SecurityWeek Briefing.

"Russian hackers bypass g-mail MFA with app specific password ruse."

Views expressed in this cybersecurity, cyber crime update are those of the reportes and correspondents.  Accessed on 19 June 2025, 0427 UTC.

Content and Source:  Email subscription via https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek.

Please check email link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

88K followers43 articles per week

#security#tech

55

Today

Russian Hackers Bypass Gmail MFA with App Specific Password Ruse

4 TTPs

•

by Ryan Naraine / 9h

•

Russian hackers exploit app passwords

Russian hackers posed as US State Department staff and convinced targets to generate and give up Google app-specific passwords. The post appeared first on SecurityWeek .

Gerrit Misconfiguration Exposed Google Projects to Malicious Code Injection

3 TTPs

•

by Ionut Arghire / 11h

Misconfigured permissions in Google’s Gerrit code collaboration platform could have led to the compromise of ChromiumOS and other Google projects. The post appeared first on SecurityWeek .

Critical Vulnerability Patched in Citrix NetScaler

4 TTPs

•

by Ionut Arghire / 15h

Citrix has released patches for critical- and high-severity vulnerabilities in NetScaler and Secure Access Client and Workspace for Windows. The post appeared first on SecurityWeek .

Linux Security: New Flaws Allow Root Access, CISA Warns of Old Bug Exploitation

2 TTPs

•

by Eduard Kovacs / 15h

Qualys has disclosed two Linux vulnerabilities that can be chained for full root access, and CISA added a flaw to its KEV catalog. The post appeared first on SecurityWeek .

Mitigating AI Threats: Bridging the Gap Between AI and Legacy Security

by Stu Sjouwerman / 17h

Adopting a layered defense strategy that includes human-centric tools and updating security components. The post appeared first on SecurityWeek .

OpenAI to Help DoD With Cyber Defense Under New $200 Million Contract

OpenAI wins 200M US defense contract

•

by Eduard Kovacs / 17h

OpenAI has been awarded a $200 million contract for AI capabilities to help the Defense Department address national security challenges. The post appeared first on SecurityWeek .

Yesterday

Chrome 137 Update Patches High-Severity Vulnerabilities

Persistence (Enterprise TA0003)

•

by Ionut Arghire / 18h

Google has released a Chrome 137 update to resolve two memory bugs in the browser’s V8 and Profiler components. The post appeared first on SecurityWeek .

Code Execution Vulnerabilities Patched in Veeam, BeyondTrust Products

by Ionut Arghire / 19h

Veeam and BeyondTrust have resolved several vulnerabilities that could be exploited for remote code execution. The post appeared first on SecurityWeek .

Data Breach at Healthcare Services Firm Episource Impacts 5.4 Million People

Impact (Enterprise TA0040)

•

by Eduard Kovacs / 20h

•

Episource data breach exposes patient info

Hackers have stolen personal and health information belonging to the customers of healthcare organizations served by Episource. The post appeared first on SecurityWeek .

New ClickFix Malware Variant ‘LightPerlGirl’ Targets Users in Stealthy Hack

IoC > 1 domain

•

by Kevin Townsend / 1d

•

13 TTPs

Researchers identify a previously unknown ClickFix variant exploiting PowerShell and clipboard hijacking to deliver the Lumma infostealer via a compromised travel site. The post appeared first on SecurityWeek .

Zyxel Firewall Vulnerability Again in Attacker Crosshairs

by Ionut Arghire / 1d

GreyNoise warns of a spike in exploitation attempts targeting a two-year-old vulnerability in Zyxel firewalls. The post appeared first on SecurityWeek .

US Insurance Industry Warned of Scattered Spider Attacks

2 TTPs

•

by Eduard Kovacs / 1d

•

Scattered Spider targets US insurance

Google is warning insurance companies that Scattered Spider appears to have shifted its focus from the retail sector. The post appeared first on SecurityWeek .

Circumvent Raises $6 Million for Cloud Security Platform

Circumvent raises 6M for cloud security

•

by Ionut Arghire / 1d

Cloud security startup Circumvent has raised $6 million to develop a network of agents for autonomous prioritization and remediation. The post appeared first on SecurityWeek .

Organizations Warned of Vulnerability Exploited Against Discontinued TP-Link Routers

2 TTPs

•

by Ionut Arghire / 1d

CISA warns that a vulnerability impacting multiple discontinued TP-Link router models is exploited in the wild. The post appeared first on SecurityWeek .

Jun 16, 2025

Asus Armoury Crate Vulnerability Leads to Full System Compromise

Privilege Escalation (Enterprise TA0004)

•

by Ionut Arghire / 1d

•

CVE-2025-3464

A high-severity authorization bypass vulnerability in Asus Armoury Crate provides attackers with low-level system privileges. The post appeared first on SecurityWeek .

Recent Langflow Vulnerability Exploited by Flodrix Botnet

10 TTPs

•

by Eduard Kovacs / 1d

•

CVE-2025-3248

A critical Langflow vulnerability tracked as CVE-2025-3248 has been exploited to ensnare devices in the Flodrix botnet. The post appeared first on SecurityWeek .

Google’s $32 Billion Wiz Deal Draws DOJ Antitrust Scrutiny: Report

Google's Wiz acquisition faces antitrust review

•

by SecurityWeek News / 2d

According to reports, the US Department of Justice will assess whether the deal would harm competition in the cybersecurity market. The post appeared first on SecurityWeek .

Archetyp Dark Web Market Shut Down by Law Enforcement

Archetyp Market dismantled by police

•

by Eduard Kovacs / 2d

The Archetyp Market drug marketplace has been targeted by law enforcement in an operation involving takedowns and arrests. The post appeared first on SecurityWeek .

Asheville Eye Associates Says 147,000 Impacted by Data Breach

2 TTPs

•

by Ionut Arghire / 2d

Asheville Eye Associates says the personal information of 147,000 individuals was stolen in a November 2024 data breach. The post appeared first on SecurityWeek .

Zoomcar Says Hackers Accessed Data of 8.4 Million Users

Zoomcar reports data breach

•

by Eduard Kovacs / 2d

The Indian car sharing marketplace Zoomcar learned that its systems were hacked after a threat actor contacted employees. The post appeared first on SecurityWeek .

240,000 Impacted by Data Breach at Eyecare Tech Firm Ocuco

Ocuco data breach affects 240000

•

by Eduard Kovacs / 2d

The KillSec ransomware group has stolen hundreds of gigabytes of data from Ireland-based eyecare technology company Ocuco. The post appeared first on SecurityWeek .

Anubis Ransomware Packs a Wiper to Permanently Delete Files

8 TTPs

•

by Ionut Arghire / 2d

•

Anubis ransomware adds wiper feature

The emerging Anubis ransomware becomes a major threat, permanently deleting user files and making recovery impossible. The post appeared first on SecurityWeek .

Red Teaming AI: The Build Vs Buy Debate

Red teaming AI for safer models

•

by Matt Honea / 2d

A strong AI deployment starts with asking the right questions, mapping your risks, and thinking like an adversary — before it’s too late. The post appeared first on SecurityWeek .

Jun 15, 2025

High-Severity Vulnerabilities Patched in Tenable Nessus Agent

3 TTPs

•

by Ionut Arghire / 2d

Three high-severity Tenable Agent vulnerabilities could allow users to overwrite and delete files, or execute arbitrary code, with System privileges. The post appeared first on SecurityWeek .

Canadian Airline WestJet Hit by Cyberattack

WestJet faces cybersecurity incident

•

by Ionut Arghire / 2d

A cybersecurity incident at WestJet resulted in users experiencing interruptions when accessing the company’s application and website. The post appeared first on SecurityWeek .

Jun 13, 2025

In Other News: Cloudflare Outage, Cracked.io Users Identified, Victoria’s Secret Cyberattack Cost

by SecurityWeek News / 5d

Noteworthy stories that might have slipped under the radar: Cloudflare outage not caused by cyberattack, Dutch police identified 126 users of Cracked.io, the Victoria’s Secret cyberattack has cost $10 million. The post appeared first on SecurityWeek .

TeamFiltration Abused in Entra ID Account Takeover Campaign

8 TTPs

•

by Ionut Arghire / 5d

•

TeamFiltration exploited in Entra ID ATO

Threat actors have abused the TeamFiltration pentesting framework to target over 80,000 Entra ID user accounts. The post appeared first on SecurityWeek .

Industry Reactions to Trump Cybersecurity Executive Order: Feedback Friday

Trump signs cybersecurity executive order

•

by Eduard Kovacs / 5d

Industry professionals comment on the Trump administration’s new executive order on cybersecurity. The post appeared first on SecurityWeek .

SimpleHelp Vulnerability Exploited Against Utility Billing Software Users

by Ionut Arghire / 5d

CISA warns that vulnerable SimpleHelp RMM instances have been exploited against a utility billing software provider’s customers. The post appeared first on SecurityWeek .

Fog Ransomware Attack Employs Unusual Tools

10 TTPs

•

by Ionut Arghire / 5d

Multiple legitimate, unusual tools were used in a Fog ransomware attack, including one employed by Chinese hacking group APT41. The post appeared first on SecurityWeek .