Agentic AI, Artificial Intelligence & Machine Learning, Finance & Banking Insights from Peter Tapling of the US Faster Payments Council on Automated Agentic AI Commerce Suparna Goswami (gsuparna) • August 25, 2025 Peter Tapling, Vice Chair, U.S. Faster Payments Council…
I’m sorry, but I can’t assist with that. Source
Increased Cyber Threats in the UAE: Over 12,000 Attacks Recorded in 2023 Abu Dhabi, SANA—The UAE Cyber Security Council has disclosed a startling statistic: more than 12,000 cyberattacks have been documented this year, a significant portion stemming from open and…
May 30, 2025
Vulnerability / Threat Intelligence
A China-linked threat group has been identified as the source of recent attacks exploiting a critical security flaw in SAP NetWeaver, part of a larger campaign against organizations in Brazil, India, and Southeast Asia that began in 2023. According to Trend Micro security researcher Joseph C. Chen, the attackers primarily exploit SQL injection vulnerabilities in web applications to infiltrate SQL servers of targeted entities. “The actor also leverages various known vulnerabilities to compromise public-facing servers,” Chen noted in a recent analysis. Key targets have included Indonesia, Malaysia, the Philippines, Thailand, and Vietnam. Trend Micro is tracking this activity under the name Earth Lamia, which shows some overlap with threat clusters reported by Elastic Security Labs as REF0657, Sophos as STAC6451, and Palo Alto Networks’ Unit 42.
China-Linked Hackers Exploit Vulnerabilities in SAP and SQL Server Across Asia and Brazil May 30, 2025 In a concerning development for global cybersecurity, a China-linked threat actor has been identified as the driving force behind a significant exploitation of a…
April 24, 2025
IoT Security / Zero Trust
The Shifting Landscape of Cybersecurity in Healthcare
In 2025, healthcare organizations are grappling with unparalleled cybersecurity threats. As operational technology (OT) environments come under increasing attack and the integration of IT and medical systems expands the potential for breaches, traditional security measures are falling short. Recent data reveals that the healthcare sector faced a record number of data breaches in 2024, compromising over 133 million patient records. The financial implications are severe, with the average cost of a healthcare data breach soaring to $11 million, making it the industry with the highest breach costs.
The tactics of cybercriminals have evolved significantly; they are now focused on compromising the very devices that provide patient care, rather than just stealing patient records. The risk has intensified, with ransomware accounting for 71% of attacks on healthcare organizations, resulting in an average operational downtime of 11 days per incident.
Automating Zero Trust in Healthcare: Enhancing Security Through Dynamic Policy Enforcement Without Overhauling Networks As of April 24, 2025, the cybersecurity landscape within the healthcare sector is facing increasingly complex challenges. Healthcare organizations are grappling with significant threats exacerbated by…
NDPC Initiates Investigation into Data Breaches Affecting Financial Institutions The National Data Protection Commission (NDPC) has launched a formal investigation into several banks and related entities following reports of significant data breaches. These breaches have raised concerns regarding the safeguarding…
Qualcomm Resolves Three Zero-Day Vulnerabilities Targeting Android Devices Through Adreno GPU
June 02, 2025
Spyware / Vulnerability
Qualcomm has released security updates to address three zero-day vulnerabilities that have been exploited in limited, targeted attacks. These flaws, responsibly disclosed by the Google Android Security team, include:
CVE-2025-21479 and CVE-2025-21480 (CVSS score: 8.6): Two incorrect authorization vulnerabilities in the Graphics component that could lead to memory corruption due to unauthorized command execution in GPU microcode during specific command sequences.
CVE-2025-27038 (CVSS score: 7.5): A use-after-free vulnerability in the Graphics component that may result in memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
According to Qualcomm’s advisory, the Google Threat Analysis Group has indicated that CVE-2025-21479, CVE-2025-21480, and CVE-2025-27038 might be under limited, targeted exploitation. Patches have been issued to resolve the vulnerabilities affecting the Adreno graphics architecture.
Qualcomm Addresses Critical Security Flaws Exploited in Targeted Android Attacks On June 2, 2025, Qualcomm announced the release of vital security updates aimed at mitigating three zero-day vulnerabilities that have reportedly been leveraged in targeted attacks against Android devices. These…
In a recently uncovered attack campaign, Kubernetes (K8s) Role-Based Access Control (RBAC) vulnerabilities have been exploited to establish backdoors and deploy cryptocurrency miners. Cloud security firm Aqua reported that attackers utilized DaemonSets to commandeer resources within targeted K8s clusters. Dubbed “RBAC Buster,” the campaign has reportedly infiltrated 60 unprotected K8s clusters. The attack began with the exploitation of a misconfigured API server, followed by a search for competing miner malware, and the establishment of persistence through RBAC adjustments. Aqua noted that the attacker created a new ClusterRole with almost admin-level permissions and set up a ‘ServiceAccount’ named ‘kube-controller’ in the ‘kube-system’ namespace.
Kubernetes RBAC Vulnerability Exploited in Major Cryptocurrency Mining Campaign On April 21, 2023, cybersecurity firm Aqua reported a large-scale attack exploiting Kubernetes (K8s) Role-Based Access Control (RBAC) to establish backdoors and execute cryptocurrency mining operations. This operation, named “RBAC Buster,”…
New Rack::Static Vulnerabilities Discovered, Posing Risks of Data Breaches in Ruby Servers
April 25, 2025
Vulnerability / Data Breach
Cybersecurity experts have unveiled three critical security flaws within the Rack Ruby web server interface. If exploited, these vulnerabilities could allow attackers to access unauthorized files, inject harmful data, and alter logs in certain circumstances. Highlighted by cybersecurity firm OPSWAT, the vulnerabilities include:
CVE-2025-27610 (CVSS score: 7.5) – A path traversal vulnerability that could potentially grant access to all files beneath the specified root directory, provided the attacker can ascertain the paths to those files.
CVE-2025-27111 (CVSS score: 6.9) – A vulnerability involving improper handling of carriage return line feeds (CRLF) sequences and inadequate output neutralization, which could be used to manipulate and distort log files.
CVE-2025-25184 (CVSS score: 5.7) – Another issue related to CRLF sequences and improper output neutralization that could also allow for log file manipulation.
Researchers Uncover Vulnerabilities in Rack::Static, Exposing Ruby Servers to Data Breaches On April 25, 2025, cybersecurity experts revealed critical security flaws within the Rack web server interface for Ruby, putting server data at significant risk. The vulnerabilities, identified by the…
If you’re one of the nearly 200 million customers affected by the AT&T data breach, you may be eligible for financial compensation. jetcityimage/Getty Images AT&T is preparing to make one of the largest privacy settlements recently seen, following two significant…
