Threat Attack Daily - 28th of July 2025
Threat Attack Daily - 28th of July 2025
Aggregator
Ransomware Attack Update for the 28th of July 2025
1 month 1 week ago
Ransomware Attack Update for the 28th of July 2025
Dark Web Informer - Cyber Threat Intelligence
Lynx
1 month 1 week ago
You must login to view this content
cohenido
Rise of Chaos Ransomware Tied to BlackSuit Group's Exit
1 month 1 week ago
Operation Checkmate Disrupts One of the Large Russian-Speaking Ransomware Groups
An international law enforcement operation has disrupted BlackSuit, a ransomware group tied to hundreds of victims and ransom demands that exceeded half a billion dollars. The takedown occurred as security experts tracked the rise of a new group called Chaos, which may be a BlackSuit rebrand.
An international law enforcement operation has disrupted BlackSuit, a ransomware group tied to hundreds of victims and ransom demands that exceeded half a billion dollars. The takedown occurred as security experts tracked the rise of a new group called Chaos, which may be a BlackSuit rebrand.
Allianz Life Breach Tied to CRM Compromise
1 month 1 week ago
Attackers Stole US Customer Data Using Social Engineering
A malicious actor breached a customer relationship management platform used by Allianz Life Insurance of North America on July 16 and stole personally identifiable information of most of its 1.4 million U.S. customers, financial professionals and some employees, the company said.
A malicious actor breached a customer relationship management platform used by Allianz Life Insurance of North America on July 16 and stole personally identifiable information of most of its 1.4 million U.S. customers, financial professionals and some employees, the company said.
Health System Settles Web Tracker Lawsuit for up to $9.25M
1 month 1 week ago
Lawsuit Claims BJC Health Shared Patient Info From MyChart Portal Without Consent
A Missouri healthcare system has agreed to pay up to $9.25 million to settle a proposed class action lawsuit alleging that its use of online tracking tools in its patient portals transmitted sensitive patient information to third-party firms without the patients' knowledge or consent.
A Missouri healthcare system has agreed to pay up to $9.25 million to settle a proposed class action lawsuit alleging that its use of online tracking tools in its patient portals transmitted sensitive patient information to third-party firms without the patients' knowledge or consent.
Corelight Uses Gen AI to Power Smarter Threat Detection
1 month 1 week ago
SaaS Enhancements Aim to Boost Network Detection, Response for Small Security Teams
Corelight's SaaS platform Investigator is designed to bring scalable network detection and response to smaller security teams. CEO Brian Dye says generative AI workflows and enriched network context help defenders identify threats faster and with greater confidence than ever.
Corelight's SaaS platform Investigator is designed to bring scalable network detection and response to smaller security teams. CEO Brian Dye says generative AI workflows and enriched network context help defenders identify threats faster and with greater confidence than ever.
GLOBAL GROUP Ransomware Claims Breach of Media Giant Albavisión
1 month 1 week ago
GLOBAL GROUP Ransomware targets media giant Albavisión, claims 400 GB data theft as it continues hitting global sectors with advanced extortion tactics.
Waqas
Renting Android Malware With 2FA Interception, AV Bypass is Getting Cheaper Now
1 month 1 week ago
The cybercriminal landscape has witnessed a dramatic shift with the emergence of sophisticated malware-as-a-service (MaaS) platforms targeting Android devices. Criminal enterprises no longer require extensive technical expertise to deploy advanced mobile threats, as ready-to-use malware kits are now available for subscription fees as low as $300 per month. This democratization of cybercrime tools has transformed […]
The post Renting Android Malware With 2FA Interception, AV Bypass is Getting Cheaper Now appeared first on Cyber Security News.
Tushar Subhra Dutta
Brain Cipher
1 month 1 week ago
You must login to view this content
cohenido
Tea app leak worsens with second database exposing user chats
1 month 1 week ago
The Tea app data breach has grown into an even larger leak, with the stolen data now shared on hacking forums and a second database discovered that allegedly contains 1.1 million private messages exchanged between the app's members. [...]
Lawrence Abrams
Root Evidence Bets on New Concept for Vulnerability Patch Management
1 month 1 week ago
The number of concerning vulnerabilities may be much smaller than organizations think. This cybersecurity startup aims to narrow down the list to the most critical ones.
Arielle Waldman
DragonForce
1 month 1 week ago
You must login to view this content
cohenido
Atomic macOS Stealer Comes With New Backdoor to Enable Remote Access
1 month 1 week ago
The Atomic macOS Stealer (AMOS) has undergone a significant evolution, transforming from a traditional information stealer into a sophisticated persistent threat capable of maintaining long-term access to compromised macOS systems. This development marks a critical escalation in the malware’s capabilities, enabling attackers to execute remote commands and deploy additional payloads beyond its original data theft […]
The post Atomic macOS Stealer Comes With New Backdoor to Enable Remote Access appeared first on Cyber Security News.
Tushar Subhra Dutta
Researchers flag flaw in Google’s AI coding assistant that allowed for ‘silent’ code exfiltration
1 month 1 week ago
The findings are part of a growing list of instances where “agentic” AI software has taken actions that are more akin to a malicious hacker than a helpful AI assistant.
The post Researchers flag flaw in Google’s AI coding assistant that allowed for ‘silent’ code exfiltration appeared first on CyberScoop.
djohnson
CVE-2025-1974
1 month 1 week ago
Currently trending CVE - Hype Score: 14 - A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the ...
restler-fuzzer: first stateful REST API fuzzing tool
1 month 1 week ago
RESTler What is RESTler? RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services. For a given cloud service...
The post restler-fuzzer: first stateful REST API fuzzing tool appeared first on Penetration Testing Tools.
ddos
Operese: New Rust Tool Simplifies Windows 10 to Linux Migration Before EOL Hits
1 month 1 week ago
Amid the looming end of support for Windows 10 in October 2025 and the stringent hardware requirements imposed by Windows 11, many users find themselves in search of viable alternatives. One of the most...
The post Operese: New Rust Tool Simplifies Windows 10 to Linux Migration Before EOL Hits appeared first on Penetration Testing Tools.
ddos
Global
1 month 1 week ago
You must login to view this content
cohenido
Weekly Darknet Markets News 07/28/2025
1 month 1 week ago
Weekly Darknet Markets News 07/28/2025
Dark Web Informer - Cyber Threat Intelligence