Cyber Espionage Suspected in South American Diplomatic Attacks On Monday, Microsoft announced it has linked a China-based cyber espionage group to a series of attacks targeting diplomatic organizations in South America. The tech conglomerate’s Security Intelligence team is closely monitoring this group under the identifier DEV-0147. They characterized the recent…
Government, Industry Specific, Next-Generation Technologies & Secure Development Startup Secures $75M to Expand Dual-Use Technology Against GPS Jamming Threats Michael Novinson (MichaelNovinson) • September 4, 2025 Ronak Shah, co-CTO of Shift5 (Image: Shift5) A cybersecurity startup focused on military and transportation security has successfully raised $75 million in funding aimed…
Emerging Threat: New Infostealer Program Targets Vulnerable Users with Automated Sextortion Features Recent investigations by cybersecurity firm Proofpoint have uncovered a burgeoning threat in the form of a malicious software known as Stealerium. This program, which masquerades as a legitimate application, allows cybercriminals to access a wide range of personal…
A newly identified threat actor, designated as UAT-5918, has reportedly targeted critical infrastructure in Taiwan since at least 2023. This group is suspected of aiming to establish long-term access to gather sensitive information, employing various tactics such as web shells and open-source tools for post-compromise activities, according to research by…
More Cybersecurity Firms Targeted in Salesforce-Salesloft Drift Breach In a significant cybersecurity incident, a number of companies, particularly those in the cybersecurity sector, have experienced breaches linked to the Salesforce and Salesloft platforms. This alarming development highlights ongoing vulnerabilities that can have profound implications for data security across industries. The…
Recent intelligence reports indicate that a targeted cyber campaign has been orchestrated by the North Korean state-sponsored threat actor, known as Kimsuky, which exploits a patched vulnerability in Microsoft Remote Desktop Services to establish initial access into victim systems. The AhnLab Security Intelligence Center (ASEC) has identified this malicious activity…
Cyber Espionage Campaign Targets Telecom Providers in the Middle East Telecommunication service providers in the Middle East are currently facing a sophisticated cyber espionage campaign attributed to an undocumented threat actor, identified as WIP26, by cybersecurity firms SentinelOne and QGroup. This operation appears focused on intelligence gathering, leveraging advanced techniques…
HIPAA/HITECH, Standards, Regulations & Compliance U.S. Government Intensifies Enforcement of 21st Century Cures Act Regulations; Fines May Reach $1 Million Marianne Kolbasuk McGee (HealthInfoSec) • September 4, 2025 The U.S. Department of Health and Human Services has announced a ramp-up in enforcement of information blocking regulations under the 21st Century…
Cloudflare Admits to Security Oversight in TLS Certificate Management On Thursday, Cloudflare officially acknowledged a series of failures concerning its handling of TLS certificates. The company stated that it encountered three primary issues: initially, the mismanagement of IP certificates for 1.1.1.1, followed by inadequate filtering of certificate issuance alerts, and…
