Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. TA558 Deploys AI-Generated Scripts to Spread Venom RAT in Brazil Hotel Attacks
Published: 2025-09-17
Threat actor TA558, known as RevengeHotels, is using phishing emails themed around invoices to target hotels in Brazil and Spanish-speaking regions, employing AI-generated JavaScript loaders and PowerShell scripts to deliver the Venom RAT malware.
2. Chinese TA415 Leverages VS Code Tunnels for Espionage on U.S. Economic Experts
Published: 2025-09-17
China-aligned group TA415 has launched spear-phishing attacks against U.S. government, think tanks, and academics focused on U.S.-China economic policies, utilizing VS Code remote tunnels for persistent access and intelligence collection.
3. Scattered Spider Group Returns with New Financial Sector Intrusions
Published: 2025-09-17
Despite earlier retirement claims, the Scattered Spider cybercrime syndicate has resurfaced, conducting social engineering-led attacks on U.S. financial institutions, including credential dumping and the creation of lookalike domains for phishing.
4. DOJ Resentences BreachForums Founder to Three Years for Cybercrime Operations
Published: 2025-09-17
Conor Fitzpatrick, the former administrator of the BreachForums cybercrime forum, has been resentenced to three years in prison for facilitating illegal activities and possessing child sexual abuse material, with authorities seizing over 100 domains.
5. Microsoft and Cloudflare Dismantle RaccoonO365 Phishing Network, Seizing 338 Domains
Published: 2025-09-17
A joint operation by Microsoft’s Digital Crimes Unit and Cloudflare has taken down 338 domains used by the RaccoonO365 phishing-as-a-service group, which stole over 5,000 Microsoft 365 credentials from victims in 94 countries since July 2024.
6. Google Rolls Out Full Client-Side Encryption for Google Sheets
Published: 2025-09-17
Google has fully deployed client-side encryption for Google Sheets in Rapid Release domains, with Scheduled Release following on September 18, enabling users to protect sensitive data before it reaches Google’s servers.
7. Florida Retina Group Data Breach Exposes 153,000 Patients’ Information
Published: 2025-09-17
The Retina Group of Florida disclosed a cyber incident affecting 153,000 patients, compromising personal and health data, with notifications beginning September 16 and free credit monitoring offered to those impacted.
8. South Lyon Schools Reopen After Three-Day Closure Due to Cyberattack
Published: 2025-09-18
Michigan’s South Lyon Community Schools resumed operations on September 18 following a ransomware attack that forced a three-day shutdown, with the district collaborating with authorities to investigate and restore systems.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and enhance your phishing defenses with AI detection tools to counter sophisticated campaigns targeting credentials. Stay safe online!