"Millions of Brother Printers hit by critical, unpatched bug."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 29 June 2025, 1430 UTC.

Content and Source:  Email subscription via https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.darkreading.com%2Frss%2Fall.xml

Please check email link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Dark Reading

140K followers36 articles per week

#security#tech

32

Most popular

Millions of Brother Printers Hit by Critical, Unpatchable Bug

6 TTPs

•

72by Alexander Culafi, Senior News Writer, Dark Reading / 3d

•

CVE-2024-51978 & 7 others

A slew of vulnerabilities, including a critical CVSS 9.8 that enables an attacker to generate the default admin password, affect hundreds of printer, scanner, and label-maker models made by manufacturer Brother.

US Falling Behind China in Exploit Production

24by Robert Lemos, Contributing Writer / 2d

Cyber operations have become critical to national security, but the United States has fallen behind in one significant area — exploit production — while China has built up a significant lead.

How Geopolitical Tensions Are Shaping Cyber Warfare

by Andrew Costis / 3d

In today's cyber battlefield, resilience starts with readiness, and the cost of falling short increases by the day.

Jun 27, 2025

Top Apple, Google VPN Apps May Help China Spy on Users

Beware risky Chinese-linked apps

•

by Nate Nelson, Contributing Writer / 1d

Apple and Google espouse strong values about data privacy, but they allow programs from a Big Brother state to thrive on their app stores, researchers allege.

'CitrixBleed 2' Shows Signs of Active Exploitation

2 TTPs

•

by Kristina Beek, Associate Editor, Dark Reading / 1d

If exploited, the critical vulnerability allows attackers to maintain access for longer periods of time than the original CitrixBleed flaw, all while remaining undetected.

Scattered Spider Taps CFO Credentials in 'Scorched Earth' Attack

IoC > 1 IP

•

by Rob Wright / 1d

•

14 TTPs

•

Scattered Spider targets CFO credentials

In a recent intrusion, the notorious cybercriminal collective accessed CyberArk vaults and obtained more 1,400 secrets, subverted Azure, VMware, and Snowflake environments, and for the first known time, actively fought back against incident response teams.

Hackers Make Hay? Smart Tractors Vulnerable to Full Takeover

by Nate Nelson, Contributing Writer / 1d

Hackers can spy on tens of thousands of connected tractors in the latest IoT threat, and brick them too, thanks to poor security in an aftermarket steering system.

Vulnerability Debt: How Do You Put a Price on What to Fix?

by Matt Middleton-Leal / 2d

Putting a vulnerability debt figure together involves work, but having vulnerability debt figures lets you measure real-world values against your overall security posture.

Jun 26, 2025

'Cyber Fattah' Hacktivist Group Leaks Saudi Games Data

3 TTPs

•

by Kristina Beek, Associate Editor, Dark Reading / 2d

•

Iran-linked group leaks Saudi Games data

As tensions in the Middle East rise, hacktivist groups are coming out of the woodwork with their own agendas, leading to notable shifts in the hacktivist threat landscape.

'IntelBroker' Suspect Arrested, Charged in High-Profile Breaches

British hacker charged with data theft

•

by Rob Wright / 2d

A British national arrested earlier this year in France was charged by the US Department of Justice in connection with a string of major cyberattacks.

Cloud Repatriation Driven by AI, Cost, and Security

by Arielle Waldman / 3d

Organizations are moving away from the public cloud and embracing a more hybrid approach due to big changes over the past five years.

Taming Agentic AI Risks Requires Securing Non-Human Identities

by Robert Lemos, Contributing Writer / 3d

As the definition of machine identities broadens, AI agents working on behalf of users and gaining access to various services blurs the lines of non-human identities even more.

Jun 25, 2025

Charming Kitten APT Tries Spying on Israeli Cybersecurity Experts

6 TTPs

•

by Nate Nelson, Contributing Writer / 3d

•

Iranian group targets Israeli academics

Israel's cyber pros are having to put theory into practice, as a notorious nation-state APT sponsored by Iran targets them with spear-phishing attacks.

And Now Malware That Tells AI to Ignore It?

2 TTPs

•

by Jai Vijayan, Contributing Writer / 3d

•

New malware exploits AI prompt injection

Though rudimentary and largely non-functional, the wryly named "Skynet" binary could be a harbinger of things to come on the malware front.

CISA Is Shrinking: What Does It Mean for Cyber?

by Dark Reading Staff / 3d

Dark Reading Confidential Episode 7: Cyber experts Tom Parker and Jake Williams offer their views on the practical impact of cuts to the US Cybersecurity and Infrastructure Security Agency.

Dire Wolf Ransomware Comes Out Snarling, Bites Technology, Manufacturing

19 TTPs

•

by Elizabeth Montalbano, Contributing Writer / 3d

•

Dire Wolf ransomware targets global sectors

The emerging group has already gotten its teeth into 16 victims since May with its double extortion tactics, claiming victims in 11 countries, including the US, Thailand, and Taiwan.

Hundreds of MCP Servers Expose AI Models to Abuse, RCE

by Nate Nelson, Contributing Writer / 3d

The servers that connect AI with real-world data are occasionally wide-open channels for cyberattacks.

Generative AI Exacerbates Software Supply Chain Risks

by Georgianna Shea, Elaine Ly / 4d

Malicious actors are exploiting AI-fabricated software components — presenting a major challenge for securing software supply chains.

XOR Marks the Flaw in SAP GUI

5 TTPs

•

by Jai Vijayan, Contributing Writer / 4d

The company has patched two vulnerabilities in its Graphical User Interface that would have allowed attackers to grab data from a user's input history feature.

Jun 24, 2025

Africa Sees Surge in Cybercrime as Law Enforcement Struggles

Cybercrime surges in Africa

•

by Robert Lemos, Contributing Writer / 4d

Cybercrime accounts for more than 30% of all reported crime in East Africa and West Africa, with online scams, ransomware, business email compromise, and digital sextortion taking off.

Threat Actor Trojanizes Copy of SonicWall NetExtender VPN App

IoC > 1 IP

•

by Alexander Culafi, Senior News Writer, Dark Reading / 4d

•

9 TTPs

•

Fake SonicWall app steals credentials

A threat actor hacked a version of SonicWall's NetExtender SSL VPN application in an effort to trick users into installing a Trojanized version of the product.

China-Nexus 'LapDogs' Network Thrives on Backdoored SOHO Devices

7 TTPs

•

by Rob Wright / 4d

•

China-linked LapDogs cyber espionage campaign

The campaign infected devices in the US and Southeast Asia to build an operational relay box (ORB) network for use as an extensive cyber-espionage infrastructure.

Steel Giant Nucor Confirms Data Stolen in Cyberattack

3 TTPs

•

by Kristina Beek, Associate Editor, Dark Reading / 4d

•

Nucor confirms data theft attack

America's largest steel producer initially disclosed the breach in May and took potentially affected systems offline to investigation the intrusion and contain any malicious activity.

Oh! Canada Added to List of Nations Targeted in Salt Typhoon Telecom Spree

6 TTPs

•

by Elizabeth Montalbano, Contributing Writer / 4d

The Canadian Center for Cybersecurity has confirmed that the Chinese state-sponsored cyber-threat actor targeted one of its telecommunications companies in February via a Cisco flaw, as part of global attack wave.

How the US Military Is Redefining Zero Trust

by Kelly Davis / 5d

Trust no longer comes from network boundaries alone but from continuously validating and protecting data and identities at every interaction.

IBM Pushes for More Collaboration Between Security, Governance

IBM launches AI security software

•

by Jeffrey Schwartz / 5d

IBM is integrating its governance and AI security tools to address the risks associated with the AI adoption boom.