π¦
Supply Chain Attacks Have Doubled. Whatβs Driving the Increase? π¦
π Read more.
π Via "CYBLE"
----------
ποΈ Seen on @cibsecurity
supply chain attacks " dataimagecaption"" datamediumfile"httpscyble.comwpcontentuploads202509supplychainattacks300x150.webp" datalargefile"httpscyble.comwpcontentuploads202509supplychainattacks.webp" title"Supply Chain Attacks Have Doubled. Whats Driving the Increase? 1" Software supply chain attacks have been occurring at twice their longterm average in recent months and have shown no sign of slowing down. The uptick in supply chain attacks began in April 2025, when Cyble dark web researchers observed claims of 31 such attacks. Since then, cyberattacks with supply chain implications have averaged 26 a month, twice the rate seen from early 2024 through March 2025 chart below. Cybles most recent threat landscape report registration required documented 30 supply chain incidents...π Read more.
π Via "CYBLE"
----------
ποΈ Seen on @cibsecurity
Cyble
Supply Chain Attacks Surge In 2025: Double The Usual Rate
Supply chain attacks have doubled since April 2025, targeting IT and tech firms. Ransomware, data theft, and zero-day exploits drive the ongoing surge.
π¦
Supply Chain Attacks Have Doubled. Whatβs Driving the Increase? π¦
π Read more.
π Via "CYBLE"
----------
ποΈ Seen on @cibsecurity
supply chain attacks " dataimagecaption"" datamediumfile"httpscyble.comwpcontentuploads202509supplychainattacks300x150.webp" datalargefile"httpscyble.comwpcontentuploads202509supplychainattacks.webp" title"Supply Chain Attacks Have Doubled. Whats Driving the Increase? 1" Software supply chain attacks have been occurring at twice their longterm average in recent months and have shown no sign of slowing down. The uptick in supply chain attacks began in April 2025, when Cyble dark web researchers observed claims of 31 such attacks. Since then, cyberattacks with supply chain implications have averaged 26 a month, twice the rate seen from early 2024 through March 2025 chart below. Cybles most recent threat landscape report registration required documented 30 supply chain incidents...π Read more.
π Via "CYBLE"
----------
ποΈ Seen on @cibsecurity
Cyble
Supply Chain Attacks Surge In 2025: Double The Usual Rate
Supply chain attacks have doubled since April 2025, targeting IT and tech firms. Ransomware, data theft, and zero-day exploits drive the ongoing surge.
ποΈ ScarCruft Uses RokRAT Malware in Operation HanKook Phantom Targeting South Korean Academics ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
Cybersecurity researchers have discovered a new phishing campaign undertaken by the North Korealinked hacking group called ScarCruft aka APT37 to deliver a malware known as RokRAT. The activity has been codenamed Operation HanKook Phantom by Seqrite Labs, stating the attacks appear to target individuals associated with the National Intelligence Research Association, including academic figures.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
π Amazon Stops Russian APT29 Watering Hole Attack Exploiting Microsoft Auth π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
The campaign shows APT29s intentions to cast a wider net in their intelligence collection efforts, said Amazon.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Amazon Stops Russian APT29 Watering Hole Attack Exploiting Microsoft Auth
The campaign shows APT29βs intentions to βcast a wider net in their intelligence collection efforts,β said Amazon
π’ Enterprises need to patch these Citrix flaws now π’
π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurity
Organizations should move quickly to install patches, according to Citrix.π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurity
IT Pro
Enterprises need to patch these Citrix flaws now
Organizations should move quickly to install patches, according to Citrix
ποΈ When Browsers Become the Attack Surface: Rethinking Security for Scattered Spider ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
As enterprises continue to shift their operations to the browser, security teams face a growing set of cyber challenges. In fact, over 80 of security incidents now originate from web applications accessed via Chrome, Edge, Firefox, and other browsers. One particularly fastevolving adversary, Scattered Spider, has made it their mission to wreak havoc on enterprises by specifically targeting.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
π Ransomware Attack on Pennsylvaniaβs AG Office Disrupts Court Cases π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Pennsylvanias Attorney General confirmed the OAG had refused to pay a ransom demand to the attackers after files were encrypted.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Ransomware Attack on Pennsylvaniaβs AG Office Disrupts Court Cases
Pennsylvaniaβs Attorney General confirmed the OAG had refused to pay a ransom demand to the attackers after files were encrypted
π Regional Sales Manager (Eastern USA) π
π Read more.
π Via "UnderDefense"
----------
ποΈ Seen on @cibsecurity
The post Regional Sales Manager Eastern USA appeared first on UnderDefense.π Read more.
π Via "UnderDefense"
----------
ποΈ Seen on @cibsecurity
UnderDefense
Regional Sales Manager (Eastern USA) - UnderDefense
βοΈ The Ongoing Fallout from a Breach at AI Chatbot Maker Salesloft βοΈ
π Read more.
π Via "Krebs on Security"
----------
ποΈ Seen on @cibsecurity
The recent masstheft of authentication tokens from Salesloft, whose AI chatbot is used by a broad swath of corporate America to convert customer interaction into Salesforce leads, has left many companies racing to invalidate the stolen credentials before hackers can exploit them. Now Google warns the breach goes far beyond access to Salesforce data, noting the hackers responsible also stole valid authentication tokens for hundreds of online services that customers can integrate with Salesloft, including Slack, Google Workspace, Amazon S3, Microsoft Azure, and OpenAI.π Read more.
π Via "Krebs on Security"
----------
ποΈ Seen on @cibsecurity
Krebs on Security
The Ongoing Fallout from a Breach at AI Chatbot Maker Salesloft
The recent mass-theft of authentication tokens from Salesloft, whose AI chatbot is used by a broad swath of corporate America to convert customer interaction into Salesforce leads, has left many companies racing to invalidate the stolen credentials beforeβ¦
ποΈ Android Droppers Now Deliver SMS Stealers and Spyware, Not Just Banking Trojans ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
Cybersecurity researchers are calling attention to a new shift in the Android malware landscape where dropper apps, which are typically used to deliver banking trojans, to also distribute simpler malware such as SMS stealers and basic spyware. These campaigns are propagated via dropper apps masquerading as government or banking apps in India and other parts of Asia, ThreatFabric said in a report.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
ποΈ β‘ Weekly Recap: WhatsApp 0-Day, Docker Bug, Salesforce Breach, Fake CAPTCHAs, Spyware App & More ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
Cybersecurity today is less about single attacks and more about chains of small weaknesses that connect into big risks. One overlooked update, one misused account, or one hidden tool in the wrong hands can be enough to open the door. The news this week shows how attackers are mixing methodscombining stolen access, unpatched software, and clever tricks to move from small entry points to large.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
π Silver Fox Exploits Signed Drivers to Deploy ValleyRAT Backdoor π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Silver Fox APT abuses Microsoftsigned drivers to kill antivirus and deploy ValleyRAT remoteaccess backdoor.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Silver Fox Exploits Signed Drivers to Deploy ValleyRAT Backdoor
Silver Fox APT abuses Microsoft-signed drivers to kill antivirus and deploy ValleyRAT remote-access backdoor
π High-Risk SQLi Flaw Exposes WordPress Memberships Plugin Users π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
A vulnerability in the WordPress Paid Memberships Subscription plugin could lead to unauthenticated SQL injection on affected sites.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
High-Risk SQLi Flaw Exposes WordPress Memberships Plugin Users
A vulnerability in the WordPress Paid Memberships Subscription plugin could lead to unauthenticated SQL injection on affected sites
ποΈ Malicious npm Package nodejs-smtp Mimics Nodemailer, Targets Atomic and Exodus Wallets ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
Cybersecurity researchers have discovered a malicious npm package that comes with stealthy features to inject malicious code into desktop apps for cryptocurrency wallets like Atomic and Exodus on Windows systems. The package, named nodejssmtp, impersonates the legitimate email library nodemailer with an identical tagline, page styling, and README descriptions, attracting a total of 347.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
ποΈ Malicious npm Package nodejs-smtp Mimics Nodemailer, Targets Atomic and Exodus Wallets ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
Cybersecurity researchers have discovered a malicious npm package that comes with stealthy features to inject malicious code into desktop apps for cryptocurrency wallets like Atomic and Exodus on Windows systems. The package, named nodejssmtp, impersonates the legitimate email library nodemailer with an identical tagline, page styling, and README descriptions, attracting a total of 347.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
π Zscaler Customer Info Taken in Salesloft Breach π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Zscaler has emerged as the latest corporate victim of a supply chain attack targeting Salesforce data.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Zscaler Customer Info Taken in Salesloft Breach
Zscaler has emerged as the latest corporate victim of a supply chain attack targeting Salesforce data
π Zscaler Customer Info Taken in Salesloft Breach π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Zscaler has emerged as the latest corporate victim of a supply chain attack targeting Salesforce data.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Zscaler Customer Info Taken in Salesloft Breach
Zscaler has emerged as the latest corporate victim of a supply chain attack targeting Salesforce data
π’ Anthropic admits hackers have 'weaponized' its tools β and cyber experts warn it's a terrifying glimpse into 'how quickly AI is changing the threat landscape' π’
π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurity
Security experts say Anthropic's recent admission that hackers have "weaponized" its AI tools gives us a terrifying glimpse into the future of cyber crime.π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurity
IT Pro
Anthropic admits hackers have 'weaponized' its tools β and cyber experts warn it's a terrifying glimpse into 'how quickly AI isβ¦
Anthropic researchers discovered ransomware made via vibe-coding and North Koreans getting jobs in the US with chatbots
π’ Google says 'claims of a major Gmail security warning are false' following recent media reports π’
π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurity
Reports of a massive Gmail hack affecting billions of users have been denied by Google.π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurity
IT Pro
Google says 'claims of a major Gmail security warning are false' following recent media reports
Reports of a massive Gmail hack affecting billions of users have been denied by Google
π¦Ώ How to Secure Your Email Via Encryption and Password Management π¦Ώ
π Read more.
π Via "Tech Republic"
----------
ποΈ Seen on @cibsecurity
From emailing vendors to communicating with team members, serious business happens in the inbox. That's why it's critical to secure it. These TechRepublic Premium resources can help.π Read more.
π Via "Tech Republic"
----------
ποΈ Seen on @cibsecurity
TechRepublic
How to Secure Your Email Via Encryption and Password Management
From emailing vendors to communicating with team members, serious business happens in the inbox.
ποΈ Shadow AI Discovery: A Critical Part of Enterprise AI Governance ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
The Harsh Truths of AI Adoption MITs State of AI in Business report revealed that while 40 of organizations have purchased enterprise LLM subscriptions, over 90 of employees are actively using AI tools in their daily work. Similarly, research from Harmonic Security found that 45.4 of sensitive AI interactions are coming from personal email accounts, where employees are bypassing corporate.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
β€1