Daily News - Abril e Maio (27/04 - 03/04) - 18 Semana de 2025

Information & Cyber Security, Privacy and Hacking News --- Daily Updates !! Weekly Resume...

30/04

Airplay-enabled devices open to attack via “AirBorne” vulnerabilities

Chinese Hackers Abuse IPv6 SLAAC for AitM Attacks via Spellbinder Lateral Movement Tool

Customer Account Takeovers: The Multi-Billion Dollar Problem You Don't Know About

Download: Edgescan 2025 Vulnerability Statistics Report

Indian Court Orders Action to Block Proton Mail Over AI Deepfake Abuse Allegations

Meta Launches LlamaFirewall Framework to Stop AI Jailbreaks, Injections, and Insecure Code

Mobile security is a frontline risk. Are you ready?

Nebulous Mantis Targets NATO-Linked Entities with Multi-Stage Malware Attacks

Product showcase: Ledger Flex secure crypto wallet

Property renters targeted in simple BEC scam

Securing the invisible: Supply chain security trends

Villain: Open-source framework for managing and enhancing reverse shells

Why cyber resilience must be part of every organization’s DNA

29/04

44% of the zero-days exploited in 2024 were in enterprise solutions

70% of organisations are still under cyber-attack despite improved defences

97 zero-days exploited in 2024, over 50% in spyware attacks

AI-powered, automated attacks have reached record numbers

Apple 'AirBorne' flaws can lead to zero-click AirPlay RCE attacks

CISA Adds Actively Exploited Broadcom and Commvault Flaws to KEV Database

CISA tags Broadcom Fabric OS, CommVault flaws as exploited in attacks

CISA warns about actively exploited Broadcom, Commvault vulnerabilities

Commvault Command Center has a critical security flaw

Cyber espionage and spyware fuel zero-day attacks, Google warns

Cyber incident at Marks & Spencer suspected to involve Scattered Spider hackers

DDoS attacks jump 358% compared to last year

Empty shelves at M&S as store faces losses of 'millions each day' in wake of cyber attack

Europol Creates “Violence-as-a-Service” Taskforce

FBI offers $10 million reward for information on Chinese hacking group Salt Typhoon

France accuses Russian intelligence of repeated cyber attacks since 2021

France ties Russian APT28 hackers to 12 cyberattacks on French orgs

Global crackdown on Russian crypto exchange Garantex fails as new platform pops up

Google Reports 75 Zero-Days Exploited in 2024 — 44% Targeted Enterprise Security Products

Grinex exchange suspected rebrand of sanctioned Garantex crypto firm

Hackers ramp up scans for leaked Git tokens and secrets

Hacking group Scattered Spider linked to M&S cyber attack

Hitachi Vantara takes servers offline after attack with Akira ransomware

How higher education can protect student data from cyber siege

In first, France accuses Russian intelligence of repeated cyber attacks

Infostealers Harvest Over 30,000 Australian Banking Credentials

JokerOTP Platform Linked to 28,000+ Phishing Attacks Dismantled

Kintetsu World Express hit by ransomware attack

Malaysia Dodged a Bullet in 2024. But Are We Ready for the Next One?

Malware Attack Targets World Uyghur Congress Leaders via Trojanized UyghurEdit++ Tool

Marks & Spencer (M&S) breach may have been a Scattered Spider ransomware attack

Massive Cyber Attack Rocks Iran Amid Mysterious Explosions!

Meditation iOS app leaked over 100K users’ personal details

MFA Under Attack: AiTM Phishing Kits Abusing Legitimate Services

MTN Ghana Data Breach: A Wake-Up Call for Privacy Rights and Corporate Accountability

New Gremlin Infostealer Distributed on Telegram

New Reports Uncover Jailbreaks, Unsafe Code, and Data Theft Risks in Leading AI Systems

New WordPress Malware Masquerades as Plugin

Nova Scotia energy provider takes some servers offline following cyber incident

One in five firms faces monthly email account attacks

Phorpiex Botnet Delivers LockBit Ransomware with Automated Tactics

Ransomware Attacks on Critical Infrastructure Surge, Reports FBI

ResolverRAT Targets Healthcare and Pharmaceutical Sectors Through Sophisticated Phishing Attacks

Retail giant M&S takes systems offline to deal with cyber incident

Scattered Spider on the hook for M&S cyber attack

Scattered Spider Suspected in Major M&S Cyberattack

SentinelOne Uncovers Chinese Espionage Campaign Targeting Its Infrastructure and Clients

SK Telecom cyberattack: Free SIM replacements for 25 million customers

Some Marks & Spencer (M&S) shops hit by availability issues as cyber attack fallout continues

Spain and Portugal power blackouts: was there a cyberattack?

The Growing Threat of Ransomware to the Manufacturing Sector

The state of intrusions: Stolen credentials and perimeter exploits on the rise, as phishing wanes

TikTok investigates claims of major data breach by hacker group R00TK1T

Ukraine's largest home improvement retailer disrupted by cyberattack

Urban Renewal Authority Data Breach Incident Prompts Update of Guidance on Cloud Computing by the Privacy Commissioner for Personal Data in Hong Kong

VeriSource data breach impacted 4M individuals

Zero-Day Exploitation Figure Surges 19% in Two Years

We’re under attack too! Cybersecurity firm shares its cyber warfare experience

What Is Device Code Phishing?

What’s worth automating in cyber hygiene, and what’s not

28/04

$16 billion: The amount of internet crime losses in 2024

19 APT Hackers Attacking Asia Company’s Servers by Exploiting Vulnerability & Spear Phishing Email

A large-scale phishing campaign targets WordPress WooCommerce users

Africa’s largest mobile network operator MTN Group reports data breach

Ascension data breach impacts patients in 5 states, including Michigan

Attackers chained Craft CMS zero-days attacks in the wild

Baltimore City Public Schools hit with data breach

Barnstable Sheriff Employee On Leave After 'Data Breach'

Blackouts in Spain and Portugal could be a cyber attack

BreachForums compromised in zero-day attack on "unpatched" software, new admin says

BreachForums Displays Message About Shutdown, Cites MyBB 0day Flaw

Britain's M&S Stops Taking Online Orders After Cyber Attack

British retailer Marks & Spencer confirms a major data security incident

Citizen Lab says exiled Uyghur leaders targeted with Windows spyware

Cloudflare mitigates record number of DDoS attacks in 2025

Collaborating against ransomware: Insights from the Melissa Project

Common password misconceptions: myths vs facts

Critical SAP NetWeaver flaw exploited by suspected initial access broker (CVE-2025-31324)

Cyber attack on online broadcaster Urban One compromised employees' data

Cyber attack on Onsite Mammography impacted over 350,000 patients

Cyber-espionage campaign found targeting exiled Uyghurs

Darcula Phishing Kit Uses AI to Evade Detection, Experts Warn

DragonForce ransomware group announces its forming a hacking cartel

Earth Kurma Targets Southeast Asia With Rootkits and Cloud-Based Data Theft Tools

Everything we know about the M&S cyber attack that halted online orders

FBI Asks for Help Tracking Chinese Salt Typhoon Actors

Fog Ransomware Directory With Active Directory Exploitation Tools & Scripts Uncovered

GoSearch: Open-source OSINT tool for uncovering digital footprints

Government Set to Ban SIM Farms in European First

Hackers Exploit Critical Craft CMS Flaws; Hundreds of Servers Likely Compromised

Half of Mobile Devices Run Outdated Operating System

Hitachi Vantara takes servers offline after Akira ransomware attack

How Breaches Start: Breaking Down 5 Real Vulns

Inner workings of ToyMaker IAB examined

Interlock group claims major ransomware attack on renal care provider DaVita

Iran claims it stopped large cyberattack on country’s infrastructure

ISACA Highlights Critical Lack of Quantum Threat Mitigation Strategies

It only took two weeks for DeFi newcomer to lose $6M to hackers

JokerOTP Dismantled After 28,000 Phishing Attacks, 2 Arrested

Kelly Benefits data breach compromised over 250,000 individuals

Large-scale cyber Attack on Iran’s infrastructure foiled

Limestone District School Board (LDSB) schools restore phones, internet, and email after cyber attack

Loopscale hacker in talks to return stolen crypto

Marks & Spencer hit by £800m blow as shoppers left waiting for refunds and online orders frozen for fourth day

Massive power blackout in Spain, France and Portugal: causes investigated, hacker attack not excluded

Media firm Urban One confirms data breach after cybercriminals claim February attack

Microsoft Recall Returns: Security Improves but Issues Remain

Microsoft Rolls Recall Out to General Public After Privacy Backlash

Monero's XMR soars as suspected hacker purchases $330m

More than 31K impacted by Baltimore City Public Schools hack

Most critical vulnerabilities aren’t worth your attention

MTN confirms customer data breach, core systems unaffected

Nearly 50% of mobile devices run outdated operating systems

Nova Scotia Power investigating cyber attack

Oregon Department of Environmental Quality (DEQ) won’t say if ransomware group took employee data in cyberattack

Over 1,200 SAP NetWeaver servers vulnerable to actively exploited flaw

PoC rootkit Curing evades traditional Linux detection systems

RansomHub Ransomware Deploying Malware to Compromise Corporate Networks

Ransomware Attack on Frederick Health Medical Group Affects 934,000 Patients

Ransomware attacks are getting smarter, harder to stop

Ransomware Defense Playbook for CISOs in 2025

Reporting lines: Could separating from IT help CISOs?

Researchers Note 16.7% Increase in Automated Scanning Activity

Security breach exposes identities of British special forces soldiers

Shoppers turn to womenswear fashion alternatives as M&S cyber attack saga continues

Single line of code could brick iPhones by sending malicious notifications

SK Telecom begins SIM card replacement after data breach

Solana's Loopscale Strikes Deal with Hacker to Recover $5.8M Stolen Funds

South Korea's SK Telecom begins SIM card replacement after data breach

Spain investigates power blackouts as possible cyber attack

Spanish water utility Aigües de Mataró confirms a major customer data breach

The setting Gmail users need to change to protect from phishing, avoid losing account

Threat actors are scanning your environment, even if you’re not

Threat Actors Increasingly Utilize Ransomware as a Service Boosted by EDR Killers

Two former High Point students sue university over data breach

Urban One Hit by Ransomware: Employee Data Leaked

Uyghur Diaspora Group Targeted with Remote Surveillance Malware

VeriSource now says February data breach impacts 4 million people

Verizon’s 2025 Data Breach Investigations Report Notes Alarming Cyberattack Surge Through Third Parties

WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site Backdoors

Yale New Haven Health says nearly 5.6M patients affected by data breach

27/04

A Hidden Crisis on the Roads: Automotive Cyberattacks Soar 50% in 2025

Anger grows as M&S forced to halt online sales for second day after cyber attack

Employee downloaded data to private email, Barnstable Sheriff's Office says

FBI Confirms $10 Million Chinese Hacker Bounty

FBI Puts Rs 84 Crore Reward on Chinese Hacker Group ‘Salt Typhoon

Fear, anger and confusion reign in wake of SK Telecom's historic data breach

Hackers Abuse OAuth to Seize Microsoft 365 Accounts

HHS Settles with PIH Health Over HIPAA Violations Following Phishing Attack

Just 60 Seconds From Attacked To Hacked — The Speed Of Cybercrime

MTN Suffers Cyber Attack, Customers Data Exposed

Storm-1977 Hits Education Clouds with AzureChecker, Deploys 200+ Crypto Mining Containers

The 5,365 Ransomware Attack Rampage — What You Need To Know

Last Week

Daily News - Abril (20/04 - 26/04) - 17 Semana de 2025