Daily Cybersecurity News Roundup – July 28, 2025

Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.

1. U.S. Sanctions Firm Behind N. Korean IT Scheme; Arizona Woman Jailed for Running Laptop Farm

Published: 2025-07-25

The U.S. Department of the Treasury sanctioned a North Korean front company and three individuals for their involvement in a fraudulent remote IT worker scheme to generate illicit revenues for Pyongyang.thehackernews.com

Read more

2. Patchwork Targets Turkish Defense Firms with Spear-Phishing Using Malicious LNK Files

Published: 2025-07-25

The threat actor Patchwork conducted a spear-phishing campaign targeting Turkish defense contractors with malicious LNK files disguised as conference invitations to gather strategic intelligence.thehackernews.com

Read more

3. Cyber Espionage Campaign Hits Russian Aerospace Sector Using EAGLET Backdoor

Published: 2025-07-25

A cyber espionage campaign dubbed Operation CargoTalon targeted Russian aerospace and defense industries, delivering the EAGLET backdoor via spear-phishing emails with cargo delivery-themed lures.thehackernews.com

Read more

4. Soco404 and Koske Malware Target Cloud Services with Cross-Platform Cryptomining Attacks

Published: 2025-07-25

Two malware campaigns, Soco404 and Koske, exploited vulnerabilities and misconfigurations in cloud environments to deploy cryptocurrency miners on both Linux and Windows systems.thehackernews.com

Read more

5. Overcoming Risks from Chinese GenAI Tool Usage

Published: 2025-07-25

A study by Harmonic Security found that employees in the US and UK extensively use China-based generative AI tools, often uploading sensitive data to platforms with unclear data handling practices.thehackernews.com

Read more

6. China-Backed APT41 Cyberattack Surfaces in Africa

Published: 2025-07-27

Up to now, the prolific China-sponsored cyber-espionage group has been mostly absent from the region, but a sophisticated and highly targeted attack on an African IT company shows Beijing is branching out.darkreading.com

Read more

7. China Introduces National Cyber ID Amid Privacy Concerns

Published: 2025-07-26

China officially rolled out a voluntary Internet identity system to protect citizens’ online identities and personal information, but critics worry about privacy and surveillance.darkreading.com

Read more

8. Fixed Ivanti Bugs Still Haunt Japan Orgs 6 Months Later

Published: 2025-07-25

Chinese threat actors have been feeding off the same Ivanti RCE vulnerabilities we’ve known about since January, partly thanks to complications in patching.darkreading.com

Read more

Stay Vigilant

Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using advanced security tools to monitor and protect your digital assets. Stay safe online!

Scroll to Top