Ivan C.

Weekend Cybersecurity Roundup | August 15–17, 2025 Here are the key incidents and trends, organized by category for executives, leaders, and cybersecurity professionals: 📁 Data Breaches Check-Out Breach — Thousands of guests at Italian hotels had personal data—including passport scans and ID cards—exposed after attackers breached the booking system. Italy’s digital agency (AGID) confirmed the authenticity, and the data is now being sold in underground forums, TechRadar reports. Parliament Leak — A Microsoft SharePoint zero-day (CVE-2025-53770) was exploited in the Canadian House of Commons, exposing staff names, job titles, and device details. The incident could lead to targeted phishing, ITPro notes. 🛠️ Vulnerabilities & Zero-Days • Radius of Risk — Cisco issued an urgent alert about a RADIUS/FMC flaw (CVE-2025-20188) with a maximum CVSS 10.0 rating. The bug enables remote code execution and full system compromise, The Hacker News says. • MadeYouReset — A newly disclosed HTTP/2 flaw (CVE-2025-8671) could fuel massive DDoS storms, raising concern across the security community, according to Daily Security Review. 🎣 Phishing & Social Engineering • Unicode Trap — Phishers are exploiting Unicode typosquatting by replacing “/” with the hiragana character ん. The trick lures Booking​.com property listers into installing info-stealers and RATs, TechRadar warns. • Stock Scam — New phishing kits are targeting brokerage accounts, using compromised credentials to manipulate stock prices. Fraudsters also turn stolen card data into mobile wallets, Krebs on Security reports. 🚨 Emerging Threats & Trends • EDR Killers — Crypto24 ransomware now uses “EDR-killing” techniques, marking a dangerous evolution in ransomware tactics, Dark Reading highlights. • AI Twins — “Digital twins” of AI workers are emerging as insider threats, adding new risks for organizations, Information Security Media Group (ISMG) warns. Why It Matters → Sensitive staff and guest information is being exposed—creating regulatory, reputational, and phishing risks. → Critical flaws in systems like RADIUS and HTTP/2 demand immediate patching. → Phishing techniques are becoming more sophisticated, bypassing traditional defenses. → OT and AI-driven threats are rapidly evolving, requiring proactive strategies. Stay ahead of these threats. Contact wizlynx group for proactive cybersecurity support and guidance: https://bit.ly/44tzT9j #CyberSecurityNews #InfoSec #CISO #ITSecurity #CyberThreats #SecurityAwareness

73

2 commenti

🚨 𝗟𝗮𝘇𝗮𝗿𝘂𝘀 𝗛𝗮𝗰𝗸𝗲𝗿𝘀 𝗘𝘅𝗽𝗹𝗼𝗶𝘁 𝗙𝗮𝗸𝗲 𝗝𝗼𝗯 𝗢𝗳𝗳𝗲𝗿𝘀 𝗼𝗻 𝗪𝗶𝗻𝗱𝗼𝘄𝘀 𝟭𝟭  | Read more: https://lnkd.in/g_jZak9z The Lazarus Group is tricking job seekers with fake interviews and “webcam fixes” that are actually malware. Dubbed ClickFix, the attack installs BeaverTail and InvisibleFerret, enabling data theft, surveillance, and persistent compromise on Windows & macOS. ⚠️ Stay alert: Never download files from unverified recruiters. #CyberSecurity #Windows11 #LazarusGroup #Malware

188

8 commenti