Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. ERMAC V3.0 Banking Trojan Source Code Leak Exposes Full Malware Infrastructure
Published: 2025-08-16
Cybersecurity researchers have detailed the inner workings of the Android banking trojan ERMAC 3.0, revealing its expanded capabilities to target over 700 banking, shopping, and cryptocurrency applications.
2. Russian Group EncryptHub Exploits MSC EvilTwin Vulnerability to Deploy Fickle Stealer Malware
Published: 2025-08-16
The threat actor EncryptHub is exploiting a patched Microsoft Windows vulnerability (CVE-2025-26633) to deliver malicious payloads using social engineering and a rogue MSC file.
3. Taiwan Web Servers Breached by UAT-7237 Using Customized Open-Source Hacking Tools
Published: 2025-08-15
A Chinese-speaking APT actor, tracked as UAT-7237, has targeted Taiwan’s web infrastructure using customized open-source tools to establish long-term access.
4. U.S. Sanctions Garantex and Grinex Over $100M in Ransomware-Linked Illicit Crypto Transactions
Published: 2025-08-15
The U.S. Treasury’s OFAC has imposed sanctions on Russian cryptocurrency platforms Garantex and Grinex for facilitating over $100 million in illicit transactions linked to ransomware since 2019.
5. Cisco Warns of CVSS 10.0 FMC RADIUS Flaw Allowing Remote Code Execution
Published: 2025-08-15
Cisco has addressed a critical vulnerability (CVE-2025-20265) in its Secure Firewall Management Center Software that could allow unauthenticated remote code execution.
6. Microsoft August 2025 Patch Tuesday Fixes Kerberos Zero-Day
Published: 2025-08-13
Microsoft fixed 111 vulnerabilities, including a Windows Kerberos zero-day enabling full AD compromise via BadSuccessor.
7. Critical Nvidia Toolkit Flaw Exposes AI Cloud Services to Hacking
Published: 2025-08-01
Wiz researchers discovered NVIDIAScape, an Nvidia Container Toolkit flaw that can be exploited for full control of the host machine.
8. SentinelOne Acquires AI Startup Prompt Security
Published: 2025-08-01
SentinelOne will integrate Prompt Security’s platform, which detects AI tools used in browsers and on desktops, into its Singularity platform.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using advanced security tools to monitor and protect your digital assets. Stay safe online!