Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Salt Typhoon Exploits Cisco, Ivanti, Palo Alto Flaws to Breach 600 Organizations Worldwide
Published: 2025-08-28
The China-linked APT actor Salt Typhoon has continued its attacks targeting networks across various sectors worldwide, exploiting vulnerabilities in Cisco, Ivanti, and Palo Alto devices.
2. Malicious Nx Packages in ‘s1ngularity’ Attack Leaked 2,349 GitHub, Cloud, and AI Credentials
Published: 2025-08-28
Malicious versions of the nx npm package were published, scanning file systems and leaking credentials from over 2,349 GitHub, cloud, and AI accounts.
3. U.S. Treasury Sanctions DPRK IT-Worker Scheme, Exposing $600K Crypto Transfers and $1M+ Profits
Published: 2025-08-28
The U.S. Treasury sanctioned individuals and entities involved in a North Korean IT worker scheme that generated illicit revenue through data theft and ransom demands.
4. South Korea Arrests Suspected Chinese Hacker Stolen Tens of Millions of Dollars from Victims
Published: 2025-08-28
South Korean authorities have extradited a Chinese national suspected of orchestrating a sophisticated hacking operation targeting high-profile individuals and financial systems.
5. Hackers Abuse Microsoft Teams to Gain Remote Access on Windows With PowerShell-based Malware
Published: 2025-08-28
Cybercriminals are exploiting Microsoft Teams to deploy malware and gain control of victim systems by leveraging its trusted role in corporate communications.
6. MathWorks Confirms Cyberattack, User Personal Information Stolen
Published: 2025-08-28
MathWorks, Inc. confirmed a significant cyberattack that resulted in the theft of user personal information from the developer of MATLAB and Simulink software.
7. Threat Actors Abuse Velociraptor Incident Response Tool to Gain Remote Access
Published: 2025-08-28
Threat actors have co-opted the open-source Velociraptor DFIR tool to establish covert remote access during a sophisticated intrusion.
8. Cisco Nexus 3000 and 9000 Series Vulnerability Let Attackers Trigger DoS Attack
Published: 2025-08-28
Cisco issued a High-severity advisory for a critical vulnerability in the IS-IS feature of NX-OS Software for Nexus 3000 and 9000 Series, allowing attackers to trigger a DoS attack.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and focus on regular vulnerability scanning and patch management to protect against state-sponsored exploits. Stay safe online!