Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. China’s Massistant Tool Secretly Extracts SMS, GPS Data, and Images From Confiscated Phones
Published: 2025-07-18
Cybersecurity researchers revealed a mobile forensics tool called Massistant, used by Chinese law enforcement to extract GPS, SMS, images, and other data from seized devices, developed by SDIC Intelligence Xiamen Information Co., Ltd.thehackernews.com
2. UNG0002 Group Hits China, Hong Kong, Pakistan Using LNK Files and RATs in Twin Campaigns
Published: 2025-07-18
The UNG0002 threat group targeted multiple sectors in China, Hong Kong, and Pakistan with cyber espionage campaigns using LNK files, VBScript, and tools like Cobalt Strike, including Operation Cobalt Whisper and Operation AmberMist.thehackernews.com
3. Ivanti Zero-Days Exploited to Drop MDifyLoader and Launch In-Memory Cobalt Strike Attacks
Published: 2025-07-18
Threat actors exploited Ivanti Connect Secure flaws CVE-2025-0282 and CVE-2025-22457 to deploy MDifyLoader, which launches Cobalt Strike in memory, with attacks observed between December 2024 and July 2025.thehackernews.com
4. Critical NVIDIA Container Toolkit Flaw Allows Privilege Escalation on AI Cloud Services
Published: 2025-07-18
A critical vulnerability, CVE-2025-23266, in NVIDIA Container Toolkit, with a CVSS score of 9.0, could allow privilege escalation and data tampering in AI cloud services, affecting versions up to 1.17.7.thehackernews.com
5. CERT-UA Discovers LAMEHUG Malware Linked to APT28, Using LLM for Phishing Campaign
Published: 2025-07-18
CERT-UA disclosed a phishing campaign delivering LAMEHUG malware, attributed to Russian group APT28, using large language models to generate commands, targeting Ukrainian government officials with emails containing malicious ZIP archives.thehackernews.com
6. Google Sues 25 Chinese Entities Over BADBOX 2.0 Botnet Affecting 10M Android Devices
Published: 2025-07-18
Google filed a lawsuit against 25 Chinese entities for operating the BADBOX 2.0 botnet, which compromised over 10 million Android devices for ad fraud, with Google Play Protect updated to block related apps.thehackernews.com
7. From Backup to Cyber Resilience: Why IT Leaders Must Rethink Backup in the Age of Ransomware
Published: 2025-07-18
The article discusses the shift from data backup to cyber resilience due to escalating ransomware threats, including RaaS platforms enabling large-scale attacks with double and triple extortion, particularly impacting SMBs with significant downtime costs.thehackernews.com
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using advanced security tools to monitor and protect your digital assets. Stay safe online!