SecurityWeek Briefing.

"Apple patches major securitiy flaws in iOS, macOS platforms."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents. Accessed on 13 May 2025, 0216 UTC.

Content and Source: Email subscription via https://feedly.com.

https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check email link or scroll down to read your selections. Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Today

Apple Patches Major Security Flaws in iOS, macOS Platforms

2 TTPs

•

by Ryan Naraine / 7h

Apple rolls out iOS and macOS platform updates to fix serious security bugs that could be triggered simply by opening an image or video file. The post appeared first on SecurityWeek .

Security Firm Andy Frain Says 100,000 People Impacted by Ransomware Attack

by Eduard Kovacs / 12h

Andy Frain was targeted by the Black Basta ransomware group in 2024 and the hackers have stolen a wide range of information. The post appeared first on SecurityWeek .

Google Agrees to $1.3 Billion Settlement in Texas Privacy Lawsuits

Google settles Texas privacy lawsuits

•

by Ionut Arghire / 13h

Google has agreed to a $1.375 billion settlement with Texas in lawsuits over location and private browsing tracking, and biometric data collection. The post appeared first on SecurityWeek .

437,000 Impacted by Ascension Health Data Breach

2 TTPs

•

by Ionut Arghire / 14h

•

Ascension data breach affects 430000 patients

Ascension Health has notified the HHS that more than 437,000 people were affected by a recently disclosed data breach. The post appeared first on SecurityWeek .

Asus DriverHub Vulnerabilities Expose Users to Remote Code Execution Attacks

2 TTPs

•

by Ionut Arghire / 14h

•

ASUS patches critical DriverHub vulnerabilities

Two vulnerabilities in ASUS’s pre-installed software DriverHub can be exploited for remote code execution. The post appeared first on SecurityWeek .

US Deportation Airline GlobalX Confirms Hack

Collection (Enterprise TA0009)

•

by Eduard Kovacs / 15h

•

GlobalX airline hacked by Anonymous

Global Crossing Airlines is investigating a cybersecurity incident after Anonymous hackers targeted its systems. The post appeared first on SecurityWeek .

Yesterday

German Authorities Take Down Crypto Swapping Service eXch

Germany seizes 34M euros from eXch

•

by Ionut Arghire / 16h

German authorities seized the servers of crypto-swapping service eXch for laundering approximately $1.9 billion in fraudulent assets. The post appeared first on SecurityWeek .

US Announces Botnet Takedown, Charges Against Russian Administrators

3 TTPs

•

by Eduard Kovacs / 17h

•

FBI and Dutch police shut down botnet

Anyproxy and 5socks, websites offering proxy services through devices ensnared by a botnet, have been disrupted in a law enforcement operation. The post appeared first on SecurityWeek .

May 9, 2025

In Other News: India-Pakistan Cyberattacks, Radware Vulnerabilities, xAI Leak

by Eduard Kovacs / 3d

Noteworthy stories that might have slipped under the radar: surge in cyberattacks between India and Pakistan, Radware cloud WAF vulnerabilities, xAI key leak. The post appeared first on SecurityWeek .

2 TTPs

•

by Ionut Arghire / 3d

•

Malicious code found in rand-user-agent

Supply chain attack compromises the popular rand-user-agent NPM package to deploy and activate a backdoor. The post appeared first on SecurityWeek .

160,000 Impacted by Valsoft Data Breach

Collection (Enterprise TA0009)

•

by Ionut Arghire / 3d

VMS firm Valsoft Corporation says the personal information of over 160,000 people was compromised in a February 2025 data breach. The post appeared first on SecurityWeek .

Malicious NPM Packages Target Cursor AI’s macOS Users

Malicious npm packages target Cursor users

•

by Ionut Arghire / 3d

Three NPM packages posing as developer tools for Cursor AI code editor’s macOS version contain a backdoor. The post appeared first on SecurityWeek .

Rising Tides: Kelley Misata on Bringing Cybersecurity to Nonprofits

by Jennifer Leggio / 3d

Sightline Security’s founder explains why nonprofits need cybersecurity solutions tailored to their unique missions — and why vendors need to listen. The post appeared first on SecurityWeek .

SAP Zero-Day Targeted Since January, Many Sectors Impacted

by Ionut Arghire / 3d

Hundreds of SAP NetWeaver instances hacked via a zero-day that allows remote code execution, not only arbitrary file uploads, as initially believed. The post appeared first on SecurityWeek .

Company and Personal Data Compromised in Recent Insight Partners Hack

Insight Partners data breach confirmed

•

by Eduard Kovacs / 3d

VC firm Insight Partners is informing partners and employees that their information was exposed in the January 2025 cyberattack. The post appeared first on SecurityWeek .

May 8, 2025

LockBit Ransomware Admin Panel Hacked, Leaks Reveal Inside Details

2 TTPs

•

by Eduard Kovacs / 3d

•

LockBit ransomware gang hacked database exposed

Private messages, Bitcoin addresses, victim data, and attacker information were leaked after someone hacked a LockBit admin panel. The post appeared first on SecurityWeek .

Valarian Bags $20M Seed Capital for ‘Isolation-First’ Infrastructure Tech

by SecurityWeek News / 4d

British startup exits stealth with $20 million in seed-stage financing led by US investors Scout Ventures and Artis Ventures. The post appeared first on SecurityWeek .

Europol Announces More DDoS Service Takedowns, Arrests

2 TTPs

•

by Eduard Kovacs / 4d

•

Police arrest DDoS-for-hire suspects

Four people have been arrested in Poland and several websites associated with DDoS-for-hire services have been shut down. The post appeared first on SecurityWeek .

Possible Zero-Day Patched in SonicWall SMA Appliances

6 TTPs

•

by Ionut Arghire / 4d

•

CVE-2025-32819 & 2 others

SonicWall patches three SMA 100 vulnerabilities, including a potential zero-day, that could be chained to execute arbitrary code remotely. The post appeared first on SecurityWeek .

Russia-Linked APT Star Blizzard Uses ClickFix to Deploy New LostKeys Malware, Google Warns

10 TTPs

•

by Ionut Arghire / 4d

•

New malware LostKeys linked to Coldriver

Russia-linked APT Star Blizzard is using the ClickFix technique in recent attacks distributing the LostKeys malware. The post appeared first on SecurityWeek .

Improperly Patched Samsung MagicINFO Vulnerability Exploited by Botnet

4 TTPs

•

by Ionut Arghire / 4d

•

CVE-2024-7399

The patches for an exploited Samsung MagicINFO vulnerability are ineffective and a Mirai botnet has started targeting it. The post appeared first on SecurityWeek .

May 7, 2025

Cisco Patches 35 Vulnerabilities Across Several Products

6 TTPs

•

by Ionut Arghire / 4d

Cisco releases patches for 26 vulnerabilities in IOS and IOS XE software, including 17 critical- and high-severity bugs. The post appeared first on SecurityWeek .

Dozens of SysAid Instances Vulnerable to Remote Hacking

4 TTPs

•

by Eduard Kovacs / 4d

SysAid patches IT service management software vulnerabilities that can be chained for unauthenticated remote command execution. The post appeared first on SecurityWeek .

Masimo Manufacturing Facilities Hit by Cyberattack

Masimo cyber attack disrupts manufacturing

•

by Eduard Kovacs / 4d

Health technology and consumer electronics firm Masimo detected unauthorized activity on its network in late April. The post appeared first on SecurityWeek .

Cisco’s Quantum Bet: Linking Small Machines Into One Giant Quantum Computer

Cisco unveils quantum networking chip

•

by Kevin Townsend / 5d

Cisco unveils its Quantum Network Entanglement Chip and new Quantum Labs, laying the groundwork for a scalable quantum internet that connects distributed quantum computers into a unified, powerful system. The post appeared first on SecurityWeek .

CodeAnt AI Raises $2 Million for Code Quality and Application Security Platform

CodeAnt AI raises 2M$ for code review

•

by Eduard Kovacs / 5d

Code quality and security firm CodeAnt has secured $2 million in seed funding and it has been valued at $20 million. The post appeared first on SecurityWeek .

CrowdStrike Plans Layoffs to Pursue $10B ARR Target

by SecurityWeek News / 5d

CrowdStrike said the planned cuts will affect approximately 500 employees and will span the first half of fiscal 2026. The post appeared first on SecurityWeek .

Ox Security Bags $60M Series B to Tackle Appsec Alert Fatigue

OX Security raises 60M Series B

•

by SecurityWeek News / 5d

Ox Security has raised a total $94 million since its launch in 2021 with ambitious plans to cash in on two fast-moving trends. The post appeared first on SecurityWeek .

New UK Framework Pressures Vendors on SBOMs, Patching and Default MFA

Software security code of practice

•

by Ryan Naraine / 5d

By baking minimum expectations into procurement conversations, the plan is to steer software vendors to “secure-by-design and default” basics. The post appeared first on SecurityWeek .

US Sanctions Myanmar Militia Involved in Cyber Scams

US sanctions Myanmar warlord militia

•

by Ionut Arghire / 5d

The US has sanctioned Myanmar warlord Saw Chit Thu and his militia for their roles in cyber scams causing billions in losses to American victims. The post appeared first on SecurityWeek .

Spyware Maker NSO Ordered to Pay $167 Million Over WhatsApp Hack

Meta wins $168 million from NSO

•

by Eduard Kovacs / 5d

Meta has won its WhatsApp hacking lawsuit against Israeli spyware company NSO Group in an “important step forward for privacy and security”. The post appeared first on SecurityWeek .

AppSignal Raises $22 Million for Application Monitoring Solution

AppSignal raises 22M Series A

•

by Ionut Arghire / 5d

Application performance monitoring provider AppSignal has raised $22 million in a Series A funding round led by Elsewhere Partners. The post appeared first on SecurityWeek .

Second Ransomware Group Caught Exploiting Windows Flaw as Zero-Day

3 TTPs

•

by Eduard Kovacs / 5d

At least two ransomware groups exploited the Windows zero-day CVE-2025-29824 before it was patched by Microsoft. The post appeared first on SecurityWeek .

May 6, 2025

Second OttoKit Vulnerability Exploited to Hack WordPress Sites

4 TTPs

•

by Ionut Arghire / 5d

Threat actors are targeting a critical-severity vulnerability in the OttoKit WordPress plugin to gain administrative privileges. The post appeared first on SecurityWeek .

US Warns of Hackers Targeting ICS/SCADA at Oil and Gas Organizations

by Ionut Arghire / 5d

The US government warns of threat actors targeting ICS/SCADA systems at oil and natural gas organizations. The post appeared first on SecurityWeek .

41 Countries Taking Part in NATO’s Locked Shields 2025 Cyber Defense Exercise

by Eduard Kovacs / 5d

The NATO Cooperative Cyber Defence Centre of Excellence in Estonia is hosting the Locked Shields 2025 cyber defense exercise. The post appeared first on SecurityWeek .

Applying the OODA Loop to Solve the Shadow AI Problem

by Etay Maor / 6d

By taking immediate actions, organizations can ensure that shadow AI is prevented and used constructively where possible. The post appeared first on SecurityWeek .

Hacker Conversations: John Kindervag, a Making not Breaking Hacker

by Kevin Townsend / 6d

John Kindervag is best known for developing the Zero Trust Model. He is a hacker, but not within our common definition of a hacker today. The post appeared first on SecurityWeek .

Second Wave of Attacks Hitting SAP NetWeaver After Zero-Day Compromise

6 TTPs

•

by Ionut Arghire / 6d

•

CVE-2025-31324

Threat actors are revisiting SAP NetWeaver instances to leverage webshells deployed via a recent zero-day vulnerability. The post appeared first on SecurityWeek .

US Charges Yemeni Man for Black Kingdom Ransomware Attacks

Yemeni national indicted for ransomware

•

by Eduard Kovacs / 6d

Rami Khaled Ahmed, a 36-year-old from Yemen, has been charged for launching ransomware attacks between 2021 and 2023. The post appeared first on SecurityWeek .

Samsung MagicINFO Vulnerability Exploited Days After PoC Publication

2 TTPs

•

by Ionut Arghire / 6d

•

CVE-2024-7399

Threat actors started exploiting a vulnerability in Samsung MagicINFO only days after a PoC exploit was published. The post appeared first on SecurityWeek .

Critical Vulnerability in AI Builder Langflow Under Attack

4 TTPs

•

by Ionut Arghire / 6d

CISA warns organizations that threat actors are exploiting a critical-severity vulnerability in low-code AI builder Langflow. The post appeared first on SecurityWeek .

Microsoft Warns of Attackers Exploiting Misconfigured Apache Pinot Installations

by Eduard Kovacs / 6d

Misconfigured Apache Pinot instances can and have enabled threat actors to gain access to sensitive information. The post appeared first on SecurityWeek .

May 5, 2025

Android Update Patches FreeType Vulnerability Exploited as Zero-Day

by Ionut Arghire / 6d

Android’s May 2025 security update includes patches for an exploited vulnerability in the FreeType open source rendering engine. The post appeared first on SecurityWeek .

White House Proposal Slashes Half-Billion From CISA Budget

Ex-CISA chief criticizes Trump loyalty cuts

•

by Ryan Naraine / 7d

The proposed $491 million cut is being positioned as a “refocusing”of CISA on its core mission “while eliminating weaponization and waste.” The post appeared first on SecurityWeek .

Doppel Banks $35M for AI-Based Digital Risk Protection

Doppel raises 35M Series B

•

by SecurityWeek News / 7d

The new investment values Doppel at $205 million and provides runway to meet enterprise demand for AI-powered threat detection tools. The post appeared first on SecurityWeek .

Kelly Benefits Data Breach Impact Grows to 400,000 Individuals

Exfiltration (Enterprise TA0010)

•

by Eduard Kovacs / 7d

Kelly Benefits has determined that the impact of the recently disclosed data breach is much bigger than initially believed. The post appeared first on SecurityWeek .

Critical Commvault Vulnerability in Attacker Crosshairs

2 TTPs

•

by Ionut Arghire / 7d

CISA has flagged a critical-severity Commvault vulnerability as exploited one week after technical details were released. The post appeared first on SecurityWeek .

Man Admits Hacking Disney and Leaking Data Disguised as Hacktivist

2 TTPs

•

by Eduard Kovacs / 7d

•

Man pleads guilty to Disney hack

A 25-year-old has admitted hacking Disney systems and leaking data under the guise of a hacktivist collective named NullBulge. The post appeared first on SecurityWeek .

Ransomware Group Claims Attacks on UK Retailers

11 TTPs

•

by Ionut Arghire / 7d

The DragonForce ransomware group has claimed responsibility for the recent cyberattacks on UK retailers Co-op, Harrods, and M&S. The post appeared first on SecurityWeek .

May 4, 2025

PoC Published for Exploited SonicWall Vulnerabilities

2 TTPs

•

by Ionut Arghire / 7d

PoC code targeting two exploited SonicWall flaws was published just CISA added them to the KEV catalog. The post appeared first on SecurityWeek .

Cybersecurity M&A Roundup: 31 Deals Announced in April 2025

by Eduard Kovacs / 7d

Thirty-one cybersecurity merger and acquisition (M&A) deals were announced in April 2025. The post appeared first on SecurityWeek .

TikTok Fined $600 Million for China Data Transfers That Broke EU Privacy Rules

TikTok fined for EU data violations

•

by Associated Press / 7d

EU privacy watchdog fined TikTok $600 million after a four-year investigation found that data transfers to China put users at risk of spying, in breach of strict EU data privacy rules. The post appeared first on SecurityWeek .

May 2, 2025

Raytheon, Nightwing to Pay $8.4 Million in Settlement Over Cybersecurity Failures

Raytheon Nightwing pay 84M$ settlement

•

by Ionut Arghire / 10d

The US government says defense contractor Raytheon and Nightwing agreed to pay $8.4 million to settle False Claims Act allegations. The post appeared first on SecurityWeek .

In Other News: NullPoint Source Code Leak, $17,500 for iPhone Flaw, BreachForums Down

7 TTPs

•

by SecurityWeek News / 10d

Noteworthy stories that might have slipped under the radar: NullPoint Stealer source code leaked, researcher earns $17,500 from Apple for vulnerability, BreachForums down after zero-day exploitation by police. The post appeared first on SecurityWeek .

UK Retailers Co-op, Harrods and M&S Struggle With Cyberattacks

4 TTPs

•

by Ionut Arghire / 10d

•

Harrods targeted by cyber attack

Major UK retailers Co-op, Harrods, and M&S are scrambling to restore services that were affected by cyberattacks. The post appeared first on SecurityWeek .

Nova Scotia Power Says Hackers Stole Customer Information

Emera Nova Scotia Power cybersecurity response

•

by Eduard Kovacs / 10d

Nova Scotia Power’s investigation has shown that the recent cyberattack resulted in the theft of some customer information. The post appeared first on SecurityWeek .

RSA Conference 2025 Announcement Summary (Day 3)

RSA Conference 2025 showcases cybersecurity

•

by SecurityWeek News / 10d

Hundreds of companies showcased their products and services this week at the 2025 edition of the RSA Conference in San Francisco. The post appeared first on SecurityWeek .

Hawaii Cybersecurity Journal