Fortune 500 firms

10/04

10k students impacted by new Western Sydney Uni data breach

AI-driven state-sponsored cyberattacks worry security professionals

AI-Powered AkiraBot Evades CAPTCHA to Spam 80,000 Websites

AkiraBot network hits thousands of sites with CAPTCHA bypassing AI spam

AkiraBot Targets 420,000 Sites with OpenAI-Generated Spam, Bypassing CAPTCHA Protections

An inside look at Microsoft’s AI Red Team

Após prender hacker, operação busca identificar “conteiros” em fraude de R$ 6 milhões em SC

Bank of China and DBS confirms data breach through compromised printing partner

Cell C confirms customer data published by hackers following late-2024 cyberattack

Complexity in compliance: how critical organisations can proactively keep ahead of threats in turbulent times

Crypto-stealing malware found on SourceForge.net, too

Cybersecurity company alarmed by ease of scam creation with Lovable website builder

DBS Bank and Bank of China impacted in third party vendor data breach

ESET security scanner vulnerability used to deploy TCESB malware

Europol Arrests Five SmokeLoader Clients Linked by Seized Database Evidence

Flaws and breaches plague DNA-testing services

FortiSwitch vulnerability may give attackers control over vulnerable devices (CVE-2024-48887)

From likes to leaks: How social media presence impacts corporate security

Gamaredon Uses Infected Removable Drives to Breach Western Military Mission in Ukraine

Google Eyes User Browsing Data Search in New Patent Filing

Hackers breach U.S. Treasury’s OCC email system, exposing sensitive financial data

How to find out if your AI vendor is a security risk

How to Recover Stolen Cryptocurrency with Proven Methods

Is your tech budget ready for 125% China tariff? Cyber pros warn about consequences

Middle-aged women most likely to fall for retail scams

Operation Endgame Continues with Smokeloader Customer Arrests

Operation Endgame follow-up leads to detentions across Smoakloader ecosystem

Oracle confirms the hack of two obsolete servers hacked. No Oracle Cloud systems or customer data were affected

Over 100 million malicious emails blocked by HMRC

Ransomware attack on Gooding County impacted residents' personal information

Ransomware gangs go whale hunting with Fortune 500 companies

Smokeloader Users Identified and Arrested in Operation Endgame

The Fullerton Hotels and Resorts confirms hack impacting The Fullerton Hotel Sydney

The Permanent Digital Pandemic and Resillion's Strategy for a Cyber-Resilient Future

This critical FortiSwitch flaw allows hackers to change admins passwords, and they can even do it remotely

Top 16 OffSec, pen-testing, and ethical hacking certifications

Trump orders probe of ex-CISA chief Krebs over 2020 election dispute

Trump revokes security clearances for Chris Krebs, SentinelOne in problematic precedent for security vendors

Ukraine's railways restore half of IT services hit by cyber attack so far

US businesses are the top target for ransomware in 2025 so far

09/04

$4M Ransom Deadline Approaches as NASCAR Remains Quiet on Alleged Ransomware Attack

5 simple ways to regain your data privacy online - starting today

5 ways to avoid spyware disguised as legit apps - before it's too late

17,000,000 GrubHub passwords and other data exposed, hackers claim

200 million social media records leaked in major X data breach

348 million Discord messages are allegedly up for sale

Adobe Patches 11 Critical ColdFusion Flaws Amid 30 Total Vulnerabilities Discovered

AI Now Outsmarts Humans in Spear Phishing, Analysis Shows

AI is challenging the geopolitical status quo

Algerian hackers leak sensitive data from Morocco's CNSS and Ministry of Employment

APTRS: Open-source automated penetration testing reporting system

As spyware market continues to expand, diplomatic Pall Mall Process hits a pivot point

Black Basta chat log leaks show structure and discipline, claims research

Booking.com Phishing Scam Targets Hotel Staff, Puts Guest Data at Risk

Can AI Help Protect Passwords from Hackers?

Cell C alerts users after confirming data breach

CentreStack RCE exploited as zero-day to breach file sharing servers

CERT-In Flags Info Disclosure Flaw in TP-Link Tapo H200 Smart Hub

CISA and Experts Warn of Active Attacks on CrushFTP Vulnerability as Ransomware Gang Issues Threats

CISA Warns of CentreStack's Hard-Coded MachineKey Vulnerability Enabling RCE Attacks

Court document reveals locations of WhatsApp victims targeted by NSO spyware

Critical Fortinet FortiSwitch flaw allows remote attackers to change admin passwords

Critical FortiSwitch flaw lets hackers change admin passwords remotely

Cyberattack delays convicted murderer’s case

Cybersecurity experts share how AI could enhance tax-related scams

Data privacy regulators lobby lawmakers to not draft federal legislation preempting state laws

DBS Bank and Bank of China customer records compromised in ransomware attack

Enzoic AD Lite Password Audit Report

EU nations sign ‘Pall Mall’ pact on intrusive spyware use, US nowhere in sight

Everest ransomware gang's dark web leak site hacked and taken offline

Explosive Growth of Non-Human Identities Creating Massive Security Blind Spots

First quarter of 2025 sees record numbers of ransomware attacks

Global Cybersecurity Agencies Warn of Spyware Targeting Uyghur, Tibetan, and Taiwanese Communities

Google Releases April Android Update to Address Two Zero-Days

Google takes on Cursor with Firebase Studio, its AI builder for vibe coding

Governments identify dozens of Android apps bundled with spyware

Grandoreiro Strikes Again: Geofenced Phishing Attacks Target LATAM

Hackers Claim Magento Breach via Third-Party, Leak CRM Data of 700K Users

Hackers Had Access to 150,000 Emails in U.S. Treasury Email Breach

Hackers target SSRF bugs in EC2-hosted sites to steal AWS credentials

Hellcat Ransomware Upgrades Arsenal to Target Government, Education, and Energy Sectors

Hi-School Pharmacy Agrees to Settle Data Breach Lawsuit for $600,000

How cyberattackers exploit domain controllers using ransomware

How websites misused cookie banners: sometimes, they made them impossible to refuse

Immutable backup storage is the best defense against ransomware

iOS privacy app can’t keep secrets – and spills user notes with passwords

Is HR running your employee security training? Here’s why that’s not always the best idea

Lessons learned about cyber resilience from a visit to Ukraine

Lovable AI Found Most Vulnerable to VibeScamming — Enabling Anyone to Build Live Scam Pages

MarineMax resolves data breach case with $1 million settlement

Microsoft Fixes Over 130 CVEs in April Patch Tuesday

Microsoft fixes zero-day flaw exploited by cybercrooks to elevate privileges

Microsoft Patches 125 Flaws Including Actively Exploited Windows CLFS Vulnerability

Microsoft Warns Ransomware Actors Exploiting Windows Flaw

Moroccan Ministry Confirms Cyber Attack But Data Safe

NASCAR massive data breach claimed by Medusa ransomware, over 1TB allegedly stolen

National Cyber Security Centre (NCSC) shares technical details of spyware targeting Uyghur, Tibetan and Taiwanese groups

National Social Security Fund of Morocco Suffers Data Breach

NCSC Warns of Spyware Targeting Chinese and Taiwanese Diaspora

New Adobe Security Update Fixes Critical Exploits — Don’t Delay Your Update

New AkiraBot Abuses OpenAI API to Spam Website Contact Forms

New TCESB Malware Found in Active Attacks Exploiting ESET Security Scanner

OpenSSL prepares for a quantum future with 3.5.0 release

Oracle says "obsolete servers" hacked, denies cloud breach

Phishing kits now vet victims in real-time before stealing credentials

Pilfered Jira credentials leveraged in HellCat ransomware attacks

PipeMagic Trojan Exploits Windows Zero-Day Vulnerability to Deploy Ransomware

Police detains Smokeloader malware customers, seizes servers

Precision-Validated Phishing Elevates Credential Theft Risks

Ransomware Attacks Hit All-Time High as Payoffs Dwindle

Ransomware Attacks Reach New Record in March 2025

RCE flaw in MSP-friendly file sharing platform exploited by attackers (CVE-2025-30406)

Recent version of Neptune RAT is spreading, stealing credentials

Remote Code Execution & Privilege Escalation: Two New Threats in CISA’s KEV

Russian APT Hackers Use Device Code Phishing Technique to Bypass MFA

Schools IT provider strengthens security after data breach

Seoul Metro employee gets passenger off the hook in voice phishing scam

The most destructive cyber weapon ever used – Cybernews documentary

The US Treasury’s OCC disclosed an undetected major email breach for over a year

Threat actors use smishing to leverage toll payment services

Three-Quarters of IT Leaders Fear Nation-State AI Cyber Threats

Transforming cybersecurity into a strategic business enabler

Ukraine's railways restore half of IT services hit by cyber attack so far

UnB sofre ataque hacker e sistemas da universidade ficam fora do ar

US banking regulator reports on ‘major’ cyber incident involving senior officials’ emails

WhatsApp vulnerability could be used to infect Windows users with malware (CVE-2025-30401)

Who's calling? The threat of AI-powered vishing attacks

Why CISOs are doubling down on cyber crisis simulations

Windows 11 April update unexpectedly creates new 'inetpub' folder

Windows Common Log File System (CLFS) Vulnerability Could Lead to ‘Widespread Deployment and Detonation of Ransomware’

WK Kellogg Confirms Data Breach Tied to Cleo Software Exploit

08/04

10 things you should include in your AI policy

11 cyber defense tips to stay secure at work and home

300K vehicles and millions of trips exposed in fleet manager’s data leak

Agentic AI in the SOC - Dawn of Autonomous Alert Triage

Amazon EC2 SSM Agent Flaw Patched After Privilege Escalation via Path Traversal

An email with Windows RDP file gives Russian spies access to your drives

An old Android RAT has returned with some new tricks - here is what to look out for

Ancient flaw that allowed hackers to view your Chrome browser history has finally been patched, so update now

Android affected by critical vulnerabilities: hackers can take control without any interaction

ANY.RUN’s Enhanced Threat Intelligence Feeds With Unique IOC for SOC/DFIR Teams

AWS rolls out ML-KEM to secure TLS from quantum threats

Boards Urged to Follow New Cyber Code of Practice

CISA Adds CrushFTP Vulnerability to KEV Catalog Following Confirmed Active Exploitation

CISA Warns of CrushFTP Exploit Letting Attackers Bypass Authentication

CISA Warns of CrushFTP Vulnerability Exploitation in the Wild

CrushFTP vulnerability exploited in the wild, added to CISA KEV database

Cryptocurrency Miner and Clipper Malware Spread via SourceForge Cracked Software Listings

Cyber attack on Food For The Poor impacted over 50,000 individuals

Cyberattacks on water and power utilities threaten public safety

DBS & Bank of China customers’ info extracted in ransomware attack, no log-in details compromised

Doctors deepfake TikTok lies

“Don't take the phone at all. Improvise:” Users share tricks on how to pass US border search

Emails of US Treasury banking regulators accessed by hackers since 2023

Europcar confirms data breach following GitLab repository compromise

Everest ransomware group’s Tor leak site offline after a defacement

Excessive agency in LLMs: The growing risk of unchecked autonomy

Fortinet Urges FortiSwitch Upgrades to Patch Critical Admin Password Change Flaw

Google fixed two actively exploited Android zero-days

Google Patched Android 0-Day Vulnerability Exploited in the Wild

Google Releases Android Update to Patch Two Actively Exploited Vulnerabilities

Hackers Exploiting Windows .RDP Files For Rogue Remote Desktop Connections

Hackers lurked in Treasury OCC's systems since June 2023 breach

Half of Firms Stall Digital Projects as Cyber Warfare Risk Surges

HellCat Ransomware Hits 4 Firms using Infostealer-Stolen Jira Credentials

How ASEAN Nations Are Adopting AI and Zero Trust to Combat Cybercrime

In the wake of DOGE cuts on cyber, why the healthcare industry must step up

Kelloggs Data Breach – Hackers Breached the Servers and Stolen Data

Linux 6.15-rc1 Released With Major Driver Update & Perfomance Boost

Major Android security update patches a host of actively exploited flaws, so download now

Medusa Ransomware Claims NASCAR Breach in Latest Attack

Microsoft April 2025 Patch Tuesday fixes exploited zero-day, 134 flaws

Microsoft Patch Tuesday April 2025: One Zero-Day, 11 High-Risk Flaws

Microsoft: Windows CLFS zero-day exploited by ransomware gang

Neptune RAT spreads across GitHub, Telegram, and YouTube

New Mirai botnet behind surge in TVT DVR exploitation

Nissan Leaf Vulnerability Exploited to Gain Control Over the Car Remotely

Observability is security’s way back into the cloud conversation

Online Gaming Risks and How to Avoid Them

Oracle quietly confirms public cloud data breach, customer data stolen

Phishing, fraud, and the financial sector’s crisis of trust

Phishing Up 175%: India’s New Cyber Report Flags BFSI Sector Vulnerabilities

Port of Seattle says cyber attack compromised the data of 90,000 customers

PoC Exploit Released for Yelp Flaw that Exposes SSH Keys on Ubuntu Systems

UAC-0226 Deploys GIFTEDCROOK Stealer via Malicious Excel Files Targeting Ukraine

WhatsApp fixed a spoofing flaw that could enable Remote Code Execution

WhatsApp flaw can let attackers run malicious code on Windows PCs

WhatsApp for Windows Flaw Could Let Hackers Sneak In Malicious Files

WhatsApp patches worrying vulnerability which allowed hackers to share .exe files as images

WhatsApp Vulnerability Let Attackers Execute Malicious Code Via Attachments

Why DEI is key for a cyber safe future

Windows 10 KB5055518 update fixes random text when printing

Windows 11 KB5055523 & KB5055528 cumulative updates released

07/04

4 ways to protect business-critical SAP applications

8 simple ways to teach your friends and family about cybersecurity - before it's too late

20-Year-Old Scattered Spider Hacker Pleads Guilty Of Sophisticated Ransomware Attacks

23andMe Data Breach: A Wake-Up Call for Consumer Privacy and Corporate Accountability

AI-powered deepfakes fuel extortion wave in Vietnam

AI Turned My Face Into a Cartoon—Hackers Turned It Into a Weapon

Alleged Data Breach Claims Surface Against Boulanger on Dark Web Forum

Alleged Data Breach Targets Yucatán Government Website

Apple appealing against UK 'back door' order

As many as 200k affected in Europcar data incident

Aussie Pension Savers Hit with Wave of Credential Stuffing Attacks

Australian Organisations Urged to Patch Ivanti Products Amid Exploited RCE Vulnerability

Bitdefender GravityZone Console PHP Vulnerability Let Attackers Execute Arbitrary Commands

Brothers Behind Rydox Dark Web Market Extradited to US

Cargills data breach: Bank warned of security lapses in 2024

CISA and FBI Warn Fast Flux is Powering Resilient Malware, C2, and Phishing Networks

CISA Releases NICE Workforce Framework Version 2.0.0 Released – What’s New

CISOs battle security platform fatigue

Critical pgAdmin Vulnerability Let Attackers Execute Remote Code

Darknet's Xanthorox AI Offers Customizable Tools for Hackers

Data breach exposes Australian super fund accounts

DBS, Bank of China Singapore customers' data extracted after printing vendor hit by ransomware attack

DeepSeek Breach Yet Again Sheds Light on Dangers of AI

EDR-as-a-Service makes the headlines in the cybercrime landscape

Ethereum-inspired address poisoning attacks now occurring on bitcoin too

Europe preparing to ‘ease the burden’ of landmark data privacy law

Everest Ransomware Gang Leak Site Hacked and Defaced

Everest ransomware's dark web leak site defaced, now offline

Extremely dangerous malware spreading via YouTube: it comes with a password stealer

Fast Flux is the New Cyber Weapon—And It’s Hard to Stop, Warns CISA

Food giant WK Kellogg discloses data breach linked to Clop ransomware

Google and Facebook’s inaction fuels deepfake fraud

Google fixes Android zero-days exploited in attacks, 60 other flaws

Government Backs Britain’s First Cyber Seed Fund, Worth £50m

How Trump’s tariffs are shaking up the cybersecurity sector

Kellogg discloses data breach, but it's not super cereal

Kent healthcare provider which suffered cyber attack says most issues now resolved

Leak site of ransomware gang Everest has been hacked

Malicious Microsoft VS Code Extensions Used in Cryptojacking Campaign

Malicious VSCode extensions infect Windows with cryptominers

MGM Resorts reaches $45 million settlement with FTC over 2023 data breach

New Black-Hat Automated Hacking Tool Xanthorox AI Advertised in Hacker Forums

NIST marks all CVEs prior to Jan. 1, 2018, as ‘deferred’

Pennsylvania Teachers Union Members Sue After Cyberattack Exposes Personal Data

PoisonSeed Campaign uses stolen email credentials to spread crypto seed scams and and empty wallets

PoisonSeed Exploits CRM Accounts to Launch Cryptocurrency Seed Phrase Poisoning Attacks

Port of Seattle notifies 90,000 people about data breach

Security Theater: Vanity Metrics Keep You Busy - and Exposed

Social Media Flooded with Ghibli AI Images—But What Are We Really Feeding the Algorithms?

SpyCloud Research Shows that Endpoint Detection and Antivirus Solutions Miss Two-Thirds (66%) of Malware Infections

T-Mobile's data breach settlements are rolling out now - here's how to see if you qualify

The controversial case of the threat actor EncryptHub

The industry speaks: Identity Management Day 2025

The rise of compromised LLM attacks

The risks of entry-level developers over relying on AI

The shift to identity-first security and why it matters

Threat Actor Claims to Leak 600K Records from Spanish Robinson Database

Twilio denies claims of SendGrid breach amid hacker allegations and data leak

Vodafone Urges UK Cybersecurity Policy Reforms as SME Cyber-Attack Costs Reach £3.4bn

Xanthorox AI Surfaces on Dark Web as Full Spectrum Hacking Assistant

WinRAR MotW bypass flaw fixed, update ASAP (CVE-2025-31334)

YES3 Scanner: Open-source S3 security scanner for public access, ransomware protection

06/04

10 Best Ransomware File Decryptor Tools – 2025

Australian cab service 13cabs reveals a significant customer data breach

Carding tool abusing WooCommerce API downloaded 34K times on PyPI

City of Chattanooga affected by Nationwide Recovery Services data breach

Cyber attack on Mercer County hospital impacted close to 90,000 patients

Cybersecurity company cyan joins forces with Claro in Chile

E-ZPass toll payment texts return in massive phishing wave

Hackers access personal information in Tasmanian Government data breach

Hackers stole payment card details from the City of Lubbock's utility payment portal

Microsoft Strengthens Outlook’s Email Ecosystem to Protect Inboxes

Oracle privately notifies Cloud data breach to customers

Over 200 Million X User Records Exposed in Massive Data Breach: Cybersecurity Alert Issued

Real estate firm Siegel Group confirms a major customer data breach

Record phishing attacks lead cybercrime surge in Türkiye, police detect 60K online fraud cases

Twilio Stock Tumbles On Report Of Data Breach, Company Says 'No Evidence' To Suggest It Happened: Retail Remains Bullish

Urgent need for resilient industrial cybersecurity professionals to defend ICS/OT systems from rising cyber attacks

Semana Anterior

Daily News - Março/Abril (30/03 - 05/04) - 14 Semana de 2025