The CyberWire Daily Briefing.

"Mozilla patches Firefox flaw similar to the actively exploited Chrome vulnerability."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 31 March 2025, 0031 UTC.

Content and Source:  https://thecyberwire.com/newsletters/daily-briefing

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Issues

V14 | Issue 59 | 3.28.25

Mozilla patches Firefox flaw similar to actively exploited Chrome vulnerability.

Russia-based RedCurl gang deploys ransomware for the first time. Ukraine's railway operator recovers from cyberattack. Morphing Meerkat's phishing kit abuses DNS mail exchange records.

V14 | Issue 58 | 3.27.25

China-linked FamousSparrow remains active with upgraded toolset.

Researchers expose BlackLock ransomware operation. Twelve suspects arrested following the takedown of the Ghost messaging platform.

V14 | Issue 57 | 3.26.25

Fake headhunting firms linked to China target former US Federal workers.

Malicious npm packages infect locally installed legitimate packages. New ransomware gang claims credit for attack on telecom provider.

V14 | Issue 56 | 3.25.25

Top US officials mistakenly leaked war plans on Signal.

Kubernetes patches critical RCE flaws affecting 43% of cloud environments. Interpol operation nabs over 300 suspected cybercriminals.

V14 | Issue 55 | 3.24.25

Clearview AI settles privacy lawsuit for an estimated $50 million.

NYU website breach exposes 3 million applicants’ data. Cloak claims credit for ransomware attack against Virginia Attorney General's Office.

V14 | Issue 54 | 3.21.25

Threat actor targets Taiwan's critical infrastructure sectors.

ESET describes i-Soon operation. Albabat ransomware expands targeting to hit Linux and macOS.

V14 | Issue 53 | 3.20.25

Veeam issues patch for critical flaw affecting Backup & Replication software.

Stalkerware company sustains data breach. Pennsylvania education union discloses breach.

V14 | Issue 52 | 3.19.25

Maximum severity vulnerability can lead to server bricking.

Europol warns of partnerships between state-sponsored actors and cybercriminals. Scareware campaign targets Mac users.

V14 | Issue 51 | 3.18.25

Exploit code published for critical Apache Tomcat flaw.

Microsoft describes a new RAT. Western Alliance Bank discloses breach tied to Cleo attacks.

V14 | Issue 50 | 3.17.25

Major phishing campaign targets GitHub users with fake security alerts.

Black Basta gang crafted brute-forcing framework to gain initial access. ClickFix phishing campaign impersonates Booking.com.