Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. NVIDIA Triton Bugs Let Unauthenticated Attackers Execute Code and Hijack AI Servers
Published: 2025-08-04
Security flaws in NVIDIA’s Triton Inference Server for Windows and Linux could be exploited to take over susceptible servers, allowing remote, unauthenticated attackers to gain complete control and achieve remote code execution. The vulnerabilities, including CVE-2025-23319, CVE-2025-23320, and CVE-2025-23334, were disclosed by Wiz researchers.
2. Vietnamese Hackers Use PXA Stealer, Hit 4,000 IPs and Steal 200,000 Passwords Globally
Published: 2025-08-04
Vietnamese-speaking cybercriminals are distributing a Python-based information stealer called PXA Stealer, infecting over 4,000 unique IP addresses across 62 countries and stealing 200,000 passwords, monetizing the data through a subscription-based underground ecosystem. The campaigns incorporate advanced anti-analysis techniques and use Telegram APIs for resale and reuse.
3. ⚡ Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & More
Published: 2025-08-04
This week’s cybersecurity recap explores sophisticated threats, including Russian cyberspies using ISP-level attacks to deploy ApolloShadow, and malware becoming more social and automated, resembling developer tools. It highlights the increasing sophistication of threats like AI-written snippets and open-source platform abuse.
4. Man-in-the-Middle Attack Prevention Guide
Published: 2025-08-04
The guide explains how man-in-the-middle (MITM) attacks exploit communication protocol weaknesses to steal sensitive information like credit card numbers and login credentials, positioning attackers between users and web apps. It offers simple steps for security teams to protect communications and keep silent attackers at bay.
5. New ‘Plague’ PAM Backdoor Exposes Critical Linux Systems to Silent Credential Theft
Published: 2025-08-04
A previously undocumented Linux backdoor named Plague, built as a malicious Pluggable Authentication Module, has evaded detection for a year, enabling attackers to bypass system authentication and gain persistent SSH access. Multiple Plague artifacts were found on VirusTotal since July 2024, with none detected as malicious by antimalware engines.
6. The Wild West of Shadow IT
Published: 2025-08-04
The article discusses how employees’ ability to install plugins and apps without IT approval has led to a sprawling mess of shadow IT, embedded AI, and OAuth permissions, undermining security posture. It lists five ways IT democratization can affect security and offers prevention strategies.
7. PlayPraetor Android Trojan Infects 11,000+ Devices via Fake Google Play Pages and Meta Ads
Published: 2025-08-04
The PlayPraetor Android remote access trojan has infected over 11,000 devices, primarily in Portugal, Spain, France, Morocco, Peru, and Hong Kong, with over 2,000 new infections per week, driven by campaigns targeting Spanish and French speakers. It abuses accessibility services to gain remote control and serves fake overlay login screens for banking apps and cryptocurrency wallets.
8. Koreans Hacked, Blackmailed by 250+ Fake Mobile Apps
Published: 2025-08-05
A swath of copycat Korean apps are hiding spyware, occasionally leading to highly personal, disturbing extortions.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using advanced security tools to monitor and protect your digital assets. Stay safe online!