1. CISA issued a warning regarding actively exploited remote code execution vulnerabilities in Joomla extensions iCagenda and Balbooa Forms. (BleepingComputer)
2. The US Treasury sanctioned a VPN service provider and two individuals for enabling ransomware attacks against American organizations. (The Hacker News)
3. AssuranceAmerica disclosed a data breach affecting 7 million people after attackers compromised employee credentials. (Check Point Research)
4. Lidl confirmed a data breach involving customer information caused by a hack at a third party service provider. (BleepingComputer)
5. Nihon Kotsu, the largest taxi operator in Japan, shut down systems following a cyberattack. (BleepingComputer)
6. ShinyHunters attackers have been accessing corporate Salesforce environments for a year by abusing existing OAuth trust relationships. (The Hacker News)
7. A malicious campaign involving 148 npm packages disguised as student proxies turned browsers into a DDoS botnet. (The Hacker News)
8. The official Jscrambler npm package was compromised to distribute infostealer malware to nearly 1500 users. (BleepingComputer)
9. A new macOS information stealer named CrashStealer uses a notarized dropper to bypass Apple Gatekeeper protections. (The Hacker News)
10. The Forg365 phishing as a service operation is targeting Microsoft 365 accounts using adversary in the middle tactics and AI assisted lures. (The Hacker News)
11. Researchers discovered that the Grok Build coding CLI was uploading entire Git repositories to xAI storage instead of only necessary files. (The Hacker News)
12. Google and Microsoft removed the ModHeader extension from their stores after discovering a dormant browsing history collector. (The Hacker News)
13. A new attack technique called MemGhost allows attackers to plant persistent false memories in AI agents via a single email. (The Hacker News)
14. UK authorities charged five individuals linked to the Russian Coms platform used for large scale caller ID spoofing. (BleepingComputer)
15. The EU and UK issued joint sanctions against Russian GRU military hackers for coordinating cyberattacks across Europe. (BleepingComputer)
Be First to Comment