Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Scattered Spider Hijacks VMware ESXi to Deploy Ransomware on Critical U.S. Infrastructure
Published: 2025-07-28
The cybercrime group Scattered Spider targets VMware ESXi hypervisors in retail, airline, and transportation sectors using social engineering, aiming to deploy ransomware on critical systems. Their tactics involve precise, campaign-driven operations without relying on software exploits.thehackernews.com
2. Hackers Breach Toptal GitHub, Publish 10 Malicious npm Packages With 5,000 Downloads
Published: 2025-07-28
Unknown threat actors compromised Toptal’s GitHub organization and published 10 malicious npm packages, which contained code to exfiltrate GitHub authentication tokens and destroy systems, attracting about 5,000 downloads before removal. The breach also made 73 repositories public, affecting packages like @toptal/picasso-tailwind and others.thehackernews.com
3. Critical Flaws in Niagara Framework Threaten Smart Buildings and Industrial Systems Worldwide
Published: 2025-07-28
Over a dozen vulnerabilities in Tridium’s Niagara Framework could allow attackers on the same network to compromise systems, especially if misconfigured, affecting smart buildings and industrial automation. The flaws could be chained for a full system compromise via Man-in-the-Middle attacks.thehackernews.com
4. U.S. Sanctions Firm Behind N. Korean IT Scheme; Arizona Woman Jailed for Running Laptop Farm
Published: 2025-07-25
The U.S. sanctioned Korea Sobaeksu Trading Company and three individuals for a fraudulent IT worker scheme generating illicit revenues for North Korea, while an Arizona woman was jailed for running a laptop farm to support such activities. The actions aim to dismantle North Korea’s sanctions evasion efforts.thehackernews.com
5. Allianz Life Data Breach Impacts Most of 1.4 Million US Customers
Published: 2025-07-28
An Allianz subsidiary reported that the information of customers, financial professionals, and employees was compromised due to a hack.securityweek.com
6. UNC3886 Hackers Exploiting 0-Days in VMware vCenter/ESXi, Fortinet FortiOS, and Junos OS
Published: 2025-07-28
UNC3886, a China-linked APT group, has been actively exploiting zero-day vulnerabilities in VMware vCenter/ESXi, Fortinet FortiOS, and Junos OS, targeting Singapore’s critical infrastructure. This activity underscores the ongoing threat to essential systems.cybersecuritynews.com
7. Hackers Allegedly Destroyed Aeroflot Airlines’ IT Infrastructure in Year-Long Attack
Published: 2025-07-28
Pro-Ukraine hackers claimed to have “completely destroyed” Aeroflot Airlines’ internal IT infrastructure in a year-long attack, leaving the airline scrambling to recover. This incident highlights the impact of cyberattacks on critical infrastructure.cybersecuritynews.com
8. Muddled Libra Actors Attacking Organizations Call Centers for Initial Infiltration
Published: 2025-07-28
The Muddled Libra threat group has shifted its attack methodology in 2025, targeting organizations’ call centers for initial infiltration, moving away from traditional methods. This evolution marks a concerning change in their cyberthreat tactics.cybersecuritynews.com
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using advanced security tools to monitor and protect your digital assets. Stay safe online!