Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. U.S. Sanctions Firm Behind N. Korean IT Scheme; Arizona Woman Jailed for Running Laptop Farm
Published: 2025-07-25
The U.S. Department of the Treasury sanctioned a North Korean front company and three individuals for a fraudulent IT worker scheme to generate illicit revenues for Pyongyang, while an Arizona woman was jailed for running a laptop farm. The action targets Korea Sobaeksu Trading Company and others for evading sanctions against the DPRK.thehackernews.com
2. Patchwork Targets Turkish Defense Firms with Spear-Phishing Using Malicious LNK Files
Published: 2025-07-25
The threat actor Patchwork conducted a spear-phishing campaign targeting Turkish defense contractors using malicious LNK files disguised as conference invitations to gather strategic intelligence. The activity coincides with geopolitical tensions involving Pakistan, Türkiye, and India.thehackernews.com
3. Cyber Espionage Campaign Hits Russian Aerospace Sector Using EAGLET Backdoor
Published: 2025-07-25
A cyber espionage campaign named Operation CargoTalon targeted Russian aerospace and defense industries, delivering the EAGLET backdoor via spear-phishing emails with cargo-themed lures. The attack focused on employees of Voronezh Aircraft Production Association using logistics-related documents.thehackernews.com
4. Soco404 and Koske Malware Target Cloud Services with Cross-Platform Cryptomining Attacks
Published: 2025-07-25
Two malware campaigns, Soco404 and Koske, exploited vulnerabilities in cloud environments to deploy cryptocurrency miners on Linux and Windows systems, using process masquerading to disguise activities. The campaigns targeted misconfigured services and used fake 404 HTML pages hosted on Google Sites.thehackernews.com
5. Overcoming Risks from Chinese GenAI Tool Usage
Published: 2025-07-25
A study by Harmonic Security found that 8% of 14,000 employees in the US and UK used China-based GenAI tools like DeepSeek and Baidu Chat, often uploading sensitive data without oversight, raising concerns over compliance and data privacy. The findings highlight a gap between AI adoption and governance in developer-heavy organizations.thehackernews.com
6. Critical Mitel Flaw Lets Hackers Bypass Login, Gain Full Access to MiVoice MX-ONE Systems
Published: 2025-07-24
Mitel addressed a critical authentication bypass vulnerability in MiVoice MX-ONE’s Provisioning Manager, which could allow unauthenticated attackers to gain unauthorized access to user or admin accounts, with a CVSS score of 9.4. Patches were released for affected versions from 7.3 to 7.8 SP1.thehackernews.com
7. Fire Ant Exploits VMware Flaws to Compromise ESXi Hosts and vCenter Environments
Published: 2025-07-24
The threat actor Fire Ant conducted a prolonged cyber espionage campaign targeting VMware ESXi and vCenter environments, using sophisticated techniques to maintain access and infiltrate segmented network assets, with overlaps to UNC3886 activities. The campaign was observed in 2025.thehackernews.com
8. CastleLoader Malware Infects 469 Devices Using Fake GitHub Repos and ClickFix Phishing
Published: 2025-07-24
The CastleLoader malware infected 469 devices worldwide by leveraging fake GitHub repositories and ClickFix phishing techniques to distribute malicious payloads.thehackernews.com
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using tools like advanced threat detection software to monitor your systems for vulnerabilities and automate security patches. Stay safe online!