Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Noodlophile Malware Campaign Expands Global Reach with Copyright Phishing Lures
Published: 2025-08-18
The Noodlophile malware campaign, active for over a year, now uses spear-phishing emails posing as copyright infringement notices to target enterprises in the U.S., Europe, Baltic countries, and APAC.
2. Microsoft Windows Vulnerability Exploited to Deploy PipeMagic RansomExx Malware
Published: 2025-08-18
Threat actors are exploiting a patched Microsoft Windows privilege escalation vulnerability (CVE-2025-29824) to deploy PipeMagic malware in RansomExx ransomware attacks.
3. Malicious PyPI and npm Packages Discovered Exploiting Dependencies in Supply Chain Attacks
Published: 2025-08-18
A malicious PyPI package named termncolor uses a dependency called colorinal to establish persistence and achieve code execution in supply chain attacks.
4. ERMAC V3.0 Banking Trojan Source Code Leak Exposes Full Malware Infrastructure
Published: 2025-08-16
The source code leak of ERMAC 3.0, an Android banking trojan, reveals its expanded capabilities to target over 700 banking, shopping, and cryptocurrency applications.
5. Russian Group EncryptHub Exploits MSC EvilTwin Vulnerability to Deploy Fickle Stealer Malware
Published: 2025-08-16
The Russian hacking group EncryptHub exploits a patched Microsoft Windows vulnerability (CVE-2025-26633) using social engineering to deploy Fickle Stealer malware.
6. Taiwan Web Servers Breached by UAT-7237 Using Customized Open-Source Hacking Tools
Published: 2025-08-15
A Chinese-speaking APT group, UAT-7237, targets Taiwan web infrastructure using customized open-source tools to establish long-term access.
7. US Seizes $2.8 Million From Zeppelin Ransomware Operator
Published: August 2025
The US Department of Justice charged Ianis Aleksandrovich Antropenko with operating Zeppelin ransomware, seizing over $2.8 million in cryptocurrency from his wallet linked to global extortion activities.
8. SentinelOne Acquires AI Startup Prompt Security
Published: 2025-08-06
SentinelOne has acquired Prompt Security, a startup focused on real-time monitoring and security of AI use, with plans to integrate its tools into SentinelOne’s Singularity platform.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using advanced security tools to monitor and protect your digital assets. Stay safe online!