Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Secret Blizzard Deploys Malware in ISP-Level AitM Attacks on Moscow Embassies
Published: 2025-07-31
Russian threat actor Secret Blizzard, linked to the Federal Security Service, conducted a cyber espionage campaign targeting Moscow embassies using ISP-level adversary-in-the-middle attacks to deploy malware called ApolloShadow for intelligence collection.
2. Experts Detect Multi-Layer Redirect Tactic Used to Steal Microsoft 365 Login Credentials
Published: 2025-07-31
A phishing campaign abuses link wrapping services to bypass defenses, redirecting victims to Microsoft 365 phishing pages and gaining unauthorized access to email accounts.
3. N. Korean Hackers Used Job Lures, Cloud Account Access, and Malware to Steal Millions in Crypto
Published: 2025-07-31
North Korea-linked UNC4899 targeted organizations via LinkedIn and Telegram with job lures to deploy malicious Docker containers, stealing millions in cryptocurrency from blockchain industries.
4. Palo Alto Networks to Acquire CyberArk for $25 Billion
Published: 2025-07-31
Palo Alto Networks announced a strategic acquisition of CyberArk for $25 billion, expanding its presence in the identity security space and accelerating its platform strategy.
5. African Orgs Fall to Mass Microsoft SharePoint Exploits
Published: 2025-07-31
Several African organizations, including South Africa’s National Treasury, are victims of mass compromises of on-premises Microsoft SharePoint servers.
6. UNC2891 Breaches ATM Network via 4G Raspberry Pi, Tries CAKETAP Rootkit for Fraud
Published: 2025-07-31
Financially motivated UNC2891 used a 4G-equipped Raspberry Pi to breach ATM networks, enabling remote access for fraud through covert attacks.
7. Hackers Exploit Critical WordPress Theme Flaw to Hijack Sites via Remote Plugin Install
Published: 2025-07-31
Threat actors exploit CVE-2025-5394 in the “Alone” WordPress theme, allowing unauthenticated remote plugin installs for site hijacking, fixed in version 7.8.5.
8. Cost of Data Breach in US Rises to $10.22 Million, Says Latest IBM Report
Published: 2025-07-31
The IBM report states the global average cost of a data breach dropped to $4.44 million, but the US average rose to a record $10.22 million, reflecting increased breach expenses.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using advanced security tools to monitor and protect your digital assets. Stay safe online!